Microsoft Edge Adobe Flash

30-04-2021
 |  [RAND-100] - Comments



The extension does all the work for you. No need to download extra apps, use old Flash versions, or be without your favorite games. Play games, videos, and other Flash content on any website, including Armor Games, New York Times, Internet Archive, and more. Steps to enable or disable Use Adobe Flash Player in Microsoft Edge: Step 1: Open Start Menu and click Microsoft Edge. Step 2: Tap the More actions button on the top-right corner, and open Settings. Step 3: Hit View advanced settings under Advanced settings. Step 4: Turn off or on Use Adobe Flash Player to have it disabled or enabled.

  1. Update Flash Player
  2. Microsoft Edge Adobe Flash Upgrade
  3. Microsoft Edge Adobe Flash Blocked

Note: Adobe Flash will no longer be supported after 2020. Microsoft plans to remove Flash from Windows entirely by the end of 2020.

Because Flash will no longer be supported after 2020, it is turned off by default in the new Microsoft Edge. Other browsers like Google Chrome, Mozilla, and Safari are also planning on removing Adobe Flash in the same timeframe.

For more information about the end of Flash support, see Adobe Flash end of support on December 31, 2020.

Adobe

Here’s how to allow or block Flash permanently for individual websites:

  1. Go to Settings and more > Settings .

  2. In the left navigation, select Site permissions.

  3. In Site permissions, select Adobe Flash.

  4. Set the toggle on for the Ask before running Flash option.

The Block and Allow lists will be available after you visit a site that uses Flash.

The next time you visit a site the uses Flash, the browser will ask for your permission before allowing Flash to run.

Adobe

Note: This topic is for the new Microsoft Edge . Get help for the legacy version of Microsoft Edge.

-->

View the Microsoft Edge web browser baseline settings that are supported by Microsoft Intune. The Microsoft Edge baseline defaults represent the recommended configuration for Microsoft Edge browsers, and might not match baseline defaults for other security baselines.

Note

The Microsoft Edge baseline for October 2019 is in Public Preview.

To update a security baseline profile to the latest version of that baseline, see Change the baseline version for a profile.

Update

Microsoft Edge baseline for April 2020 (Edge version 80)

Microsoft Edge baseline for September 2020 (Edge version 85)

This version of the security baseline replaces previous versions. Profiles that were created prior to the availability of this baseline version:

  • Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
  • Can be updated to the latest version. After update the current baseline version, you can edit the profile to modify settings.

To understand what's changed with this version of the baseline from previous versions, use the Compare baselines action that's available when viewing the Versions pane for this baseline. Be sure to select the version of the baseline that you want to view.

Microsoft

To update a security baseline profile to the latest version of that baseline, see Change the baseline version for a profile.

  • Supported authentication schemes
    Use this setting to change the default behavior of Edge as to the HTTP authentication schemes that Edge can use. Edge supports and can use the following schemes: basic, digest, ntlm, and negotiate.

    • Enabled (default) - When set to Enabled, you can then configure the following setting where you specify which of the four HTTPS authentication schemes Edge can use.
    • Disabled
    • Not configured - When set to Not configured, Edge will support all four schemes.

    Supported authentication schemes - To access this setting, the previous instance of Supported authentication schemes must be set to Enabled.

    Select one or more HTTP authentication schemes for by Edge. By default, two are already selected: Download 2000 9.0b directwindow x.

    • Basic
    • Digest
    • NTLM(Selected by default)
    • Negotiate(Selected by default)

    For more information, see AuthSchemes in the Microsoft Edge policies documentation, and Understanding HTTP authentication in the .NET Framework documentation.

  • Default Adobe Flash setting
    CSP: Browser/AllowFlash, and Browser/AllowFlashClickToRun

    Enable access to the following setting where you can configure behavior for running the Adobe Flash plug-in.

    • Enabled (default)
    • Disabled
    • Not configured

    When set to Enabled you can configure the following setting.

    • Default Adobe Flash setting

      • Block the Adobe Flash plugin (default) - Block Adobe Flash on all sites
      • Click to play - Adobe Flash runs, but the user must select the option to start it.

  • Control which extensions cannot be installed
    Enable use of a list that specifies extensions that users can't install in Microsoft Edge. When the list is in use, any settings on the list that were previously installed are disabled, and the user can't enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.

    • Enabled (default) - Enable use of the list to block extensions.
    • Disabled
    • Not configured - Users can install any extension in Microsoft Edge.

    When set to Enabled, you can configure the following setting that defines the list of extensions to block.

    • Extension IDs the user should be prevented from installing (or * for all)

      Select Add and specify additional extensions. * is selected by default.

  • Allow user-level native messaging hosts (installed without admin permissions)
    Enables user-level installation of native messaging hosts.

    • Enabled
    • Disabled (default) - Microsoft Edge uses only native messaging hosts installed on the system level.
    • Not configured - By default, Microsoft Edge allows use of user-level native messaging hosts.

  • Enable saving passwords to the password manager
    Microsoft Edge CSP: Browser/AllowPasswordManager

    Enable Microsoft Edge to save user passwords.

