<\/p>\n
A small percentage of large companies moved to Windows 10 in the second half of 2016 and of course, 2017 and 2018 will be full years for Windows 10 deployments.<\/a><\/p>\n <\/p>\n Windows 10 introduced Microsoft Edge as the default web browser, but Edge is not enterprise ready<\/a>. Internet Explorer 11 is still present on Windows 10. It is somehow hidden, but Microsoft’s intention is to offer Internet Explorer 11 as an alternative until Microsoft Edge will get the maturity level to answer the enterprise space needs.<\/p>\n <\/p>\n Starting with Windows 10 Anniversary Update (build version 1607)\u00a0Integrated Windows Authentication<\/a>\u00a0is available in Microsoft Edge.<\/p>\n <\/p>\n So, is Microsoft Edge out of the discussion? What is the best setup for Windows 10 regarding Microsoft Edge and Microsoft Internet Explorer 11?<\/strong><\/span><\/p>\n I personally think Microsoft Edge is still not ready to cover the current needs the enterprises have, but is the browser where Microsoft is investing. So, it is a matter of time (a year, maybe two) until Microsoft Edge is getting to that level where is no longer necessary to count on Microsoft Internet Explorer 11.<\/p>\n <\/p>\n Even if Microsoft Internet Explorer 11 could be set as the default web browser for Windows 10, keep in mind IE11 was released in October 2013 and there will be no new version of it. IE11 will continue to receive security updates and technical support for the support lifecycle of the version of Windows on which it is installed. <\/p>\n <\/p>\n In the next section, I am describing the best way I consider Windows 10 should be configured to support Microsoft SharePoint, Microsoft CRM and other Line of Business web apps<\/span><\/strong> <\/p>\n In this way, you expose Microsoft Edge to the users, which is a good thing, because long term this will be the only Microsoft web browser available.<\/p>\n <\/p>\n Aside from your tests, you will benefit from the company’s users Microsoft Edge usage -> they will report all the Microsoft Edge problematic Line of Business applications, which is again a good thing because you are able to track them and from time challenge the vendors to step-up.<\/p>\n <\/p>\n In both cases (when, either the solution is not compatible with Microsoft Edge, or when Microsoft Edge is not mature enough), thanks to Enterprise Sites Mode List you can automatically redirect the request to IE11.<\/p>\n <\/p>\n <\/p>\n Start by configuring the Local Intranet sites<\/span><\/strong><\/p>\n The main reason for setting up first the Local Intranet sites is because of Integrated Windows Authentication<\/a>. In fact, the automatic logon can be configured for each Internet Zone (Internet \/ Local intranet \/ Trusted sites \/ Restricted sites), but Microsoft Edge will only<\/strong><\/span> perform automatic logon\u00a0for the FQDNs\/URLs added part of Local Internet zone. \u00a0So, you need to add the FQDNs\/URLs of Microsoft SharePoint \/ CRM \/ Exchange and other Line of Business applications part of Local Intranet zone in case you want Microsoft Edge to not prompt for user and password.<\/p>\n <\/p>\n <\/p>\n Let’s see how to get this functionality<\/span><\/p>\n <\/p>\n These above-mentioned settings will help you get automatic logon in Microsoft Edge when you are accessing Integrated Windows Authentication<\/a>\u00a0web applications \u00a0– so, no more authentication screen who request to type the username and password.<\/p>\n <\/p>\n However, Microsoft Egde is not 100% compatible with\u00a0Microsoft SharePoint \/ CRM \/ Exchange and other Line of Business applications. For example:<\/p>\n <\/p>\n In some cases, these incompatibilities can be\u00a0dealbreaker and the only option is to fallback to IE11 -> where Enterprise Sites Mode List<\/em> should be used.<\/p>\n <\/p>\n Let’s see how to implement Enterprise Sites Mode List<\/span><\/strong><\/p>\n <\/p>\n Adding those FQDNs\/URLs part of the Enterprise_mode_sites_schema_v2.xml<\/em> and configuring them to open using IE11 will make Microsoft Edge redirect those requests. <\/p>\n <\/p>\n <\/p>\n Can Enterprise Sites Mode List redirect specific SharePoint site collections to IE11?<\/strong><\/span><\/p>\n Yes! Enterprise Sites Mode List is not restricted to domain names (like Internet Zone are).<\/p>\n <\/p>\n For example, let’s assume you have multiple SharePoint farms where the URL of all the Web Applications is sharing the yourcustomdomainame.com<\/em>\u00a0DNS zone (e.g.: europe.yourcustomdomainame.com, america.yourcustomdomainame.com, asia.yourcustomdomainame.com …<\/em>). If from all your SharePoint site collections only one is using features that are not running well in Microsoft Edge, then the easiest solution is to add *.yourcustomdomainame.com<\/em> in the\u00a0Local Intranet Zone and specify the non-Edge-ready site collections URLs (e.g.: europe.yourcustomdomainame.com\/sites\/heavy-IE11-based-site<\/em>) in \u00a0Enterprise Sites Mode List to\u00a0be opened with IE11.<\/p>\n In this way, all the site collections will be opened in Microsoft Edge, and only\u00a0europe.yourcustomdomainame.com\/sites\/heavy-IE11-based-site\u00a0<\/em>will be passed\/handled to Microsoft IE11.