# Browser Customization Configurations

## Table of contents

- [Configuring Browser Customization](#configuring-browser-customization)
- [Settings under Browser Customization](#settings-under-browser-customization)

## Configuring Browser Customization

Browser Customization allows administrators to tailor the browser environment to their specific needs. This includes settings for the home page and startup behavior, default browser configuration, content blocking, security maintenance, proxy settings, bookmark management, default browser selection, and legacy settings. This document explains how to create the policy and describes each configuration provided by Endpoint Central.

Follow the steps below to create and deploy a Browser Customization policy:

1. Open Endpoint Central console and navigate to **Browsers -> Policies -> Browser Customization**.
2. Click **Create Policy** and select the OS platform.
3. Provide a name and description for the policy.
4. Choose the desired browser from the drop-down.
5. Refer below to know more about the [Browser Customization settings](#settings-under-browser-customization).
6. Click **Save** and **Publish** to save the policy.
7. [Associate](https://www.manageengine.com/products/desktop-central/help/browser-security/policy-deployment.html#deploy) the policy to computers/groups of computers where you want the isolation of web applications to take place.

![Browser Customization](https://www.manageengine.com/products/desktop-central/help/images/browser-customization.png)

## Settings under Browser Customization

The following configurations are offered under Browser Customizations along with their supported browsers and platforms:

