Policy Reference - Global

Ivanti\Browser Management 2021.3\Global

Policy

Description

Enable Notifications

It is recommended that this policy is enabled only when required.

This policy configures the various features within Browser Management to display toast notifications to report on the various events that have occurred.

A custom title can be specified to be displayed within the toast notification.

A custom icon can be specified to be displayed within the toast notification. It is recommended that a 128x128 icon is used.

If required, the custom icon can be entered as a literal filename or as a UNC filename.

Note, the specified icon will be accessed as the user, so required read access to the folder must be granted.

Event Logging

It is recommended that this policy is enabled only when required.

When enabled this policy allows for events to be raised to the Application event log for the WebData Management, Browser Redirector and Favorites Synchronization features.

To generate events for the WebData Management feature, select the option: WebData Management Events.
Events will be raised for Cookies, History, Browser Databases, Extensions and Extension Locales.

To generate events for the Favorites Synchronization feature, select the option: Favorites Synchronization Events.
Events will be raised for creation of Default favorites and synchronization of user favorites.

To generate events for the Browser Redirector feature, select the option: Browser Redirector Events.
Events will be raised when redirection occurs.

Diagnostic Logging

It is recommended that this policy is enabled only when required.

This policy defines whether Browser Management diagnostic logging is enabled or not.

Enabling this policy will enable Browser Management logging.

Enter a value for the Log path to define the location of the log files.

Example:

C:\Temp.

The entry requires a directory path only. The file name is generated automatically by Browser Management.

License

This policy allows the Browser Management License to be distributed and must be enabled.

In the List of License keys to deploy field, enter the Ivanti provided license key

Without a license Browser Management will not function.

Ivanti\Browser Management 2021.3\Network Service

Policy

Description

Enable Automatic Updates

Enabling this policy is recommended if you are using the WebData Management feature with the Network Service installed and the Remove known advertising and tracking cookies policy is enabled.

This policy enables the Automatic Update feature.

Enabling this policy will ensure that the data files used to define advertising and tracking cookies are automatically updated. This will ensure the latest definitions file for advertising and tracking cookies can be used by WebData Management.

Ivanti\Browser Management 2021.3\Notification Service

Policy

Description

Browser Redirector Is Admin Condition

This policy is used to restrict the execution of Browser Redirector to non-administrative users.

Enabling this policy will stop the execution of Browser Redirector for users that are members of the Administrators group.

Note that when Browser Redirector is enabled, by default it is enabled for all users.

Browser Redirector User Group Condition

This policy is used to restrict the execution of Browser Redirector for users based on their Active Directory group membership.

Enabling this policy will ensure that Browser Redirector executes only for users belonging to specified Active Directory groups.

Active Directory groups are specified as follows:

{Domain Netbios Name}\{Group Name}
Where each entry is separated using a semi-colon ;

Examples:

Ivanti\User Group 1

Ivanti\User Group 1;Ivanti\User Group 2

Enable Browser Redirector

Enabling this policy is required if you require Browser Redirector functionality.

This policy enables the Browser Redirector feature.

Enabling this policy will ensure that Browser Redirector is run by the Ivanti Browser Management Notification Service.

Enable Favorites Synchronization

Enabling this policy is required if you require Favorites Synchronization functionality.

This policy enables the Favorites Synchronization feature.

Enabling this policy will ensure that Favorites Synchronization is run by the Ivanti Browser Management Notification Service.

Enable WebData Management

This policy enables the WebData Management feature.

Enabling this policy allows the Ivanti Browser Management Notification Service to handle the WebData Management features of Browser Management.

This policy will execute at user log off for all browsers. Options are available for Firefox, Chrome and Edge Chromium to perform data removal as users exit these browsers.

Another option can be enabled: Enable Application Group Support.

This policy changes the behaviour of the Firefox, Chrome and Edge Chromium processing to ensure compatibility with Ivanti Environment Manager Personalization Groups.

An additional option can be enabled: Disable WebData Management execution during logoff.

This policy allows WebData Management to be executed using a third-party application such as Ivanti Environment Manager.

If this policy is not configured, or set to Disabled, then WebData Management can be instigated via a third-party mechanism as required.

Favorites Synchronization Is Admin Condition

This policy is used to restrict the execution of Favorites Synchronization to non-administrative users.

Enabling this policy will stop the execution of Favorites Synchronization for users that are members of the Administrators group..

Note that when Favorites Synchronization is enabled, by default it is enabled for all users.

Favorites Synchronization User Group Condition

This policy is used to restrict the execution of Favorites Synchronization for users based on their Active Directory group membership.

Enabling this policy will ensure that Favorites Synchronization executes only for users belonging to specified Active Directory groups.

Active Directory groups are specified as follows:

{Domain Netbios Name}\{Group Name}
Where each entry is separated using a semi-colon ;

Examples:

Ivanti\User Group 1

Ivanti\User Group 1;Ivanti\User Group 2

WebData Management Is Admin Condition

This policy is used to restrict the execution of WebData Management to non-administrative users.

Enabling this policy will stop the execution of WebData Management for users that are members of the Administrators group.

Note that when the WebData Management is enabled, by default it is enabled for all users.

WebData Management Logoff Message

This policy defines the log off message for WebData Management.

Enabling this policy allows for a custom log off message to be displayed when WebData Management is executed during the log off phase of a user session.

By default, when the Ivanti Notification Service is used, no message is displayed during log off.

WebData Management User Group Condition

This policy is used to restrict the execution of WebData Management for users based on their Active Directory group membership.

Enabling this policy will ensure that WebData Management executes only for users belonging to specified Active Directory groups.

Active Directory groups are specified as follows:

{Domain Netbios Name}\{Group Name}
Where each entry is separated using a semi-colon ;

Examples:

Ivanti\User Group 1

Ivanti\User Group 1;Ivanti\User Group 2

Related Topics:

Policy Reference - WebData Management

Policy Reference - Favorites Synchronization

Policy Reference - Browser Redirector