How to Enable or Disable Bypass Enhanced Security Mode in Microsoft Edge By default, users can still bypass Microsoft Edge’s Enhanced Security Mode on certain sites. However, if you’re an IT admin managing a secure environment, you may want to disable the bypass option entirely to enforce a consistent security posture across endpoints. In this video, we’ll walk through several methods you can use to enable or disable the ESM bypass option in Microsoft Edge. Before we begin, be sure to subscribe to NinjaOne's IT Video Hub and our YouTube channel for more tech content like this. 4 Ways to Configure the Bypass Enhanced Security Mode in Edge These methods apply to Windows 10 and Windows 11, and they require Microsoft Edge version 104 or later. Administrator privileges are also needed for all methods. Method 1: Using the Registry Editor This method is ideal if you’re directly applying the policy on individual systems without Group Policy. It uses the Registry Editor and does not require command-line knowledge. Here’s the general process: Press Win + R, type regedit, press Enter. Go to: HKEY_LOCAL_MACHINE\SOFTWARE\ Policies\Microsoft\Edge If the Edge key doesn't exist, create it. In the right pane, create a new DWORD (32-bit) Value and name it: EnhanceSecurityModeAllowUserBypass. Set the value to 1 to allow bypass, or 0 to prevent bypass. Close the Registry Editor and restart Edge. Method 2: Using Command Prompt If you prefer scripts or need to automate changes, Command Prompt provides a fast and scalable option. To enable bypass... To disable bypass... Then, restart Microsoft Edge to update the policy. Method 3: Using PowerShell PowerShell is the preferred method for IT admins working with automated deployments in environments such as Intune, SCCM, or MDT. It lets you enforce settings reliably and at scale. Here’s a simplified script example. The blog includes the complete command set for both enabling and disabling the bypass policy. You can switch the value to 0 to enforce strict ESM with no bypass. Method 4: Group Policy This is the best method for domain-joined or centrally managed environments. Here’s how: Open gpedit.msc Navigate to Computer Configuration > Administrative Templates > Microsoft Edge. Find the policy: Allow users to bypass Enhanced Security Mode. Set it to Enabled to allow bypass, or Disabled to prevent it. Click Apply, then OK. Restart Edge or run gpupdate /force. Microsoft Edge includes a feature called Enhanced Security Mode, or ESM, designed to reduce exposure to malicious websites and memory-based attacks. By managing Edge’s Enhanced Security Mode bypass settings, you ensure users operate within the limits your organization requires. For more information, check out our official blog post on how to enable or disable Bypass Enhanced Security Mode in Microsoft Edge, linked in the description below.