Configure browser process code integrity guard setting
Supported on: Microsoft Edge version 104, Windows 7 or later
Registry
Software\Policies\Microsoft\Edge Software\Policies\Microsoft\Edge Options
BrowserCodeIntegritySetting enum - Do not enable code integrity guard in the browser process.
->
0 - Enable code integrity guard audit mode in the browser process.
->
1 - Enable code integrity guard enforcement in the browser process.
->
2
Description
This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load. If you enable this policy, it enables code integrity guard in the browser process. If you disable or don't configure this policy, it prevents the browser from enabling code integrity guard in the browser process. The policy value Audit (1) is obsolete as of Microsoft Edge version 110. Setting this value is equivalent to the Disabled value. This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management. This policy only takes effect on Windows 10 RS2 and above. Policy options mapping: * Disabled (0) = Do not enable code integrity guard in the browser process. * Audit (1) = Enable code integrity guard audit mode in the browser process. * Enabled (2) = Enable code integrity guard enforcement in the browser process. Use the preceding information when configuring this policy.