diff --git a/managed.json b/Linux/managed.json similarity index 100% rename from managed.json rename to Linux/managed.json diff --git a/recommended.json b/Linux/recommended.json similarity index 100% rename from recommended.json rename to Linux/recommended.json diff --git a/README.md b/README.md index 0f357b5..7f2d4df 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,19 @@ # Microsoft Edge Policies -These policies are written for Linux. The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json` \ No newline at end of file +## Linux + +The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json` + +## macOS + +The mandatory prolicies should be put in `/Library/Managed Preferences/com.microsoft.Edge.plist`, and the recommended policies should be put in `/Library/Preferences/com.microsoft.Edge.plist` + +macOS is problematic, as it will wipe `/Library/Managed Preferences` every boot if you are not using an MDM. I work around this by putting the policies in `/Library/Tomster Corporation`, and use a cronjob as root to copy it every boot: + +``` +@reboot sleep 5 && cp -r '/Library/Tomster Corporation/' '/Library/Managed Preferences' +``` + +I have also noticed that Microsoft Edge does not seem to reload Managed Preferences probably until the computer reboots. I am not sure if this is a macOS behavior or if it is caused because my machine is not enrolled in an MDM. + +Alternatively, you can try to convert the .plist files to .mobileconfig files and install them as profiles. \ No newline at end of file diff --git a/macOS/com.microsoft.Edge.plist b/macOS/com.microsoft.Edge.plist new file mode 100644 index 0000000..964a9d9 --- /dev/null +++ b/macOS/com.microsoft.Edge.plist @@ -0,0 +1,46 @@ + + + + + EnableMediaRouter + + CookiesBlockedForUrls + + ntp.msn.com + + DefaultGeolocationSetting + 2 + DefaultInsecureContentSetting + 2 + DefaultCookiesSetting + 4 + DefaultThirdPartyStoragePartitioningSetting + 1 + DefaultFileSystemReadGuardSetting + 2 + DefaultFileSystemWriteGuardSetting + 2 + DefaultWebBluetoothGuardSetting + 2 + DefaultWebHidGuardSetting + 2 + ShowPDFDefaultRecommendationsEnabled + + SpotlightExperiencesAndRecommendationsEnabled + + FeatureFlagOverridesControl + 1 + ExtensionInstallBlocklist + + * + + GamerModeEnabled + + WindowsHelloForHTTPAuthEnabled + + ImmersiveReaderGrammarToolsEnabled + + EnhanceSecurityMode + 2 + + \ No newline at end of file