Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 08:39 UTC Customize Public modeDiscuss ChangeIntel on Discord

Brave Browser Group Policy settings

769 settings · 1.97.59 · 16 Oct 2026

Back to the list

Brave Software › Brave › Generative AI

Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome

Computer and userIntune-readyGeminiSparkSettings

Supported on Microsoft Windows 7 or later

What it does

Controls if the Gemini Spark agent is allowed to connect to Brave and use auto browse. Gemini Spark might not be available to your organization. 0 = Gemini Spark is allowed to connect to and use Brave auto browse 1 = Gemini Spark is not allowed to connect to or use Brave auto browse Warning: Enabling Gemini Spark to connect to Brave and use auto browse permits the Gemini Spark agent to perform autonomous, multi-step actions on Brave clients using the active browser session. This entails significant security risks, including credential risks, Local Network Ingress and loss of context aware signals. Existing management and security controls might not be respected. Administrators are advised to carefully evaluate their organization's network threat model, compliance and privacy guidelines before enabling this feature. This policy has no effect when the Google Gemini app or Brave auto browse policies are disabled. For example, the Google Gemini app can be disabled by GeminiSettings policy. For more information on Google Gemini in Brave, please see https://support.google.com/chrome/a?p=gemini_in_chrome. Brave auto browse and Gemini Spark are not available in all countries or all languages. Setting this policy to 0 - Enabled does not guarantee the feature will be enabled; it remains subject to availability. For more info on the roll-out, check the Enterprise Release Notes: https://chromeenterprise.google/resources/release-notes/.

What it writes

Hive
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry key
Software\Policies\BraveSoftware\Brave

Options

OptionTypeRegistry valueAllowed values
Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome Drop-down list GeminiSparkSettings
  • Gemini Spark is allowed to connect to and use Brave auto browse.0
  • Gemini Spark is not allowed to connect to or use Brave auto browse.1

Configure and deploy

Choose a state and the option values; the output below is generated from the template for exactly that.

State
Apply to
Options used when Enabled

Enabled · Computer · template defaults

Registry file (.reg)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave]
"GeminiSparkSettings"=dword:00000000


PowerShell

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome
# Name: GeminiSparkSettings
# Scope: Machine
# State: Enabled
# Source: brave.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave' -Name 'GeminiSparkSettings' -PropertyType 'DWord' -Value 0
  • The OMA-URI is an inferred ADMX-backed Policy CSP candidate derived from the source ADMX file name and policy name.
  • Some Microsoft policies use built-in Policy CSP pages whose area names don't match the ADMX file name, so verify the candidate against Microsoft Learn before deployment.
  • The generated payload is incomplete because one or more ADMX element values were not supplied: GeminiSparkSettings

ADMX profile candidate (OMA-URI)

./Device/Vendor/MSFT/Policy/Config/ADMX_brave/GeminiSparkSettings
Intune remediation scripts

Detection

$ErrorActionPreference = 'Stop'
$reasons = [System.Collections.Generic.List[string]]::new()

function Test-RegistryValueExists {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    return $null -ne (Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue)
}

function Test-RegistryValueEquals {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $Kind,
        [Parameter(Mandatory = $true)][object] $Expected
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    $valueObject = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue
    if ($null -eq $valueObject) {
        return $false
    }

    $actual = $valueObject.$Name
    switch ($Kind) {
        'String' { return [string]$actual -ceq [string]$Expected }
        'ExpandString' { return [string]$actual -ceq [string]$Expected }
        'DWord' { return [uint32]$actual -eq [uint32]$Expected }
        'QWord' { return [uint64]$actual -eq [uint64]$Expected }
        'MultiString' {
            $actualArray = @($actual)
            $expectedArray = @($Expected)
            if ($actualArray.Count -ne $expectedArray.Count) { return $false }
            for ($index = 0; $index -lt $actualArray.Count; $index++) {
                if ([string]$actualArray[$index] -cne [string]$expectedArray[$index]) { return $false }
            }
            return $true
        }
        'Binary' {
            $actualArray = [byte[]]$actual
            $expectedArray = [byte[]]$Expected
            if ($actualArray.Length -ne $expectedArray.Length) { return $false }
            for ($index = 0; $index -lt $actualArray.Length; $index++) {
                if ($actualArray[$index] -ne $expectedArray[$index]) { return $false }
            }
            return $true
        }
        default { return [string]$actual -ceq [string]$Expected }
    }
}