| Policy | Configuration | Description | Supported Browsers | Supported Platforms |
|---|---|---|---|---|
| Content Restrictions | Web Bluetooth Guard | By restricting this setting, websites accessing the Bluetooth option will be disabled | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Display Image | Disabling this will disable images on websites | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Javascript | By restricting this option, JavaScript execution on websites is prevented | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Popups | By restricting this option, popups are blocked | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Audio Capture | By restricting this option, microphone access by websites is blocked | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Video Capture | By restricting this option, camera access by websites is blocked | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Media Autoplay | By restricting this option, auto-playing videos on websites are disabled | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Allow Usage of Serial API | Allows websites to access and communicate with serial devices such as printers and sensors via the browser | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Default Sensors | By restricting this option, usage of sensors such as motion and light sensors by websites is disabled | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Cookies | Allow or block sites from accepting cookies | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Insecure Content | Blocks loading of insecure (HTTP) content on secure (HTTPS) sites | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Web USB Guard setting | Restricts access to USB devices by websites | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Geolocation | Blocks websites from accessing geolocation | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Notifications | Blocks notification display by websites | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
| Content Restrictions for URLs | Each setting configured works only for the sites mentioned in the website group |  | Chrome, Edge, Ulaa, Chromium, Firefox |  |
| Security Restrictions > Browser Functionality | Media Router | Enable or disable Google Cast feature | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Audio Sandbox | Controls whether the audio sandbox is enabled for enhanced security in audio processing | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Component Updates | Controls whether the browser can download and install component updates automatically | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Allow Add-ons Enterprise Hardware Platform API Access | Controls whether extensions can access Enterprise Hardware Platform API to retrieve device-specific identifiers | Chrome, Edge, Ulaa, Chromium |  |
|  | Chrome Variations | Controls whether Chromium can run experiments and tests from Google | Chrome, Ulaa, Chromium |  |
|  | Show Cast Icon in Toolbar | Show or hide the Google Cast icon in the browser toolbar | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Autofill | Enable or disable autofill of address, passwords, and form data | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Developer Tools | Enable or disable Developer Tools (Inspect Element, More Tools > Developer Tools) | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Capture screenshots \| Screenshot button | Prevent screenshots via browser extension or browser APIs | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Print webpage | Prevent printing via Ctrl+P or right-click > Print | Chrome, Edge, Ulaa, Chromium, Internet Explorer | Windows, Mac |
|  | File upload to webpages | Prevent local file uploads to web pages | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Allow user to install Chrome Beta, Dev, Canary | Allow or block installation of Chrome Beta, Dev, or Canary versions | Chrome, Edge | Windows |
|  | Google Update \| Microsoft Edge Update \| App Update \| Install new versions of Internet Explorer automatically | Configure auto-updates for browsers | Chrome, Edge, Firefox, Internet Explorer | Windows |
|  | Default Search Engine Name \| Default Search Engine URL | Configure default search engine name and URL | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Default Search Provider Encoding | Configure search provider encoding technique | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
| Security Restrictions > Privacy & Safety | Over-ride certificate errors | Prevent users from proceeding on sites with untrusted SSL certificates | Chrome, Edge, Ulaa, Chromium, Internet Explorer | Windows, Mac |
|  | Phishing filter \| Microsoft Smart Screen | Protect against malware, phishing, malicious ads, and social engineering attacks | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Save browser history | Allow or block saving browser history | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Block third-party cookies | Enable or disable third-party cookies | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Disable Safe Browsing Proceed Anyway \| Prevent Smartscreen Prompt Override | Prevent users from overriding Safe Browsing blocks | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Force Google Safe Search | Enable Google Safe Search | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | End processes in Task Manager | Prevent users from killing browser processes via Task Manager | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Sync | Disable syncing of bookmarks, passwords, themes, etc. | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Restrict Youtube forcefully | Force YouTube Restricted Mode | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Incognito mode \| InPrivate Browsing \| Private browsing | Allow or block private browsing modes | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Clear Browsing Data | Clear selected browsing data when the browser closes | Chrome, Edge, Ulaa, Chromium, Firefox | Windows |
|  | Enable Secure DNS | Encrypt DNS queries using DoH or DoT | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Network Timestamp Query | Disable browser time validation from server for certificate verification | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Online Revocation Checks | Control validation of certificate revocation list online | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | SafeSites URL Filter | Block adult or pornographic content sites | Chrome, Ulaa, Chromium | Windows, Mac |
