Share via

HttpsOnlyMode

Allow HTTPS-Only Mode to be enabled

Supported versions

  • On Windows and macOS since 140 or later

Description

This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigating to HTTPS.

If this setting isn't set or is set to allowed, users are able to enable HTTPS-Only Mode. If this setting is set to disallowed, users won't be able to enable HTTPS-Only Mode. If this setting is set to force_enabled, HTTPS-Only Mode is enabled in Strict mode and users won't be able to disable it. If this setting is set to force_balanced_enabled, HTTPS-Only Mode is enabled in Balanced mode and users won't be able to disable it.

If you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the allowed setting.

The separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.

Policy options mapping:

  • allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting

  • disallowed (disallowed) = Don't allow users to enable any HTTPS-Only Mode

  • force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode

  • force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • allowed = Don't restrict users' HTTPS-Only Mode setting
  • disallowed = Don't allow users to enable any HTTPS-Only Mode
  • force_enabled = Force enable HTTPS-Only Mode in Strict mode
  • force_balanced_enabled = Force enable HTTPS-Only Mode in Balanced Mode

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • String

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: HttpsOnlyMode
  • GP name: Allow HTTPS-Only Mode to be enabled
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Do not allow users to enable any HTTPS-Only Mode

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: HttpsOnlyMode
  • Value type: REG_SZ

Example registry value

disallowed

Mac information and settings

  • Preference Key name: HttpsOnlyMode
  • Example value:
<string>disallowed</string>

See also