Edit

Share via

NativeMessagingAllowlist

Control which native messaging hosts users can use

Supported versions

  • On Windows and macOS since 77 or later

Description

Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied unless they're explicitly allowed.

All native messaging hosts are allowed by default. However, if a native messaging host is denied by policy, the admin can use the allow list to change that policy.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • List of strings

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: NativeMessagingAllowlist
  • GP name: Control which native messaging hosts users can use
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Native Messaging
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

com.native.messaging.host.name1

com.native.messaging.host.name2

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist
  • Path (Recommended): N/A
  • Value name: 1, 2, 3, ...
  • Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\1 =

com.native.messaging.host.name1

SOFTWARE\Policies\Microsoft\Edge\NativeMessagingAllowlist\2 =

com.native.messaging.host.name2

Mac information and settings

  • Preference Key name: NativeMessagingAllowlist
  • Example value:
<array>
  <string>com.native.messaging.host.name1</string>
  <string>com.native.messaging.host.name2</string>
</array>

See also