TopicSessionTopicSpeaker Enterprise Guidance BRK2338Enterprise Web BrowsingFred Pullen How do I upgrade to Internet Explorer 11? BRK2307Enterprise Mode for Internet Explorer 11 Deep DiveDeen King-Smith BRK2312Web App Compat & Modernization for NerdsChris Jackson Tell me about Microsoft Edge BRK1301Microsoft Edge OverviewFred Pullen BRK2347Windows 10 Browser ManagementDeen King-Smith What about security? BRK2319Browser Security OverviewFred Pullen

Web Browsing on Windows 10

Windows 10 Browser Management Tenets Optimized policy set for Microsoft Edge Easy configuration of Microsoft Edge Consistent management experience for Internet Explorer 11 and Microsoft Edge in Windows 10 Consistent policy set for Internet Explorer 11 across all supported versions of Windows Tight integration between Microsoft Edge and Internet Explorer 11 Reduce management overhead where possible

What we’ll cover New default Windows 10 browser

What we’ll cover New default Windows 10 browser

No change to management tooling in Windows 10 Internet Explorer 11 in Windows 10 Consistent management approach for Internet Explorer 11 on all supported Operating Systems

Internet Explorer 11 Management Configure Create a custom IE package using IEAK Predefine settings for End users using Group Policy Objects and Group Policy Preferences Deploy Easy deployment of IE11 using System Center or end point management solutions Manage Day to day management of IE11 using Group Policy Objects and Group Policy Preferences Service Delivery of updates to IE11 via System Center, WSUS, WUB or other means

Configuration - A word about IEAK IEAK Option PageSupport Customized Title Bar text Yes Add Toolbar button Yes Search Provider Yes Homepage tabs Yes Online support page URL Yes Favorites Yes Custom Welcome Page Yes Compatibility View Yes Append to UA No Connection Settings Yes

Internet Explorer 11 All existing tools work Common management surface across supported Operating Systems New polices to support added compatibility features

The new default browser for Windows 10 What we’ll cover next

The right time for a new browser Enables new experiences on the web Powered by a new rendering engine Works with Internet Explorer 11 to provide interoperability and compatibility

x

How are Group Policies used? Usage of IE11 Group Policies

.. with zero assumptions

Microsoft Edge Management ConfigureDeployManageService

Microsoft Edge Management Configure Predefine settings for End users using Group Policy (domain joined) or MDM (any device) DeployManage Predefine settings for End users using Group Policy (domain joined) or MDM (any device) Service

Microsoft Edge Management Configure Predefine settings for End users using Group Policy (domain joined) or MDM (any device) Deploy Deployed as a preinstalled app for Windows 10 Manage Predefine settings for End users using Group Policy (domain joined) or MDM (any device) Service Always up-to-date via Windows App updates

Configuration and Management New set of policies for Microsoft Edge Uses existing GPO/GPP/SCCM infrastructure New for Windows 10 Policy parity with Group Policy Cross Platform/OS management Standards based management based infrastructure Managed Microsoft Edge

What is Mobile Device Management (MDM)? Consistent way to manage multi-platform devices Uses XML for data exchange Supported by leading mobile manufacturers

Microsoft Edge Policies Scenario Driven Consistent across devices Group Policy & MDM parity PolicyCategory Configure Enterprise Site List (Desktop)Compatibility Send Intranet to IECompatibility Allow Browser (Mobile)General Default BrowserGeneral Allow Pop-upsContent Restrictions CookiesContent Restrictions Allow SmartScreenContent Restrictions Allow Active ScriptingContent Restrictions Configure Home Page(s)General Allow Do Not TrackNetwork and Security Allow AutofillUser Experiences Configure Password ManagerUser Experiences Turn off search suggestions in the address bar User Experiences

Microsoft Edge Future Policy Considerations Scenario Driven Forward Looking Feedback Driven CategorySample Policies CompatibilityDisable Compatibility View fallback General Favorites, Reading List, First Run Tabs Content RestrictionsExplicit Content, Media ExtensionsAllow Extensions, PDF Network and SecurityBrowsing Certificates, Prefetching, Auto- detect Intranet, Geolocation User ExperiencesFull screen, InPrivate Browsing, Annotations, Cortana, Developer Tools

Ships with Windows 10 Deploying Microsoft Edge in Windows 10 Default browser

Servicing Microsoft Edge in Windows 10 Always up-to-date Updated like a Universal Windows App Updated and serviced via WU/WSUS/WUB Enables testing of updates before broad deployment

*Conceptual illustration only Ensuring Product Quality via Previews Enterprise-ready Current Branch Hundreds of millions Broad External Flights Several million Limited External Flights 100’s of thousands Broad Internal Validation 10’s of thousands Engineering Builds Users Time

Microsoft Edge  Simplified Policy Set Multiple management options Always up-to-date App Web Platform updates via WU/WSUS/WUB

What we’ll cover New default Windows 10 browser

Common Management Settings Microsoft Edge & Internet Explorer 11 Single Entry Point for End-Users

Common Management

Browser Specific Settings

Common Management Browser Specific Settings Platform Specific Settings

Single Entry Point for End Users Starting with Microsoft Edge IE 11 can be configured as a compatibility fallback Leverages existing investments in Enterprise Mode

Compatibility Fallback to Internet Explorer 11 Enterprise Control  All Sites on the Enterprise Mode Site List by default  Intranet Fallback Policy Set Consumer Experience  Sites on the Microsoft Compatibility View List

Compatibility Fallback Management Policy: Windows Components\Microsoft Edge\Use Enterprise Mode Site List Policy OptionsImpact Use IE11 Enterprise Mode Site ListMicrosoft Edge will use the location of the IE11 Enterprise Mode Site list(if available and ) to determine which sites fallback. Use custom Site ListMicrosoft Edge will use a site list defined in policy Disable or Not ConfiguredMicrosoft Edge will not use an Enterprise Site list for Compatibility Fallback

Updated Site List Manager Tool (Beta) Beta available before RTM All sites enabled by default Enables fine grain control of fallback experience

Better together Single entry point for end users IT Pro control of which site loads in which browser Leverages existing Enterprise Mode investments

DayTimeLocationTopicSpeaker Monday 1:30pmE253Microsoft Edge OverviewFred Pullen 6:00pmHall A1/A2Ask the ExpertsEnterprise Browsing Team Tuesday 9:00amS401Enterprise Web BrowsingFred Pullen Wednesday 9:00amE451bWindows 10 Browser ManagementDeen King-Smith 3:15pmE451bBrowser Security OverviewFred Pullen Thursday 9:00amN427Enterprise Mode for Internet Explorer 11 Deep DiveDeen King-Smith 3:15pmS502Web App Compat & Modernization for NerdsChris Jackson 11am-5pmN135Drop-In App Compat Troubleshooting WorkshopEnterprise Browsing Team