Enable origin-keyed process isolation for improved security

Policy ID
OriginKeyedProcessesEnabled_recommended
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Edge version 141, Windows 7 or later
Source
Microsoft Edge Policy Templates (version 155.0.4283.45)
Category
Microsoft Edge - Default Settings (users can override)

Description

This policy enables origin-keyed process isolation for most pages, which improves security by separating content from different origins into distinct processes. This can increase the number of processes created. Users can override this setting by using command-line flags or edge://flags to turn the feature on or off.

If you enable this policy, most origins are isolated, even from other origins within the same site. For related configuration, see the IsolateOrigins and SitePerProcess policies.

If you disable this policy, origins can't be isolated from the rest of their site unless the origin explicitly requests isolation.

If you don’t configure this policy, the browser decides which origins to isolate and when. By default, this feature is disabled. The default state can change in the future.

Registry

ComputerHKEY_LOCAL_MACHINE
  • OriginKeyedProcessesEnabledREG_DWORD
UserHKEY_CURRENT_USER
  • OriginKeyedProcessesEnabledREG_DWORD

Other policies in the same category

View all policies in this category (68)