Enable Ambient Authentication for InPrivate and Guest profiles

Configure this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge.

Ambient Authentication is http authentication with default credentials when explicit credentials aren't provided via NTLM/Kerberos/Negotiate challenge/response schemes.

If you set the policy to 'RegularOnly', it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.

If you set the policy to 'InPrivateAndRegular', it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.

If you set the policy to 'GuestAndRegular', it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate

If you set the policy to 'All', it allows ambient authentication for all sessions.

Note that ambient authentication is always allowed on regular profiles.

In Microsoft Edge version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.

Policy options mapping:

* RegularOnly (0) = Enable ambient authentication in regular sessions only

* InPrivateAndRegular (1) = Enable ambient authentication in InPrivate and regular sessions

* GuestAndRegular (2) = Enable ambient authentication in guest and regular sessions

* All (3) = Enable ambient authentication in regular, InPrivate and guest sessions

Use the preceding information when configuring this policy.

Supported on: Microsoft Edge version 81, Windows 7 or later

Enable Ambient Authentication for InPrivate and Guest profiles


  1. Enable ambient authentication in regular sessions only
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value0
  2. Enable ambient authentication in InPrivate and regular sessions
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value1
  3. Enable ambient authentication in guest and regular sessions
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value2
  4. Enable ambient authentication in regular, InPrivate and guest sessions
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value3


msedge.admx

Administrative Templates (Computers)

Administrative Templates (Users)