|  | DNS Interpretation Checks | Control DNS interception checks | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Command-Line Flag Security Warnings | Show warning if browser is invoked with insecure command lines | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Block Unsupported OS Warning | Show warning when browser runs on unsupported OS | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Relaunch Notification Period, Relaunch Notification | Show notification when browser restart is required after update | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Payment Methods Query | Disable querying of payment methods from extensions | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Alternate Error Pages | Disable alternate error pages configured by websites | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Enable Translation | Enable or disable browser translation feature | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | User Feedback | Disable Help > Report an issue option | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Spell Check Service | Disable browser spell check service | Chrome, Ulaa, Chromium | Windows, Mac |
|  | WebRTC Event Log Collection | Disable WebRTC event log collection | Chrome, Ulaa, Chromium | Windows, Mac |
|  | URL-keyed Anonymized Data Collection | Disable URL-based data collection | Chrome | Windows, Mac |
|  | External Extensions | Block extensions not present in web store | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Block Insecure Extension Types | Block insecure extensions | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Cross-Origin Authentication Prompt | Control cross-origin authentication prompts for third-party images | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Disable Certificate Transparency Enforcement for subjectPublicKeyInfo hashes | Configure certificate transparency enforcement for specific public key hashes | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Authentication Schemes | Configure browser authentication schemes | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Remote Access Host Service | Disable Google Remote Desktop service | Chrome | Windows, Mac |
|  | Disk Cache Size | Configure browser disk cache size | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Online Revocation Checks for Local Anchors | Verify local links against online certificate revocation list | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Globally Scoped HTTP Authentication Cache | Control globally scoped HTTP authentication cache | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | HSTS Policy Bypass List | List of URLs that can bypass HSTS verification | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Enable Safe Browsing Extended Reporting | Send extended safe browsing reports | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Enable Safe Browsing for Trusted Sources | Apply safe browsing validation to HTTPS sites | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Quic Protocol | Enable or disable QUIC protocol (https://www.chromium.org/quic/) | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Desktop Sharing Hub | Disable site sharing features such as Send to mobile or QR code generation | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Privacy Sandbox Prompt | Control display of Privacy Sandbox prompt | Chrome, Ulaa, Chromium | Windows, Mac |
|  | Privacy Sandbox Ad Topics | Control Privacy Sandbox ad topics setting | Chrome, Ulaa, Chromium | Windows, Mac |
|  | Privacy Sandbox Ad Measurement | Control Privacy Sandbox ad measurement setting | Chrome, Ulaa, Chromium | Windows, Mac |
|  | Privacy Sandbox Site Enabled Ads | Control Privacy Sandbox site-suggested ads setting | Chrome, Ulaa, Chromium | Windows, Mac |
|  | HTTPS-Only Mode | Send all requests over HTTPS | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
| Security Restrictions > GPU Rendering | Hardware Acceleration Mode | Enable or disable hardware acceleration | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | 3D APIs | Enable or disable 3D rendering APIs | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
| Security Restrictions For URLs | Each setting configured works only for the sites mentioned in the website group |  | Chrome, Edge, Ulaa, Chromium |  |
| User Account Settings | Browser sign-in | Control browser sign-in and data syncing | Chrome, Edge, Chromium | Windows, Mac |
|  | Allow users to use guest mode | Configure guest mode usage | Chrome, Edge, Chromium | Windows, Mac |
|  | Force ephemeral mode | Automatically delete user profiles and browsing data when browser closes | Chrome, Edge, Chromium | Windows, Mac |
|  | Allow users to add people | Control creation of additional browser profiles | Chrome, Edge, Chromium | Windows, Mac |
|  | Import Search Engines | Control import of search engines from other browsers | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Define primary browser account | Set default browser account for sign-in and sync | Chrome, Edge | Windows, Mac |
|  | Define download directory | Specify default download directory | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Windows SSO for Microsoft sites | Enable Windows SSO for Microsoft services | Chrome, Edge, Ulaa, Chromium, Firefox | Windows |
|  | Define accounts to access enterprise Google apps | Restrict login to specified Google Workspace domains | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
| Homepage & Startup | Import saved passwords \| Import Autofill form data \| Import Home Page | Import saved passwords, autofill data, and home page from another installed browser on first run | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Make New Tab as Homepage \| Home Page URL | Set new tab as homepage or configure custom homepage URL | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Show Home Button | Enable or disable home button display | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
|  | Default New Tab page URL | Set page opened when new tab is created | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Action on Startup | Configure URLs to open on browser startup | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
| Proxy | Proxy Settings for Corresponding Browser | Configure browser proxy settings | Chrome, Edge, Ulaa, Chromium, Firefox | Windows, Mac |
| Bookmarks Manager | Bookmarks | Configure bookmarks URLs | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Default Browser | Set browser as default (domain-joined devices only) | Chrome, Edge, Ulaa, Chromium, Firefox, Internet Explorer | Windows |
| Legacy settings | Legacy same site cookie behavior for specific URLs | List of URLs that use legacy cookie behavior | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
|  | Turn on encryption standard | Configure encryption standards such as TLS and SSL versions | Chrome, Edge, Ulaa, Chromium, Internet Explorer | Windows, Mac |
|  | Disable Certificate Transparency Enforcement for Legacy CAs | Disable certificate transparency enforcement for specific CAs | Chrome, Edge, Ulaa, Chromium | Windows, Mac |
| Content Restrictions (Edge) | Adobe Flash | Restrict Adobe Flash plugins | Microsoft Edge (Legacy) | Windows |
