Restrict exposure of local IP address by WebRTC: registry value WebRtcLocalhostIpHandlingUserHKCU\Software\Policies\Microsoft\Edge

Policy ID: WebRtcLocalhostIpHandling
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 77, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge › WebRtc settings

Registry

WebRtcLocalhostIpHandling

REG_SZUserComputer

…\Software\Policies\Microsoft\EdgeHKCU\Software\Policies\Microsoft\Edge Current key
HKLM\Software\Policies\Microsoft\Edge

Enabled value: Depends on the option value
Element: Restrict exposure of local IP address by WebRTC

Options
Item	Stored value
Allow all interfaces. This exposes the local IP address	default
Allow public and private interfaces over http default route. This exposes the local IP address	default_public_and_private_interfaces
Allow public interface over http default route. This doesn't expose the local IP address	default_public_interface_only
Use TCP unless proxy server supports UDP. This doesn't expose the local IP address	disable_non_proxied_udp

Apply with .reg · CMD · PowerShell

UserPer-account setting

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Allow all interfaces. This exposes the local IP address
"WebRtcLocalhostIpHandling"="default"
; Allow public and private interfaces over http default route. This exposes the local IP address
"WebRtcLocalhostIpHandling"="default_public_and_private_interfaces"
; Allow public interface over http default route. This doesn't expose the local IP address
"WebRtcLocalhostIpHandling"="default_public_interface_only"
; Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
"WebRtcLocalhostIpHandling"="disable_non_proxied_udp"

CMD

:: Options (use only one)

:: Allow all interfaces. This exposes the local IP address
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default" /f
:: Allow public and private interfaces over http default route. This exposes the local IP address
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default_public_and_private_interfaces" /f
:: Allow public interface over http default route. This doesn't expose the local IP address
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default_public_interface_only" /f
:: Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
reg add "HKCU\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "disable_non_proxied_udp" /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Allow all interfaces. This exposes the local IP address
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default' -Force | Out-Null
# Allow public and private interfaces over http default route. This exposes the local IP address
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default_public_and_private_interfaces' -Force | Out-Null
# Allow public interface over http default route. This doesn't expose the local IP address
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default_public_interface_only' -Force | Out-Null
# Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'disable_non_proxied_udp' -Force | Out-Null

ComputerMachine-wide setting

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge]

; Options (use only one)
; Allow all interfaces. This exposes the local IP address
"WebRtcLocalhostIpHandling"="default"
; Allow public and private interfaces over http default route. This exposes the local IP address
"WebRtcLocalhostIpHandling"="default_public_and_private_interfaces"
; Allow public interface over http default route. This doesn't expose the local IP address
"WebRtcLocalhostIpHandling"="default_public_interface_only"
; Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
"WebRtcLocalhostIpHandling"="disable_non_proxied_udp"

CMD

:: Options (use only one)

:: Allow all interfaces. This exposes the local IP address
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default" /f
:: Allow public and private interfaces over http default route. This exposes the local IP address
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default_public_and_private_interfaces" /f
:: Allow public interface over http default route. This doesn't expose the local IP address
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "default_public_interface_only" /f
:: Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "WebRtcLocalhostIpHandling" /t REG_SZ /d "disable_non_proxied_udp" /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null

# Options (use only one)
# Allow all interfaces. This exposes the local IP address
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default' -Force | Out-Null
# Allow public and private interfaces over http default route. This exposes the local IP address
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default_public_and_private_interfaces' -Force | Out-Null
# Allow public interface over http default route. This doesn't expose the local IP address
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'default_public_interface_only' -Force | Out-Null
# Use TCP unless proxy server supports UDP. This doesn't expose the local IP address
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'WebRtcLocalhostIpHandling' -PropertyType String -Value 'disable_non_proxied_udp' -Force | Out-Null