Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors

What it does

Specifies the list of Microsoft Edge for Business Data Loss Prevention Connectors service settings that apply when users attach files in Microsoft Edge. Connector Fields 1. url_list, tags, enable, disable These fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request. A tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches. Analysis is triggered if at least one tag is included in the request. 2. service_provider Identifies the analysis service provider the configuration applies to. 3. block_until_verdict If set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data. Any other integer value allows the page to access the data immediately. 4. default_action If set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service. Any other value permits the page to access the data. This policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413. Example value: [ { "block_until_verdict": 0, "default_action": "allow", "disable": [ { "tags": [ "malware" ], "url_list": [ "*.us.com" ] } ], "enable": [ { "tags": [ "malware" ], "url_list": [ "*" ] }, { "tags": [ "dlp" ], "url_list": [ "*.them.com", "*.others.com" ] } ], "service_provider": "local_system_agent" } ]

What it writes

Hive

HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER

Registry key

Software\Policies\Microsoft\Edge

Options

Configure and deploy

Choose a state and the option values; the output below is generated from the template for exactly that.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge]
"OnFileAttachedEnterpriseConnector"=""

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors
# Name: OnFileAttachedEnterpriseConnector
# Scope: Machine
# State: Enabled
# Source: msedge.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge' -Name 'OnFileAttachedEnterpriseConnector' -PropertyType 'String' -Value ''

./Device/Vendor/MSFT/Policy/Config/ADMX_msedge/OnFileAttachedEnterpriseConnector

$ErrorActionPreference = 'Stop'
$reasons = [System.Collections.Generic.List[string]]::new()

function Test-RegistryValueExists {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    return $null -ne (Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue)
}

function Test-RegistryValueEquals {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $Kind,
        [Parameter(Mandatory = $true)][object] $Expected
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    $valueObject = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue
    if ($null -eq $valueObject) {
        return $false
    }

    $actual = $valueObject.$Name
    switch ($Kind) {
        'String' { return [string]$actual -ceq [string]$Expected }
        'ExpandString' { return [string]$actual -ceq [string]$Expected }
        'DWord' { return [uint32]$actual -eq [uint32]$Expected }
        'QWord' { return [uint64]$actual -eq [uint64]$Expected }
        'MultiString' {
            $actualArray = @($actual)
            $expectedArray = @($Expected)
            if ($actualArray.Count -ne $expectedArray.Count) { return $false }
            for ($index = 0; $index -lt $actualArray.Count; $index++) {
                if ([string]$actualArray[$index] -cne [string]$expectedArray[$index]) { return $false }
            }
            return $true
        }
        'Binary' {
            $actualArray = [byte[]]$actual
            $expectedArray = [byte[]]$Expected
            if ($actualArray.Length -ne $expectedArray.Length) { return $false }
            for ($index = 0; $index -lt $actualArray.Length; $index++) {
                if ($actualArray[$index] -ne $expectedArray[$index]) { return $false }
            }
            return $true
        }
        default { return [string]$actual -ceq [string]$Expected }
    }
}

# Policy: Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors
# Name: OnFileAttachedEnterpriseConnector
# Scope: Machine
# State: Enabled
# Source: msedge.admx

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge' -Name 'OnFileAttachedEnterpriseConnector' -Kind 'String' -Expected ''
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge\OnFileAttachedEnterpriseConnector') | Out-Null
}

if ($reasons.Count -eq 0) {
    Write-Output 'Compliant'
    exit 0
}

$reasons | ForEach-Object { Write-Output $_ }
exit 1

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors
# Name: OnFileAttachedEnterpriseConnector
# Scope: Machine
# State: Enabled
# Source: msedge.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge' -Name 'OnFileAttachedEnterpriseConnector' -PropertyType 'String' -Value ''

History 37 retained releases

1. 151.0.4129.5931 Jul 2026
   • Description [removed: List][added: Specifies the list] of Microsoft Edge for Business Data Loss Prevention Connectors service[removed: s] settings [removed: to be applied ][added: that apply ]when [removed: a file is attached to][added: users attach files in] Microsoft Edge. Connector Fields 1. url_list, tags, enable, disable These fields determine …
     Whole description, marked

     [removed: List][added: Specifies the list] of Microsoft Edge for Business Data Loss Prevention Connectors service[removed: s] settings [removed: to be applied ][added: that apply ]when [removed: a file is attached to][added: users attach files in] Microsoft Edge. Connector Fields 1. url_list, tags, enable, disable These fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request. A tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches. Analysis is triggered if at least one tag is included in the request. 2. service_provider Identifies the analysis service provider the configuration applies to. 3. block_until_verdict If set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data. Any other integer value allows the page to access the data immediately. 4. default_action If set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service. Any other value permits the page to access the data. This policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413. Example value: [ { "block_until_verdict": 0, "default_action": "allow", "disable": [ { "tags": [ "malware" ], "url_list": [ "*.us.com" ] } ], "enable": [ { "tags": [ "malware" ], "url_list": [ "*" ] }, { "tags": [ "dlp" ], "url_list": [ "*.them.com", "*.others.com" ] } ], "service_provider": "local_system_agent" } ]

2. 150.0.4078.8016 Jul 2026
   • Already present in the first release ChangeIntel keeps.

35 later releases left it unchanged.

Template

Internal name

OnFileAttachedEnterpriseConnector

Namespace

Microsoft.Policies.Edge

Template file

msedge.admx

Release

Microsoft Edge 155.0.4283.62 · file set 0a733b0040dbbf02…

<policy class="Both" displayName="$(string.OnFileAttachedEnterpriseConnector)" explainText="$(string.OnFileAttachedEnterpriseConnector_Explain)" key="Software\Policies\Microsoft\Edge" name="OnFileAttachedEnterpriseConnector" presentation="$(presentation.OnFileAttachedEnterpriseConnector)" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.Edge:microsoft_edge" />
      <supportedOn ref="Microsoft.Policies.Edge:SUPPORTED_WIN7_V137" />
      <elements>
        <text id="OnFileAttachedEnterpriseConnector" maxLength="1000000" valueName="OnFileAttachedEnterpriseConnector" />
      </elements>
    </policy>

<presentation id="OnFileAttachedEnterpriseConnector" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions"><textBox refId="OnFileAttachedEnterpriseConnector"><label>Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors</label></textBox></presentation>

Microsoft.Policies.Edge:category:microsoft_edge
<category displayName="$(string.microsoft_edge)" name="microsoft_edge" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
Microsoft.Policies.Edge:definition:SUPPORTED_WIN7_V137
<definition displayName="$(string.SUPPORTED_WIN7_V137)" name="SUPPORTED_WIN7_V137" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
Microsoft.Policies.Edge:category:microsoft_edge
<category displayName="$(string.microsoft_edge)" name="microsoft_edge" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="Microsoft.Policies.Edge:microsoft_edge">Microsoft Edge</string></strings>
Microsoft.Policies.Edge:definition:SUPPORTED_WIN7_V137
<definition displayName="$(string.SUPPORTED_WIN7_V137)" name="SUPPORTED_WIN7_V137" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="Microsoft.Policies.Edge:SUPPORTED_WIN7_V137">Microsoft Edge version 137, Windows 7 or later</string></strings>