|  | Automatic search suggestions in address bar | Disable automatic search suggestions | Microsoft Edge (Legacy) | Windows |
| Security Restrictions > Privacy & Safety (Edge) | Usage of extensions | Control extension usage | Microsoft Edge (Legacy) | Windows |
|  | Prevent Access to about Flags | Block access to about:flags | Microsoft Edge (Legacy) | Windows |
|  | Donation in Microsoft Wallet | Disable wallet donations via https://wallet.microsoft.com/donation | Edge |  |
|  | Show Search Suggestions | Control Microsoft Edge search suggestions | Edge | Windows, Mac |
|  | Allow CV list | Control Compatibility View list usage | Microsoft Edge (Legacy) | Windows |
|  | Password Manager | Disable password manager and save password prompts | Edge, Microsoft Edge (Legacy) | Windows, Mac |
|  | Prevent Smartscreen Prompt Override for files | Prevent bypassing SmartScreen file warnings | Edge | Windows, Mac |
|  | Allow Do not Track | Control Do Not Track setting | Microsoft Edge (Legacy) | Windows |
|  | Show Microsoft Rewards experiences | Control Microsoft Rewards features | Edge | Windows, Mac |
|  | Microsoft Defender SmartScreen | Enable or disable SmartScreen protection | Edge | Windows, Mac |
|  | Microsoft Shopping Assistant | Control shopping features in Edge | Edge | Windows, Mac |
|  | Startup boost | Start Edge processes at OS sign-in | Edge | Windows |
| Security Restrictions (Firefox) | About add-ons page | Block access to about:addons | Firefox | Windows, Mac |
|  | About configurations page | Block access to about:config | Firefox | Windows, Mac |
|  | About support page | Block access to about:support | Firefox | Windows, Mac |
|  | Built in PDF viewer | Enable or disable built-in PDF viewer | Firefox | Windows, Mac |
|  | Bookmarks toolbar | Control bookmarks toolbar visibility | Firefox | Windows, Mac |
|  | Menu bar | Control menu bar visibility | Firefox | Windows, Mac |
| User Account Settings (Firefox) | Accounts | Control Firefox account sign-in and sync | Firefox | Windows, Mac |
|  | About profiles page | Block access to about:profiles | Firefox | Windows, Mac |
| Content Restrictions (Internet Explorer) | Auto-complete for web addresses | Control AutoComplete for web addresses | Internet Explorer | Windows |
| Zone Settings (Internet Explorer) | Local Intranet \| Trusted Websites \| Restricted Websites \| Internet | Configure Internet Options > Security zone settings | Internet Explorer | Windows |
| Zone Settings > Common Settings (Internet Explorer) | Prevent users from adding/deleting websites in zones | Prevent changes to security zones | Internet Explorer | Windows |
|  | Prevent users from changing security level for each zone | Prevent changes to zone security levels | Internet Explorer | Windows |
| Lock Down > Tabs (Internet Explorer) | General Page | Block access to General settings page | Internet Explorer | Windows |
|  | Security Page | Block access to Security settings page | Internet Explorer | Windows |
|  | Content Page | Block access to Content settings page | Internet Explorer | Windows |
|  | Connections Page | Block access to Connections settings page | Internet Explorer | Windows |
|  | Programs Page | Block access to Programs settings page | Internet Explorer | Windows |
|  | Privacy Page | Block access to Privacy settings page | Internet Explorer | Windows |
|  | Advanced Page | Block access to Advanced settings page | Internet Explorer | Windows |
| Lock Down > Tools (Internet Explorer) | Full screen mode | Enable full screen mode | Internet Explorer | Windows |
|  | Hide The Command Bar | Hide the Command Bar | Internet Explorer | Windows |
|  | Hide The Status Bar | Hide the Status Bar | Internet Explorer | Windows |
|  | Lock All Tool Bars | Lock all toolbars | Internet Explorer | Windows |
|  | Inprivate Tools | Control InPrivate tools availability | Internet Explorer | Windows |
|  | Reset IE settings | Prevent resetting IE settings | Internet Explorer | Windows |
|  | Change proxy settings | Prevent changing proxy settings | Internet Explorer | Windows |
|  | Disable Changing Automatic Configuration Settings | Prevent changing automatic configuration settings | Internet Explorer | Windows |
|  | Disable changing connection settings | Prevent changing connection settings | Internet Explorer | Windows |
| Security Restrictions (Internet Explorer) | Turn on certificate address mismatch warning | Enable certificate address mismatch warning | Internet Explorer | Windows |
|  | Allow software to run or install even if the signature is invalid | Allow unsigned software execution | Internet Explorer | Windows |
|  | Check for signatures on downloaded programs | Verify digital signatures on downloads | Internet Explorer | Windows |
|  | Use HTTP 1.1 | Control HTTP/1.1 usage | Internet Explorer | Windows |
|  | Use HTTP 1.1 through proxy connections | Control HTTP/1.1 usage via proxy | Internet Explorer | Windows |
|  | Do not save encrypted pages to disk | Prevent caching of HTTPS pages | Internet Explorer | Windows |
|  | Consistent Mime Handling for Internet Explorer Processes | Ensure consistent MIME handling | Internet Explorer | Windows |
|  | Empty Temporary Internet Files folder when browser is closed | Clear temporary files on close | Internet Explorer | Windows |
|  | Check for server certificate revocation | Enable server certificate revocation checks | Internet Explorer | Windows |
|  | Turn off the Security Settings Check feature | Disable security settings check warnings | Internet Explorer | Windows |
|  | Protection From Zone Elevation for Internet Explorer Processes | Prevent zone elevation attacks | Internet Explorer | Windows |
|  | Restrict File Download for Internet Explorer Processes | Restrict file downloads | Internet Explorer | Windows |
|  | Turn off encryption support | Disable selected encryption protocols | Internet Explorer | Windows |
| Add-On Management (Internet Explorer) | Prevent the computer from loading toolbars and Browser Helper Objects when InPrivate Browsing starts | Block toolbars and BHOs in InPrivate mode | Internet Explorer | Windows |
|  | Third-party browser extensions | Enable or disable third-party extensions | Internet Explorer | Windows |
|  | Control Add-ons | Manage and restrict add-ons | Internet Explorer | Windows |
|  | Automatically activate newly installed add-ons | Control automatic activation of new add-ons | Internet Explorer | Windows |
|  | Restrict ActiveX Install for Internet Explorer Processes | Restrict ActiveX installation | Internet Explorer | Windows |
|  | Remove "Run this time" button for outdated ActiveX controls in Internet Explorer | Remove bypass option for outdated ActiveX controls | Internet Explorer | Windows |
|  | Turn off blocking of outdated ActiveX controls for Internet Explorer | Allow outdated ActiveX controls | Internet Explorer | Windows |