Problem Installing Microsoft Edge MSI with EdgeUpdate Policy Is Configured

%3CLINGO-SUB%20id%3D%22lingo-sub-1489525%22%20slang%3D%22en-US%22%3EProblem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1489525%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20noticed%20a%20problem%20with%20installing%20Edge%20Stable%20(tested%20on%2083.0.478.54)%20when%20attempting%20to%20install%20by%20with%20the%20MSI.%26nbsp%3B%20We're%20applying%20the%20InstallDefault%20%3D%200%20and%20UpdateDefault%20%3D%200%20policies%20to%20prevent%20Edge%20from%20automatically%20updating.%26nbsp%3B%20Our%20update%20strategy%20will%20be%20to%20deploy%20Edge%20periodically%20with%20SCCM.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20a%20work-around%2C%20I%20can%20remove%20the%20%22InstallDefault%22%20regedit%2C%20perform%20the%20install%2C%20then%20perform%20a%20group%20policy%20update.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Jeffrey_Fronius_0-1593099512881.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F201098i75E3DA0251B9DE97%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Jeffrey_Fronius_0-1593099512881.png%22%20alt%3D%22Jeffrey_Fronius_0-1593099512881.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1490937%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1490937%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F522571%22%20target%3D%22_blank%22%3E%40Jeffrey_Fronius%3C%2FA%3E%26nbsp%3BThanks%20for%20reaching%20out%20and%20reporting%20this.%20I'll%20loop%20in%20our%20Enterprise%20team%20and%20let%20you%20know%20if%20they%20have%20any%20insights%20to%20share.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EFawkes%20(they%2Fthem)%3CBR%20%2F%3E%3CBR%20%2F%3EProject%20%26amp%3B%20Community%20Manager%20-%20Microsoft%20Edge%3CI%3E%3C%2FI%3E%3C%2FI%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1491007%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1491007%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F522571%22%20target%3D%22_blank%22%3E%40Jeffrey_Fronius%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%26nbsp%3B%3CSPAN%3EInstallDefault%26nbsp%3Bpolicy%20is%20probably%20blocking%20installation%20--%20InstallDefault%3D%3D0%20corresponds%20to%20%22don't%20allow%20Edge%20installation%22.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EThe%20UpdateDefault%20policy%20is%20sufficient%20to%20prevent%20the%20browser%20from%20updating.%20If%20you%20set%20InstallDefault%20to%20%22Not%20Configured%22%20(or%20Configured%2Fone%20of%20the%20allowed%20values)%20you%20should%20be%20good%20to%20go.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1491061%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1491061%22%20slang%3D%22en-US%22%3EThe%20policy%20documentation%20seems%20to%20state%20this%20only%20impacts%20installing%20through%20edge%20update%2C%20not%20when%20installing%20through%20other%20methods.%20Perhaps%20I'm%20reading%20into%20it%20wrong.%20If%20we%20in%20fact%20don't%20need%20this%20to%20suppress%20automatic%20updating%2C%20then%20I'll%20look%20to%20remove%20it.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fmicrosoft-edge-update-policies%23installdefault%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fmicrosoft-edge-update-policies%23installdefault%3C%2FA%3E%3CBR%20%2F%3EAllow%20installation%20default%3CBR%20%2F%3EMicrosoft%20Edge%20Update%201.2.145.5%20and%20later%3CBR%20%2F%3E%3CBR%20%2F%3EDescription%3CBR%20%2F%3EYou%20can%20specify%20the%20default%20behavior%20of%20all%20channels%20to%20allow%20or%20block%20Microsoft%20Edge%20updates%20when%20Microsoft%20Edge%20Update%20is%20used.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20override%20this%20policy%20for%20individual%20channels%20by%20enabling%20the%20'Allow%20installation'%20policy%20for%20specific%20channels.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20disable%20this%20policy%2C%20the%20installation%20of%20Microsoft%20Edge%20through%20Microsoft%20Edge%20Update%20is%20blocked.%20This%20only%20affects%20the%20installation%20of%20Microsoft%20Edge%20software%20only%20when%20users%20are%20running%20Microsoft%20Edge%20Update%20and%20when%20they%20haven't%20configured%20the%20'Allow%20installation'%20policy.%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20policy%20doesn't%20prevent%20Microsoft%20Edge%20Update%20from%20running%20or%20prevent%20users%20from%20installing%20Microsoft%20Edge%20software%20using%20other%20methods.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1492596%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1492596%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F522571%22%20target%3D%22_blank%22%3E%40Jeffrey_Fronius%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAgreed%20that%20the%20docs%20for%20InstallDefault%20need%20to%20be%20more%20clear%20about%20the%20behavior%20-%20I%20will%20follow%20up%20on%20that%2C%20thank%20you%20for%20the%20feedback.%20It's%20actually%20our%20installer%20(which%20is%20shared%20across%20all%20deployment%20types%20--%20EdgeUpdate%2FMSI%2FWSUS%2Fetc.)%20that%20reads%20the%20InstallDefault%20key.%20Let%20me%20know%20if%20you%20hit%20any%20additional%20issues.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20again%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1493578%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20Installing%20Microsoft%20Edge%20MSI%20with%20EdgeUpdate%20Policy%20Is%20Configured%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1493578%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F522571%22%20target%3D%22_blank%22%3E%40Jeffrey_Fronius%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3EThe%20policy%20documentation%20seems%20to%20state%20this%20only%20impacts%20installing%20through%20edge%20update%2C%20not%20when%20installing%20through%20other%20methods.%20Perhaps%20I'm%20reading%20into%20it%20wrong.%20If%20we%20in%20fact%20don't%20need%20this%20to%20suppress%20automatic%20updating%2C%20then%20I'll%20look%20to%20remove%20it.%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EEdge%20MSI%20package%20bundle%26nbsp%3BMicrosoft%20Edge%20Update%20as%20well%2C%20and%20it's%20what's%20used%20to%20perform%20the%20installation%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eyou%20can%20inspect%20MSI%20with%20Orca%20or%20InstEd%20and%20see%26nbsp%3BInstallCommand%3CBR%20%2F%3Esomething%20like%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-html%22%3E%3CCODE%3EMicrosoftEdgeUpdateSetup.exe%20%2Fsilent%20%2Finstall%20%22%5BProductTag%5D%22%20%2Finstallsource%20enterprisemsi%5BOptOmahaArgs%5D%20%2Fappargs%20..%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I've noticed a problem with installing Edge Stable (tested on 83.0.478.54) when attempting to install by with the MSI.  We're applying the InstallDefault = 0 and UpdateDefault = 0 policies to prevent Edge from automatically updating.  Our update strategy will be to deploy Edge periodically with SCCM.

