EDGE MDM FakeEnrollment Windows 10
Verfasst: 12.04.2023, 19:31
#moinmoin - funkt das mit den zwei *.reg für die "Edge Policies"?
my-MDM-FakeEnrollment-Win10.reg
(Beispiel:) my-EdgeChromium-Policies-Mandatory.reg
my-MDM-FakeEnrollment-Win10.reg
Code: Alles auswählen
Windows Registry Editor Version 5.00
; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"EnrollmentState"=dword:00000001
"EnrollmentType"=dword:00000000
"IsFederated"=dword:00000000
; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"
Code: Alles auswählen
Windows Registry Editor Version 5.00
# You need to apply the "MDM-FakeEnrollment" to get these Policies working! Without Fake-MDM-Enrollemnt they are ignored
# Policy Guide: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"SyncDisabled"=dword:00000001
"SavingBrowserHistoryDisabled"=dword:00000001
"AutofillCreditCardEnabled"=dword:00000000
"EditFavoritesEnabled"=dword:00000000
"ForceYouTubeRestrict"=dword:00000002
"BrowserSignin"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"SitePerProcess"=dword:00000001
"AutoplayAllowed"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"DefaultWebBluetoothGuardSetting"=dword:00000002
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"Disable3DAPIs"=dword:00000001
"SearchInSidebarEnabled"=dword:00000002
"UserAgentReduction"=dword:00000002
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"LocalProvidersEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"WebCaptureEnabled"=dword:00000000
"ConfigureShare"=dword:00000001
"DefaultPopupsSetting"=dword:00000002
"DefaultGeolocationSetting"=dword:00000002
"NetworkPredictionOptions"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"RestoreOnStartup"=dword:00000004
"ShowHomeButton"=dword:00000001
"HomepageLocation"="about:blank"
"NewTabPageLocation"="about:blank"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="about:blank"
"2"="about:blank"