Overview
The Windows Microsoft Edge Extension Policy allows administrators to manage Microsoft Edge browser extension behavior on enrolled devices. This policy is designed for both BYOD (Bring Your Own Device) and company-owned device scenarios, giving IT teams centralized control over which extensions are installed, blocked, or permitted in the Edge browser.
Supported Platforms
Platform | Minimum Requirement |
Windows | Windows 10 or later |
Policy Settings
1. Swif Extension
Property | Detail |
Field Name |
|
Type | Boolean |
Default |
|
Description | Enables the Swif Edge Extension on the device. When set to |
Minimum System Requirements:
Windows Pro 10+
Windows Enterprise 10+
Windows Education 10+
Windows SE 10+
IoT Enterprise / IoT Enterprise LTSC 10+
Note: This setting requires a qualifying Windows edition. It is not supported on Windows Home.
2. Install Extension ID List
Property | Detail |
Field Name |
|
Type | Array of Strings |
Default | None |
Description | A list of extension URLs or package identifiers to be force-installed in Microsoft Edge. |
Behavior:
Extensions listed here are automatically installed and locked — users cannot remove them.
If an extension is removed from this list, it will also be uninstalled from the browser.
This setting does not affect extensions that users install manually.
Example value:
[ "extension-id-1", "extension-id-2" ]
3. Blocked Extension ID List
Property | Detail |
Field Name |
|
Type | Array of Strings |
Default | None |
Description | Specifies which extensions users cannot install. |
Behavior:
Extensions already installed will be disabled if they appear on this list.
Users will not be able to re-enable blocked extensions.
Use this to prevent specific known-unwanted or risky extensions from running in the browser.
Example value:
[ "blocked-extension-id-1", "blocked-extension-id-2" ]
4. Enable InPrivate Mode Only
Property | Detail |
Field Name |
|
Type | Boolean |
Default |
|
Description | When set to |
Behavior:
All browsing sessions will operate in InPrivate mode.
Standard browsing mode will be unavailable to the user.
This can be useful for shared devices or kiosk scenarios where browsing history and cookies should not persist.
How It Works
Create or edit the Edge Extension Policy in your Swif admin console.
Configure the desired settings — enable the Swif extension, define force-installed and blocked extension lists, and optionally enforce InPrivate mode.
Assign the policy to the appropriate device groups (BYOD, company-owned, or both).
Once deployed, enrolled Windows devices will automatically apply the configured extension rules the next time they sync.
Common Use Cases
Scenario | Recommended Configuration |
Force-install a corporate security extension | Add the extension ID to Install Extension ID List |
Block a known-malicious extension | Add the extension ID to Blocked Extension ID List |
Deploy the Swif agent extension | Set Swif Extension to |
Restrict browsing on shared kiosk devices | Set Enable InPrivate Mode Only to |
Frequently Asked Questions
Can I use both the install and block lists at the same time?
Yes. The install list and block list operate independently. An extension should not appear on both lists simultaneously — if it does, the block behavior will typically take precedence.
What happens if I remove an extension from the install list?
The extension will be automatically uninstalled from all devices where the policy is applied.
Does this policy affect manually installed extensions?
The force-install list does not interfere with manually installed extensions. However, the block list will disable any matching extension regardless of how it was installed.
Which Windows editions support the Swif Extension setting?
Windows Pro, Enterprise, Education, SE, and IoT Enterprise editions (version 10 and later). Windows Home is not supported for this specific setting.