# Policy: Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome
# Name: GeminiSparkSettings
# Scope: Machine
# State: Enabled
# Source: brave.admx

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave' -Name 'GeminiSparkSettings' -Kind 'DWord' -Expected 0
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave\GeminiSparkSettings') | Out-Null
}

if ($reasons.Count -eq 0) {
    Write-Output 'Compliant'
    exit 0
}

$reasons | ForEach-Object { Write-Output $_ }
exit 1

Remediation

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome
# Name: GeminiSparkSettings
# Scope: Machine
# State: Enabled
# Source: brave.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave' -Name 'GeminiSparkSettings' -PropertyType 'DWord' -Value 0

History 44 retained releases

  1. 1.96.5924 Sep 2026
    • Renamed Allows Gemini Spark to connect to [added: Brave ]and use [removed: Brave ]auto browse[added: via Gemini in Chrome]
    • Description … Spark agent is allowed to connect to Brave and use auto browse.[added: Gemini Spark might not be available to your organization.] 0 = Gemini Spark is allowed to connect to and use Brave …
      Whole description, marked

      Controls if the Gemini Spark agent is allowed to connect to Brave and use auto browse.[added: Gemini Spark might not be available to your organization.] 0 = Gemini Spark is allowed to connect to and use Brave auto browse 1 = Gemini Spark is not allowed to connect to or use Brave auto browse Warning: Enabling Gemini Spark to connect to Brave and use auto browse permits the Gemini Spark agent to perform autonomous, multi-step actions on Brave clients using the active browser session. This entails significant security risks, including credential risks, Local Network Ingress and loss of context aware signals. Existing management and security controls might not be respected. Administrators are advised to carefully evaluate their organization's network threat model, compliance and privacy guidelines before enabling this feature. This policy has no effect when the Google Gemini app or Brave auto browse policies are disabled. For example, the Google Gemini app can be disabled by GeminiSettings policy. For more information on Google Gemini in Brave, please see https://support.google.com/chrome/a?p=gemini_in_chrome. Brave auto browse and Gemini Spark are not available in all countries or all languages. Setting this policy to 0 - Enabled does not guarantee the feature will be enabled; it remains subject to availability. For more info on the roll-out, check the Enterprise Release Notes: https://chromeenterprise.google/resources/release-notes/.

    • Option “Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome” Allows Gemini Spark to connect to [added: Brave ]and use [removed: Brave ]auto browse[added: via Gemini in Chrome]
    • Editor controls or their defaults changed.
  2. 1.93.12930 Jul 2026
    • Description … availability. For more info on the roll-out, check the Enterprise Release Notes: [removed: https://chromeenterprise.google/resources/release-notes/ If the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.][added: https://chromeenterprise.google/resources/release-notes/.]
      Whole description, marked

      Controls if the Gemini Spark agent is allowed to connect to Brave and use auto browse. 0 = Gemini Spark is allowed to connect to and use Brave auto browse 1 = Gemini Spark is not allowed to connect to or use Brave auto browse Warning: Enabling Gemini Spark to connect to Brave and use auto browse permits the Gemini Spark agent to perform autonomous, multi-step actions on Brave clients using the active browser session. This entails significant security risks, including credential risks, Local Network Ingress and loss of context aware signals. Existing management and security controls might not be respected. Administrators are advised to carefully evaluate their organization's network threat model, compliance and privacy guidelines before enabling this feature. This policy has no effect when the Google Gemini app or Brave auto browse policies are disabled. For example, the Google Gemini app can be disabled by GeminiSettings policy. For more information on Google Gemini in Brave, please see https://support.google.com/chrome/a?p=gemini_in_chrome. Brave auto browse and Gemini Spark are not available in all countries or all languages. Setting this policy to 0 - Enabled does not guarantee the feature will be enabled; it remains subject to availability. For more info on the roll-out, check the Enterprise Release Notes: [removed: https://chromeenterprise.google/resources/release-notes/ If the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.][added: https://chromeenterprise.google/resources/release-notes/.]

