WebAppSettings

Article
2025-05-09

Web App management settings

Supported versions

On Windows and macOS since 120 or later

Description

This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.

The manifest_id field is the Manifest ID for the Web App. See https://developer.chrome.com/blog/pwa-manifest-id/ for instructions on how to determine the Manifest ID for an installed web app.
The run_on_os_login field specifies if a web app can be run during OS login. If this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later. If this field is set to run_windowed, the web app will run during OS login and the user won't be able to disable this later. If this field is set to allowed, the user will be able to configure the web app to run at OS login. The default policy configuration only allows the allowed and blocked values.
(Starting with Microsoft Edge version 120) The prevent_close_after_run_on_os_login field specifies if a web app can be prevented from closing in any way. For example, by the user, by task manager, or by web APIs. This behavior can only be enabled if run_on_os_login is set to run_windowed. If the app is already running, this setting will only take effect after the app is restarted. If this field isn't defined, users can close the app. (This is currently not supported in Microsoft Edge.)
(Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, that is, shortcuts, file handlers, protocol handlers and so on will be removed or not. If an app is already running, this property will come into effect after the app restarts. This should be used with caution, since it can override any OS integration that is set automatically during the startup of the web applications system. This currently only works on Windows, Mac and Linux platforms.

Supported features

Can be mandatory: Yes
Can be recommended: No
Dynamic Policy Refresh: Yes
Per Profile: Yes
Applies to a profile that is signed in with a Microsoft account: No

Data type

Dictionary

Windows information and settings

Group Policy (ADMX) info

GP unique name: WebAppSettings
GP name: Web App management settings
GP path (Mandatory): Administrative Templates/Microsoft Edge
GP path (Recommended): N/A
GP ADMX file name: MSEdge.admx

Example value

[{"manifest_id": "https://foo.example/index.html", "run_on_os_login": "allowed"}, {"manifest_id": "https://bar.example/index.html", "run_on_os_login": "allowed"}, {"manifest_id": "https://foobar.example/index.html", "prevent_close_after_run_on_os_login": true, "run_on_os_login": "run_windowed"}, {"manifest_id": "*", "run_on_os_login": "blocked"}, {"force_unregister_os_integration": true, "manifest_id": "https://foo.example/index.html"}]

Registry settings

Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
Path (Recommended): N/A
Value name: WebAppSettings
Value type: REG_SZ

Example registry value

[{"manifest_id": "https://foo.example/index.html", "run_on_os_login": "allowed"}, {"manifest_id": "https://bar.example/index.html", "run_on_os_login": "allowed"}, {"manifest_id": "https://foobar.example/index.html", "prevent_close_after_run_on_os_login": true, "run_on_os_login": "run_windowed"}, {"manifest_id": "*", "run_on_os_login": "blocked"}, {"force_unregister_os_integration": true, "manifest_id": "https://foo.example/index.html"}]

Expanded example registry value

[
  {
    "manifest_id": "https://foo.example/index.html",
    "run_on_os_login": "allowed"
  },
  {
    "manifest_id": "https://bar.example/index.html",
    "run_on_os_login": "allowed"
  },
  {
    "manifest_id": "https://foobar.example/index.html",
    "prevent_close_after_run_on_os_login": true,
    "run_on_os_login": "run_windowed"
  },
  {
    "manifest_id": "*",
    "run_on_os_login": "blocked"
  },
  {
    "force_unregister_os_integration": true,
    "manifest_id": "https://foo.example/index.html"
  }
]

Mac information and settings

Preference Key name: WebAppSettings
Example value:

<key>WebAppSettings</key>
<array>
  <dict>
    <key>manifest_id</key>
    <string>https://foo.example/index.html</string>
    <key>run_on_os_login</key>
    <string>allowed</string>
  </dict>
  <dict>
    <key>manifest_id</key>
    <string>https://bar.example/index.html</string>
    <key>run_on_os_login</key>
    <string>allowed</string>
  </dict>
  <dict>
    <key>manifest_id</key>
    <string>https://foobar.example/index.html</string>
    <key>prevent_close_after_run_on_os_login</key>
    <true/>
    <key>run_on_os_login</key>
    <string>run_windowed</string>
  </dict>
  <dict>
    <key>manifest_id</key>
    <string>*</string>
    <key>run_on_os_login</key>
    <string>blocked</string>
  </dict>
  <dict>
    <key>force_unregister_os_integration</key>
    <true/>
    <key>manifest_id</key>
    <string>https://foo.example/index.html</string>
  </dict>
</array>

Share via