-->
Windows 10 Team 2020 Update supports the new Microsoft Edge based on Chromium (version 85 and above) as the recommended browser for Surface Hub 2S and Surface Hub (v1). This article explains how to install the browser using one of three methods: a provisioning package, Microsoft Intune, or third party Mobile Device Management (MDM) provider.
- New Year, New Browser - The New Microsoft Edge is Out of Preview and Now Available for Download. Upgrading to the new Microsoft Edge. Improvements and fixes. This update includes the following quality improvements: Start menu pins, tiles, and shortcuts for the current version of Microsoft Edge will migrate to the new Microsoft Edge.
- Microsoft is launching a brand new version of its Edge web browser today, and it's a huge departure from the old Edge we've come to know. Microsoft has rebuilt Edge from the ground up using the.
A new browser is on the block, and it's here to right all the wrongs of its predecessor. Microsoft is launching a brand new version of its Edge web browser today, and it's a huge departure from. Get Microsoft Edge for iOS and Android. Skip to main content. Jan 15, 2020 The last several months have been nothing short of inspiring for all of us working to deliver great new capabilities for Microsoft Edge including AAD support, Internet Explorer mode, 4K streaming, Dolby audio, inking in PDF, Microsoft Search in Bing integration, support for Chrome-based extensions, and more.
Important
By default, Surface Hub devices are preinstalled with Microsoft Edge Legacy (version 44). After installing the 2020 Update, it's recommended to switch to the new Microsoft Edge browser; support for Microsoft Edge Legacy will end on March 9, 2021.
Install Microsoft Edge using a provisioning package
- From a PC, download the Microsoft Edge provisioning package (MicrosoftEdgeInstaller.ppkg) to the root folder of a USB drive.
- Insert the USB drive into Surface Hub.
- From Surface Hub, open Settings and enter your admin credentials when prompted.
- Navigate to Surface Hub > Device management. Under Provisioning packages, select Add or remove a provisioning package.
- Select Add a package.
- Choose the Microsoft Edge provisioning package and select Add.
- You will see a summary of the changes that the provisioning package applies. Select Yes, add it.
- Wait for the Microsoft Edge installation to complete. Once it's installed, navigate to the Surface Hub Start menu to access the new Microsoft Edge.
Note
If there’s a newer version of Microsoft Edge available, it will be automatically updated.
Install Microsoft Edge using Intune
Note
The Surface Hub device must be enrolled into and managed using Intune. For more information, see Manage Surface Hub 2S with Microsoft Intune.
- Download the Microsoft Edge installer.
- Use the current version from Stable channel(version 85)
- Choose Windows 64-bit
- Add the Microsoft Edge installer as a line-of-business app to Microsoft Intune.
- If you choose to use Microsoft Edge Update to handle automatic updates to Microsoft Edge, be sure to configure the Ignore app version setting the App information pane. When you switch this setting to Yes, Microsoft Intune will not enforce the app version that's installed on the Surface Hub device.
Install Microsoft Edge using third party MDM provider
- Download the Microsoft Edge installer from Microsoft.
- Use the current version from Stable channel(version 85)
- Choose Windows 64-bit
- Stage the Microsoft Edge installer on a hosted location, such as a local file share (servershareMicrosoftEdgeEnterpriseX64.msi). The Surface Hub device must have permission to access the hosted location.
- Use EnterpriseDesktopAppManagement Configuration Service Provider (CSP) through your MDM provider to install Microsoft Edge.
Configure Microsoft Edge
Default Microsoft Edge policies for Surface Hub
Microsoft Edge is preconfigured with the following policy setttings to provide an optimized experience for Surface Hub.
Tip
It's recommended to retain the default value for these policy settings.
| Policy setting | Recommended experience | Default value |
|---|---|---|
| AutoImportAtFirstRun | Do not automatically import datatypes and settings from Microsoft Edge Legacy. This avoids changing signed-in users' profiles with shared settings from the Surface Hub. | 4 |
| BackgroundModeEnabled | Allow Microsoft Edge processes to keep running in the background even after the last browser window is closed, enabling faster access to web apps during a session. | 1 |
| BrowserAddProfileEnabled | Do not allow users to create new profiles in Microsoft Edge. This simplifies the browsing and signed-in experience. | 0 |
| BrowserGuestModeEnabled | Enables only one user to sign-in to Microsoft Edge. This simplifies the browsing and signed-in experience | 0 |
| BrowserSignin | Enables users to enjoy Single Sign-On (SSO) in Microsoft Edge. When a user is signed into Surface Hub, their credentials can flow to supported websites without requiring them to re-authenticate. | 1 |
| ExtensionInstallBlockList | Prevents non-admin users from installing new extensions in Microsoft Edge. To configure a list of extensions to be installed by default, use ExtensionInstallForcelist. | * |
| HideFirstRunExperience | Hides the first run experience and splash screen that's normally shown when users run Microsoft Edge for the first time. Since Surface Hub is a shared device, this simplifies the user experience. | 1 |
| InPrivateModeAvailability | Disables InPrivate mode. Since End Session already clears browsing data, this simplifies the browsing and signed-in experience. | 1 |
| NewTabPageSetFeedType | Shows the Office 365 feed experience on new tab pages. When a user is signed into Surface Hub, this enables fast access to their files and content on Office 365. | 1 |
| NonRemovableProfileEnabled | When a user is signed into Surface Hub, a non-removable profile will be created using their organizational account. This simplifies the Single Sign-On (SSO) experience. | 1 |
| PrintingEnabled | Disables printing in Microsoft Edge. Surface Hub does not support printing. | 0 |
| ProActiveAuthEnabled | Enables Microsoft Edge to proactively authenticate signed-in users with Microsoft services. This simplifies the Single Sign-On (SSO) experience. | 1 |
| PromptForDownloadLocation | Automatically saves files to the Downloads folder, rather than asking users where to save the file. This simplifies the browsing experience. | 0 |
Important
Deployable progressive web apps (PWAs) are not currently supported on the Windows 10 Team operating system. Note also that the Microsoft Edge policy setting WebAppInstallForceList is not supported on Surface Hub.
