This is what the new Chromium-based Edge looks like

Discussion in 'other software & services' started by stapp, Mar 5, 2019.

  1. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada

    I know which makes it even more baffling.

    Right, so I tested in my Admin account, but still no luck.

    Maybe, but doesn't make sense to me.

    Sorry, I don't understand ??

    EDIT

    Wait, I think I see....

    Well I think I'm going to need Kees to shed more light on this for me ;)

    Thanks, I read this and other similar articles, but they don't help with why Appcontainer is not enabled in mine and other's cases.
     
  2. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    @Kees1958
    Hi,;)

    W.10 Home Admin.

    No AudioSandboxEnabled key:


    Immagine.jpg

    Standard:

    The path is different:


    2.jpg
     
  3. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    I promoted my Standard account to Administartor and even rebooted, verified the change,as Kees suggested, but the Edge keys don't exist where they are for him or where you show it in your first screenshot.

    Edit

    even in my other account which has always been Admin, I don't see the Edge key where it should be:

    regedit edge key.png
     
    Last edited: Dec 27, 2021
  4. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
  5. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,868
    Location:
    Outer space
    Ah yes, the current user seems to be the issue. If I open the registry editor as Admin and create the key, it is only for the admin user. If I open registry editor as a normal user, I can see it is not there, but I don't have the rights to create it. Can I create it for other users when I open registry editor as Admin?

    I also saw Kees mentions Edge as the only Chromium browser with CIG in the renderer process, but Chromium already has it. For ACG it is only enabled in the Chromium renderer process when using jitless mode, but the same goes for Edge. The difference is with Edge's enhanced security mode(previously super duper secure mode), there is more granularity in setting it up, instead of always on or off.
    https://madaidans-insecurities.github.io/firefox-chromium.html#acg-cig
    https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/
     
  6. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Got it!

    edge appcontainer-enabled.png

    You need to first promote your Standard account to an Administrator account, then merge the regfile, then demote the account back to Standard. Of course the .txt extension needs to be changed to .REG before merging the file.



    @Sampei Nihira

    thank you for steering me in the right direction :thumb:

    EDIT

    re-uploaded correct .txt regfile
     

    Attached Files:

    Last edited: Dec 27, 2021
  7. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Theoretically the procedure is the same as running the reg file, but evidently in the case of Edge it is not so.
     
  8. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    I would need to see your administrator path for the key created and also the Standard path.
    As a fisherman I prefer the saying ;):

    P.S.
    Not to mention that the reg file sets Adguard DNS (which I do not use).

    Did you insert the reg file with only the main rule?
     
  9. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    The key for my Standard account:


    It looks like dns is set to quad9, which I happen to use.

    Edge key for standard user.png

    There is a problem trying to merge the key from my Admin account:

    Edge key error for Admin.png

    For some reason it isn't seen as a regfile script??

    if you mean the dns rule, yes. I made no changes to the regfile before merging it.
     
  10. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    That's why I prefer to create the registry keys manually.
    Did you check if the AudioSandboxEnabled key was present before launching the reg file?
     
  11. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada

    That key was not present before I launched the reg file

    You have my abject apologies :D After merging the regfile in my temporarily promoted Standard account,, I inadvertently renamed it to edge.txt. It is actually Edge_AppContainer.txt. I re-uploaded the correct file in post #931.

    EDIT

    I researched my mistake a bit more and realized I used someone else's regfile entries in edge.txt, which explains the AdGuard dns value. Anyway, the correct file is attached above for quad9dns

    All is working fine now also on my Admin account:

    Edge key for admin user.png
     
    Last edited: Dec 27, 2021
  12. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    yes you can. normally GPO should be your first attempt concerning software which is able to obey it, msedge is such software.
    for registry hacking you need to go
    HKEY_USERS\S-1-5-21... for the right user.
    HKEY_CURRENT_USER is only a copy of the current user from there, settings will be written back.

    but for a simple way just login to users account, change settings and log off.

    HKEY_USERS\.DEFAULT is blue print for new users.
     
  13. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Nice tip, thanks :thumb:

    my Admin account ends in 1001.

    regedit-users.png
     
  14. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
  15. guest

    guest Guest

    Microsoft is testing a new “Games” panel in the Edge browser
    December 28, 2021
     
  16. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    for your own account it does not matter, you should use HKCU, not HKU. HKU is for other users. in case you modify HKU/your-account you might loose it because of HKCU on log-off
     
  17. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    I take it you don't want to use someone else's regfile? You'd rather catch your own fish? :D

    The MS document actually seems to imply Enterprise versions of Windows.

    In my case i temporarily promoted my Standard account to and Admin account, merged the regfile, then demoted back to Standard account. The info you posted looks like it could be an easier way to merge the file into a Standard account, if I understand it correctly.

    1. open Regedit as Administrator
    2. merge regfile in to Standard account located within HKCU key, eg: HKEY_USERS\S-1-5-21...
    3. all done.
     
  18. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,982
    Two pages again and again the same story. Why you don't open a new thread for that specific issue?
    Just wondering......
     
  19. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    you did. you made it more complicated with the danger of losing data when switching account rights. if you want to modify other accounts just use HKU - for your own use HKCU.

    ofc you need to modify reg-files from
    HKEY_CURRENT_USER\Software
    to
    HKEY_USERS\S-1-5-21-0123456789-0123456789-0123456789-1001\Software
    to make it work for that user (other users have different key numbers).

    for HKU/HKLM you surely need admin rights, thats why each windows need an admin account (not the hidden one), and HKLM is valid for all users.

    official paper
    https://docs.microsoft.com/en-us/tr...r/performance/windows-registry-advanced-users
    app container? it is as it is. msedge is special because its specialized for windows. it had reason because it did not start in sandboxie while chrome did. (i do not follow that discussion nor knowing the result because i dont care)
    i even dont know if appcontainer would show up on my system because its part of the ms app and its security - i dont have/i cant run here.

    if msedge is running fine at least, why bother with such nifties? if some other security software has problems it might better to deal with vendor as it seems a special problem. i also think that it does not matter if w10 or w11.
     
  20. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Good, makes sense :thumb:
     
  21. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    you are welcome. in some or most cases i cannot help that specific, but i know a lot of extendable basics ;)
     
  22. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,982
    o_O o_O o_O
     
  23. guest

    guest Guest

    Is Microsoft adding too many controversial features to its Edge browser?
    December 30, 2021
     
  24. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    With the upgrade to 21H2 I enabled the Appcontainer rederer in Edge.
    I simply entered the key as per Microsoft documentation in the Standard account in:


    HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Edge

    which was not present with 21H1.
    There is no need to act on the account or enter additional registry keys.
    When the feature will be available by default, you will probably have to delete the registry key because it introduces a policy (managed by the organization) on DNS.
    So it is better to set it before creating the key.
     
    Last edited: Jan 3, 2022
  25. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    So under that key you simply created a 32 bit REG_DWORD value named: RendererAppContainerEnabled ; 0x00000001 ?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.