 

As a work-around, I can remove the "InstallDefault" regedit, perform the install, then perform a group policy update.

Jeffrey_Fronius_0-1593099512881.png

 

5 Replies
Highlighted

@Jeffrey_Fronius Thanks for reaching out and reporting this. I'll loop in our Enterprise team and let you know if they have any insights to share.

 

Fawkes (they/them)
Project & Community Manager - Microsoft Edge

Highlighted

Hey @Jeffrey_Fronius,

 

The InstallDefault policy is probably blocking installation -- InstallDefault==0 corresponds to "don't allow Edge installation". The UpdateDefault policy is sufficient to prevent the browser from updating. If you set InstallDefault to "Not Configured" (or Configured/one of the allowed values) you should be good to go.

 

Thanks,

 

Andy

Highlighted
The policy documentation seems to state this only impacts installing through edge update, not when installing through other methods. Perhaps I'm reading into it wrong. If we in fact don't need this to suppress automatic updating, then I'll look to remove it.

https://docs.microsoft.com/en-us/deployedge/microsoft-edge-update-policies#installdefault
Allow installation default
Microsoft Edge Update 1.2.145.5 and later

Description
You can specify the default behavior of all channels to allow or block Microsoft Edge updates when Microsoft Edge Update is used.

You can override this policy for individual channels by enabling the 'Allow installation' policy for specific channels.

If you disable this policy, the installation of Microsoft Edge through Microsoft Edge Update is blocked. This only affects the installation of Microsoft Edge software only when users are running Microsoft Edge Update and when they haven't configured the 'Allow installation' policy.

This policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods.
Highlighted

Hey @Jeffrey_Fronius,

 

Agreed that the docs for InstallDefault need to be more clear about the behavior - I will follow up on that, thank you for the feedback. It's actually our installer (which is shared across all deployment types -- EdgeUpdate/MSI/WSUS/etc.) that reads the InstallDefault key. Let me know if you hit any additional issues.

 

Thanks again,

 

Andy

Highlighted

@Jeffrey_Fronius wrote:
The policy documentation seems to state this only impacts installing through edge update, not when installing through other methods. Perhaps I'm reading into it wrong. If we in fact don't need this to suppress automatic updating, then I'll look to remove it.

Edge MSI package bundle Microsoft Edge Update as well, and it's what's used to perform the installation

 

you can inspect MSI with Orca or InstEd and see InstallCommand
something like

MicrosoftEdgeUpdateSetup.exe /silent /install "[ProductTag]" /installsource enterprisemsi[OptOmahaArgs] /appargs ..