Configure Microsoft Edge policy settings
Use Microsoft Edge browser policies to configure browser settings in Microsoft Edge. These policies can be applied using:
- Microsoft Intune,
- Your preferred Mobile Device Management (MDM) provider that supports ADMX Ingestion, or
- Provisioning packages using ADMX Ingestion in Windows Configuration Designer.
Configure Microsoft Edge updates
By default, Microsoft Edge is updated automatically. Use Microsoft Edge update policies to configure settings for Microsoft Edge Update.Note that Surface Hub does not support the following Microsoft Edge update policies:
- Allowsxs – On Surface Hub, Microsoft Edge Stable channel always replaces Microsoft Edge Legacy.
- CreateDesktopShortcut – Surface Hub does not use desktop shortcuts.
Tip
Microsoft Edge requires connectivity to the Internet to support its features. Ensure that the necessary domain URLs are added to the Allow list to ensure communications through firewalls and other security mechanisms.
Related links
© Provided by TechRepublic Edge 88 began rolling out on 21 January. Image: MicrosoftMicrosoft Edge 88 is rolling out to users in the Stable channel alongside some new privacy-focused features, including a long-awaited credentials monitor and a built-in password generator.
More about cybersecurity
Edge 88 began rolling out on 21 January.
The first of these features, Password Monitor, will help users stay protected against data breaches involving passwords. If Edge determines that a user's login credentials have been exposed on the dark web (or elsewhere), it will notify them within the browser and advise them to update their passwords.
SEE: Identity theft protection policy (TechRepublic Premium)
Password monitor was announced by Microsoft last year, and began rolling out yesterday (January 21) with the release of Edge 88, though it may take a week or two to reach Edge users, Microsoft said.
The latest version of Microsoft Edge, which is based on the open-source Chromium architecture, also features a built-in password generator. When users sign up to a new account on a website, Edge will automatically generate a strong password for the user, which is then automatically saved and synced across their devices.
The feature is similar to the one available on Google Chrome, and helps ensure users are using strong passwords for their accounts, while taking away the onus of having to memorize (or worse, write down) lists of complex, unique passwords for each service they sign up for. This is particularly important when creating accounts for financial services and other websites that require valuable information, Microsoft said.
Password Monitor is available for Windows 7, 8 and 10 users. Password Generator is available to the same Windows users, in addition to being available on macOS. Both features require users to be signed into Edge with a work or school account, and password sync turned on.
Microsoft has made additional privacy tweaks under the hood of Edge 88. This includes more transparent options around data collection, with users now able to dip into the permissions settings and control which sites have access to location, camera and microphone functions. Customers also have more control over how cookies are stored, specifically by allowing them to delete unnecessary third-party cookies while hanging onto ones they want to keep: say, for keeping certain settings in place for websites they visit regularly.
SEE: Top Windows 10 run commands (free PDF) (TechRepublic)
Edge 88 also adds features for making browsing in private mode even more private. Users can now toggle a 'Strict' mode within the InPrivate browser that will block any trackers that personalize content and ads. This will prevent users from being shown personalized ads based on their browsing history, which Microsoft said would be useful when shopping for gifts or planning a surprise. This could be inadvertently ruined by an ad that gives the game away, particularly on a shared computer.
For times when even more privacy is needed, Microsoft Edge 88 features Secure DNS. This bolsters security by looking up website addresses over the more secure HTTPS protocol, ensuring data remains encrypted and protecting it from attackers who might try to modify or eavesdrop on the connection.
Users can configure a different secure DNS provider or disable it altogether within the Edge 88 privacy settings. Strict mode and Secure DNS is available on Edge 88 for Windows 7, 8 and 10 users, and on macOS.
Also see
What's New With Microsoft Edge
- How to become a cybersecurity pro: A cheat sheet (TechRepublic)
- Social engineering: A cheat sheet for business professionals (free PDF) (TechRepublic)
- Shadow IT policy (TechRepublic Premium)
- Online security 101: Tips for protecting your privacy from hackers and spies (ZDNet)
- Cybersecurity and cyberwar: More must-read coverage (TechRepublic on Flipboard)