Allow installation default
Verified with Microsoft Edge 152.0.4191.53 — updated on July 12, 2026
Supported on: Microsoft Edge Update 1.2.145.5 and later
Path in the GPO console
Computer Configuration\Administrative Templates\Microsoft Edge Update\Applications Description
You can specify the default behavior of all channels to allow or block Microsoft Edge on domain-joined devices. You can override this policy for individual channels by enabling (1) the 'Allow installation' policy for specific channels. If you disable (2) this policy, the installation of Microsoft Edge is blocked. This only affects the installation of Microsoft Edge software when the 'Allow installation' policy is set to Not Configured. This policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods. This policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.
Registry
HKLM
Software\Policies\Microsoft\EdgeUpdate Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Allow installation default
; State: Enabled
; Supported on: Microsoft Edge Update 1.2.145.5 and later
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EdgeUpdate]
"InstallDefault"=dword:00000001More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
$path = 'HKLM:\Software\Policies\Microsoft\EdgeUpdate'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'InstallDefault' -Value 1 -Type DWordIntune XML
No direct Policy CSP / OMA-URI mapping for this policy. Use the Intune Remediation tab, or ingest the ADMX in Intune.Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\EdgeUpdate' -Name 'InstallDefault' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
$path = 'HKLM:\Software\Policies\Microsoft\EdgeUpdate'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'InstallDefault' -Value 1 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\EdgeUpdate' -Name 'InstallDefault' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Allow installation default
# State: Enabled
# Supported on: Microsoft Edge Update 1.2.145.5 and later
$path = 'HKLM:\Software\Policies\Microsoft\EdgeUpdate'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'InstallDefault' -Value 1 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.