Share via

HttpsOnlyMode

Allow HTTPS-Only Mode to be enabled

Supported versions

  • On Windows and macOS since 140 or later
  • On Android since 139 or later

Description

This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.

If this setting isn't set or is set to allowed, users are able to enable HTTPS-Only Mode. If this setting is set to disallowed, HTTPS-Only Mode will be disabled. If this setting is set to force_enabled, HTTPS-Only Mode is enabled in Strict mode. If this setting is set to force_balanced_enabled, HTTPS-Only Mode is enabled in Balanced mode.

The settings force_enabled and force_balanced_enabled can be recommended to users. HTTPS-Only Mode will be set to Strict or Balanced initially, but users are allowed to change it.

If you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the allowed setting.

The separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.

Policy options mapping:

  • allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting

  • disallowed (disallowed) = Disable HTTPS-Only Mode

  • force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode

  • force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • allowed = Don't restrict users' HTTPS-Only Mode setting
  • disallowed = Disable HTTPS-Only Mode
  • force_enabled = Force enable HTTPS-Only Mode in Strict mode
  • force_balanced_enabled = Force enable HTTPS-Only Mode in Balanced Mode

Supported features

  • Can be mandatory: Yes
  • Can be recommended: Yes
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • String

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: HttpsOnlyMode
  • GP name: Allow HTTPS-Only Mode to be enabled
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): Administrative Templates/Microsoft Edge - Default Settings (users can override)
  • GP ADMX file name: MSEdge.admx

Example value

Disable HTTPS-Only Mode

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): SOFTWARE\Policies\Microsoft\Edge\Recommended
  • Value name: HttpsOnlyMode
  • Value type: REG_SZ

Example registry value

disallowed

Mac information and settings

  • Preference Key name: HttpsOnlyMode
  • Example value:
<string>disallowed</string>

Android information and settings

  • Preference Key name: HttpsOnlyMode
  • Example value:
disallowed

See also

  • Last updated on