    • Enabled - Users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically. Users can't change or override this policy in Microsoft Edge.
    • Disabled (default) - Users can't save new passwords, but can continue to use previously saved passwords. Users can't change or override this policy in Microsoft Edge.
    • Not configured - Users can save passwords, and turn off this feature.

  • Prevent bypassing Microsoft Defender SmartScreen prompts for sites
    CSP: Browser/PreventSmartScreenPromptOverride

    Decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.

    • Enabled (default) - Users can't ignore Microsoft Defender SmartScreen warnings and they're blocked from continuing to the site.
    • Disabled - Users can ignore Microsoft Defender SmartScreen warnings and continue to the site.
    • Not configured Users can ignore Microsoft Defender SmartScreen warnings and continue to the site

  • Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads
    CSP: Browser/PreventSmartScreenPromptOverrideForFiles

    Determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.

    • Enabled (default) - Users can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.
    • Disabled - Users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.
    • Not configured - Users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.

  • Enable site isolation for every site
    Configure site isolation to prevent users from opting out of the default behavior of isolating all sites.

    • Enabled (default) - Users can't opt out of the default behavior where each site runs in its own process.
    • Disabled - Users can opt out of site isolation. Site isolation is not turned off.
    • Not configured - Users can opt out of site isolation. Site isolation is not turned off.

    Microsoft Edge also supports IsolateOrigins policy that can isolate additional, finer-grained origins. Intune doesn't support configuring the IsolateOrigins policy.

  • Configure Microsoft Defender SmartScreen
    CSP: Browser/AllowSmartScreen

    Microsoft Defender SmartScreen provides warning messages to help protect users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.

    • Enabled (default) - Microsoft Defender SmartScreen is turned on and users can't turn it off.
    • Disabled - Microsoft Defender SmartScreen is turned off and users can't turn it on.
    • Not configured Users can choose whether to use Microsoft Defender SmartScreen.

    This policy is available only on Windows instances that are joined to a Microsoft Active Director domain, or on Windows 10 Pro or Enterprise instances that are enrolled for device management.

  • Configure Microsoft Defender SmartScreen to block potentially unwanted apps
    Configure Microsoft Defender SmartScreen behavior for blocking potentially unwanted apps. Microsoft Defender SmartScreen can provide a warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking in Microsoft Defender SmartScreen is turned off by default.

    • Enabled (default) - Potentially unwanted apps are blocked.
    • Disabled - Potentially unwanted apps are not blocked.
    • Not configured - Users can choose whether to use potentially unwanted app blocking in Microsoft Defender SmartScreen.

    This policy is available only on Windows instances that are joined to a Microsoft Active Director domain, or on Windows 10 Pro or Enterprise instances that are enrolled for device management.

  • Allow users to proceed from the SSL warning page
    CSP: Browser/PreventCertErrorOverrides

    Microsoft Edge shows a warning page when users visit sites that have SSL errors.

    • Enabled - Users can click through the warning pages.
    • Disabled (default) - Users are blocked from clicking through any warning page.
    • Not configured - Users can click through these warning pages.

  • Minimum SSL version enabled
    Enable the option to set a minimum supported version of SSL.

    • Enabled (default) - Enable access to the next setting where you specify the minimum version of TLS to use.
    • Disabled
    • Not configured - Microsoft Edge uses a default minimum version of TLS 1.0.

    When set to Enabled, you can configure TLS by using the following setting.

    • Minimum SSL version enabledSet the minimum version of TLS to use. Microsoft Edge won't use any version of SSL/TLS that's lower than the specified version.
      • TLS 1.0
      • TLS 1.1
      • TLS 1.2 (default)

  • Prevent bypassing Microsoft Defender SmartScreen prompts for sites
    Default: Enabled
    Microsoft Edge CSP: Browser/PreventSmartScreenPromptOverride

    This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.

    • If you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they're blocked from continuing to the site.
    • If you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.

  • Mcpe hunger games map download. Minimum SSL version enabled
    Default: Enabled

    Set a minimum supported version of SSL. If you set this policy to Not Configured, Microsoft Edge uses a default minimum version of TLS 1.0. When set to Enabled, you can select a minimum version from the following values:

    • TLS 1.0

    • TLS 1.1

    • TLS 1.2

    • Minimum SSL version enabled
      Default: TLS 1.2

  • Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads
    Default: Enabled
    Microsoft Edge CSP: Browser/PreventSmartScreenPromptOverrideForFiles

    This policy lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.

    • If you enable this policy, users in your organization can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.
    • If you disable or don't configure this policy, users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.

  • Allow users to proceed from the SSL warning page
    Default: Disabled
    Microsoft Edge CSP: Browser/PreventCertErrorOverrides

    Microsoft Edge shows a warning page when users visit sites that have SSL errors. If you set this policy to Enabled or Not Configured, users can click through these warning pages. When this policy is Disabled, users are blocked from clicking through any warning page.

  • Default Adobe Flash setting
    Default: Enabled
    Microsoft Edge CSP: Browser/AllowFlash, and Browser/AllowFlashClickToRun

    Determines whether websites that aren't covered by 'PluginsAllowedForUrls' or 'PluginsBlockedForUrls' can automatically run the Adobe Flash plug-in.