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" There is quite some time since Windows 10 was released, but usually, the large companies (especially non-tech ones) start to deploy it internally when there is absolutely no good deal to run the older OS versions. Reasons like: when Microsoft is announcing the end of mainstream support for the previous OS; when the competitors are … Continue reading SharePoint, CRM, Line of Business web apps, Integrated Windows Authentication and Windows 10 (Microsoft Edge, Microsoft Internet Explorer 11)<\/span> Requesting to type the username and password when a user is accessing the line of business applications is the first thing observed with Windows 10 and Microsoft Edge. This is happening because Integrated Windows Authentication<\/a> is not available in Microsoft Edge. Usually, the large non-tech companies still have some SharePoint, Microsoft CRM, Microsoft Exchange, Project <\/del>\u2026 . Even Office 365 SSO relies on Integrated Windows Authentication<\/a>.<\/del><\/p>\n
\nIn my opinion, setting IE11 as the default browser in Windows 10 is making the dependency to it much stronger, until the point where IE11 becomes obsolete and your Line of Business apps still aren’t upgraded. Leaving Microsoft Edge as the default browser and not configuring Enterprise Site Mode List is again not good because you actually reduce the user productivity due to all the issues are coming using this browser on old software web solutions.
\nBellow, I am providing two links that will provide enough details to decide the route you want to go:<\/p>\n\n
\nI think the combination of Microsoft Edge and Microsoft Internet Explorer 11 is good long term. That means is necessary to configure both browsers to use proper settings. Microsoft Edge should be the default Windows 10 browser. Enterprise Sites Mode List must be configured to instruct Microsoft Edge the compatibility mode and the browser version that must be used for the Line of Business applications.<\/p>\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_17\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_17.png\")
<\/a><\/p>\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_18\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_18.png\")
<\/a><\/p>\n\n
\nIt is a good thing to deploy all the ADMX files (and related ADML’s), but in case you are interested to just have the Microsoft Internet Explorer policy definitions, then inetres.admx and inetres.adml are the minimum requirement for the central store deployment.
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_11\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_11.png\")
\n<\/a>.<\/span>![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_12\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_12.png\")
<\/a>\u00a0.<\/span><\/li>\n
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_13\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_13.png\")
<\/a>
\n.<\/span><\/li>\n
\nPolicies -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Site to Zone Assignment List<\/em>
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_14\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_14.png\")
<\/a>
\n.<\/span>
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_19\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_19.png\")
<\/a>
\n.<\/span><\/li>\n<\/ol>\n\n
\n
\nIt is a good thing to deploy all the ADMX files (and related ADML’s), but in case you are interested to just have the Microsoft Edge Policy Definitions, then MicrosoftEdge.admx and MicrosoftEdge.adml are the minimum requirement for the central store deployment.
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_02\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_02.png\")
<\/a>\u00a0.<\/span>![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_03\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_03.png\")
<\/a>
\n.<\/span><\/li>\n
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_04\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_04.png\")
<\/a>
\n.<\/span>
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_05\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_05.png\")
<\/a>
\n.<\/span><\/li>\n
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_06\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_06.png\")
\n<\/a>.<\/span>
\nThe Enterprise Sites Mode List policy can be located in both places: Computer Configuration<\/em> and User Configuration<\/em>.
\nComputer Configuration -> Policies -> Administrative Templates -> Windows Components -> Microsoft Edge<\/em>
\nor
\nUser Configuration -> Policies -> Administrative Templates -> Windows Components -> Microsoft Edge<\/em>
\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_07\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_07.png\")
<\/a><\/li>\n<\/ol>\n
\nSo, the user will open Microsoft Edge, will enter the Line of Business URL and Microsoft Edge will redirect that request to Microsoft IE11.<\/p>\n![\"SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_08\"](\"https:\/\/www.vioreliftode.com\/wp-content\/uploads\/2017\/02\/SharePoint_Windows_10_Microsoft_Edge_Microsoft_Internet_Explorer_11_08.png\")
<\/a><\/p>\n