  3. 1.92.1342 Jul 2026
    • Added in this release.

22 later releases left it unchanged.

Template

Internal name
GeminiSparkSettings
Namespace
BraveSoftware.Policies.Brave
Template file
brave.admx
Release
Brave Browser 1.97.59 · file set d6401efd8c1937d9…
Definition, editor controls and support

Definition

<policy class="Both" displayName="$(string.GeminiSparkSettings)" explainText="$(string.GeminiSparkSettings_Explain)" key="Software\Policies\BraveSoftware\Brave" name="GeminiSparkSettings" presentation="$(presentation.GeminiSparkSettings)" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="BraveSoftware.Policies.Brave:GenerativeAI" />
      <supportedOn ref="BraveSoftware.Policies.Brave:SUPPORTED_WIN7" />
      <elements>
        <enum id="GeminiSparkSettings" valueName="GeminiSparkSettings">
          <item displayName="$(string.GeminiSparkSettings_Enabled)">
            <value>
              <decimal value="0" />
            </value>
          </item>
          <item displayName="$(string.GeminiSparkSettings_Disabled)">
            <value>
              <decimal value="1" />
            </value>
          </item>
        </enum>
      </elements>
    </policy>

Editor controls

<presentation id="GeminiSparkSettings" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions"><dropdownList refId="GeminiSparkSettings">Allows Gemini Spark to connect to Brave and use auto browse via Gemini in Chrome</dropdownList></presentation>

Supported platforms and category

BraveSoftware.Policies.Brave:category:Cat_Brave
<category displayName="$(string.Cat_Brave)" name="Cat_Brave" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
BraveSoftware.Policies.Brave:category:GenerativeAI
<category displayName="$(string.GenerativeAI_group)" name="GenerativeAI" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="BraveSoftware.Policies.Brave:brave" />
    </category>
BraveSoftware.Policies.Brave:category:brave
<category displayName="$(string.brave)" name="brave" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="BraveSoftware.Policies.Brave:Cat_Brave" />
    </category>
BraveSoftware.Policies.Brave:definition:SUPPORTED_WIN7
<definition displayName="$(string.SUPPORTED_WIN7)" name="SUPPORTED_WIN7" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
BraveSoftware.Policies.Brave:category:Cat_Brave
<category displayName="$(string.Cat_Brave)" name="Cat_Brave" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="BraveSoftware.Policies.Brave:Cat_Brave">Brave Software</string></strings>
BraveSoftware.Policies.Brave:category:GenerativeAI
<category displayName="$(string.GenerativeAI_group)" name="GenerativeAI" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="BraveSoftware.Policies.Brave:brave" />
    </category>
<strings><string id="BraveSoftware.Policies.Brave:GenerativeAI_group">Generative AI</string></strings>
BraveSoftware.Policies.Brave:category:brave
<category displayName="$(string.brave)" name="brave" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="BraveSoftware.Policies.Brave:Cat_Brave" />
    </category>
<strings><string id="BraveSoftware.Policies.Brave:brave">Brave</string></strings>
BraveSoftware.Policies.Brave:definition:SUPPORTED_WIN7
<definition displayName="$(string.SUPPORTED_WIN7)" name="SUPPORTED_WIN7" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="BraveSoftware.Policies.Brave:SUPPORTED_WIN7">Microsoft Windows 7 or later</string></strings>
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 08:39 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current