Prevent enterprise websites from loading non-enterprise content in Microsoft Edge and Internet Explorer

This policy setting allows you to decide whether websites can load non-enterprise content in Microsoft Edge and Internet Explorer.

If you enable this setting, non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Microsoft Defender Application Guard.

If you disable or don't configure this setting, non-enterprise sites can open outside of the Microsoft Defender Application Guard container, directly in Internet Explorer and Microsoft Edge.

Supported on: Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
Value NameBlockNonEnterpriseContent
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

apphvsi.admx

Administrative Templates (Computers)

Administrative Templates (Users)