    • Select 'BlockPlugins' to block Adobe Flash on all sites
    • Select 'ClickToPlay' to let Adobe Flash run but require the user to click the placeholder to start it.

    In any case, the 'PluginsAllowedForUrls' and 'PluginsBlockedForUrls' policies take precedence over 'DefaultPluginsSetting'. Automatic playback is only allowed for domains explicitly listed in the 'PluginsAllowedForUrls' policy.If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.

    • If you set this policy to Not Configured, the user can change this setting manually. * 2 = Block the Adobe Flash plug-in * 3 = Click to play the former '1' option set allow-all, but this functionality is now only handled by the 'PluginsAllowedForUrls' policy. Existing policies using '1' will operate in Click-to-play mode.

    • Default Adobe Flash setting
      Default: Block the Adobe Flash plugin

  • Enable site isolation for every site
    Default: Enabled

    The 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. You can also use the IsolateOrigins policy to isolate additional, finer-grained origins.

    • When this policy is set to Enabled, users can't opt out of the default behavior where each site runs in its own process.
    • If you use Disabled or Not Configured, a user can opt out of site isolation. (For example, by using 'Disable site isolation' entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.

  • Supported authentication schemes
    Use this setting to change the default behavior of Edge as to the HTTP authentication schemes that Edge can use. Edge supports and can use the following schemes: basic, digest, ntlm, and negotiate.

    • Enabled (default) - When set to Enabled, you can then configure the following setting where you specify which of the four HTTPS authentication schemes Edge can use.
    • Disabled
    • Not configured - When set to Not configured, Edge will support all four schemes.

    Supported authentication schemes - To access this setting, the previous instance of Supported authentication schemes must be set to Enabled.

    Select one or more HTTP authentication schemes for by Edge. By default, two are already selected:

    • Basic
    • Digest
    • NTLM(Selected by default)
    • Negotiate(Selected by default)

    For more information, see AuthSchemes in the Microsoft Edge policies documentation, and Understanding HTTP authentication in the .NET Framework documentation.

  • Enable saving passwords to the password manager
    Default: Disabled
    Microsoft Edge CSP: Browser/AllowPasswordManager

    Enable Microsoft Edge to save user passwords.

    • If you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.
    • If you disable this policy, users can't save new passwords, but they can still use previously saved passwords.

    When you set this policy to either Enabled or Disabled, users can't change or override this policy in Microsoft Edge.

    If you set this to Not Configured, users can save passwords, as well as turn off this feature.

  • Control which extensions cannot be installed
    Default: Enabled

    List the specific extensions that users can't install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed are disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.

    Use * to block all extensions that aren't explicitly listed in the allow list. If this policy is set to Not Configured, users can install any extension in Microsoft Edge. Notes download for pc.

    Example value: extension_id1 extension_id2.

    • Extension IDs the user should be prevented from installing (or * for all)
      Select Add and specify additional extensions. * is selected by default.

  • Configure Microsoft Defender SmartScreen
    Default: Enabled
    Microsoft Edge CSP: Browser/AllowSmartScreen

    This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software.

    • By default, Microsoft Defender SmartScreen is turned on. If you enable this setting, Microsoft Defender SmartScreen is turned on and users can't turn it off.
    • If you disable this setting, Microsoft Defender SmartScreen is turned off and users can't turn it on.
    • When set to Not Configured, users can choose whether to use Microsoft Defender SmartScreen.

    This policy is available only on Windows instances that are joined to a Microsoft Active Director domain, or on Windows 10 Pro or Enterprise instances that are enrolled for device management.

  • Allow user-level native messaging hosts (installed without admin permissions)
    Default: Disabled

    Enables user-level installation of native messaging hosts.

    • If you disable this policy, Microsoft Edge will only use native messaging hosts installed on the system level. By default, if you don't configure this policy, Microsoft Edge will allow usage of user-level native messaging hosts.

Update Flash Player

  • Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)
    Default: Disabled

    DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.

    By default, Microsoft Edge forbids certificates signed using SHA-1 as allowing SHA-1 chains is not a secure configuration.This policy depends on the operating system (OS) certificate verification stack allowing SHA-1 signatures. If an OS update changes the OS handling of SHA-1 certificates, this policy might no longer have effect. Further, this policy is intended as a temporary workaround to give Enterprises more time to move away from SHA-1.

    This policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.

    This policy will be removed in Microsoft Edge 92 releasing in mid-2021.

    • Enabled - Microsoft Edge allows connections secured by SHA-1 signed certificates so long as the certificate chains to a locally installed root certificate and is otherwise valid.
    • Disabled (default) – When set it to Disabled, or the SHA-1 certificate chains to a publicly trusted certificate root, then Microsoft Edge won't allow certificates signed by SHA-1.
    • Not configured - Same as behavior as Disabled.

Microsoft Edge Adobe Flash Upgrade

Edge

Microsoft Edge Adobe Flash Blocked

Next steps