Tomster/Microsoft-Edge-Policies
1
0
Fork 0
mirror of https://github.com/TommyTran732/Microsoft-Edge-Policies synced 2024-11-22 02:11:34 -05:00
Code

Disable3DAPIs

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-12-04 22:05:25 -07:00
parent 87019b7fe6
commit d19f039c50
No known key found for this signature in database
GPG Key ID: D30DEC268D3FEB17
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Linux/managed.json
View File

@ -56,6 +56,7 @@
"ConfigureDoNotTrack": true, "ConfigureDoNotTrack": true,
"DefaultShareAdditionalOSRegionSetting": 2, "DefaultShareAdditionalOSRegionSetting": 2,
"DiagnosticData": 0, "DiagnosticData": 0,
"Disable3DAPIs": true,
"Edge3PSerpTelemetryEnabled": false, "Edge3PSerpTelemetryEnabled": false,
"EdgeCollectionsEnabled": false, "EdgeCollectionsEnabled": false,
"EdgeEDropEnabled": false, "EdgeEDropEnabled": false,

4
README.md
View File

@ -9,13 +9,15 @@ For corporate environments, you will need make approprieate changes, including b
- Set `DefaultWebUsbGuardSetting` to "Block". In most cases, the websites will never need to use this API. I need it to flash GrapheneOS and StockOS on my phones. - Set `DefaultWebUsbGuardSetting` to "Block". In most cases, the websites will never need to use this API. I need it to flash GrapheneOS and StockOS on my phones.
- Set `DefaultJavaScriptJitSetting` to "Block". This will prevent users from adding exceptions to Enhanced Security Mode. - Set `DefaultJavaScriptJitSetting` to "Block". This will prevent users from adding exceptions to Enhanced Security Mode.
- Further restrict permissions that websites can prompt for. - Further restrict permissions that websites can prompt for.
- Consider enabling `Disable3DAPIs`. This will break sites that depend on WebGL, so whether to do this highly depends on your organization. - Consider removing the `Disable3DAPIs` policy. Currently, WebGL is disabled in my policies and a few sites will break, so whether to do this highly depends on your organization.
- Consider mandating that `SmartScreenEnabled` is set to disabled. `TyposquattingCheckerEnabled` is also potentially invasive, though I have not confirmed this. Please make an issue to let me know of your findings. - Consider mandating that `SmartScreenEnabled` is set to disabled. `TyposquattingCheckerEnabled` is also potentially invasive, though I have not confirmed this. Please make an issue to let me know of your findings.
## Linux ## Linux
The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json` The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json`
The
## macOS ## macOS
The mandatory prolicies should be put in `/Library/Managed Preferences/com.microsoft.Edge.plist`, and the recommended policies should be put in `/Library/Preferences/com.microsoft.Edge.plist` The mandatory prolicies should be put in `/Library/Managed Preferences/com.microsoft.Edge.plist`, and the recommended policies should be put in `/Library/Preferences/com.microsoft.Edge.plist`

2
macOS/Managed Preferences/com.microsoft.Edge.plist
View File

@ -120,6 +120,8 @@
<integer>2</integer> <integer>2</integer>
<key>DiagnosticData</key> <key>DiagnosticData</key>
<integer>0</integer> <integer>0</integer>
<key>Disable3DAPIs</key>
<true />
<key>Edge3PSerpTelemetryEnabled</key> <key>Edge3PSerpTelemetryEnabled</key>
<false /> <false />
<key>EdgeCollectionsEnabled</key> <key>EdgeCollectionsEnabled</key>