You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: microsoft-edge/webview2/concepts/distribution.md
+3Lines changed: 3 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,6 +9,9 @@ ms.subservice: webview
9
9
ms.date: 06/27/2024
10
10
---
11
11
# Distribute your app and the WebView2 Runtime
12
+
<!-- todo: mention key words in title:
13
+
# Distribute your app and the WebView2 Runtime (Evergreen vs. fixed)
14
+
-->
12
15
13
16
When releasing an app that uses Microsoft Edge WebView2, you need to distribute the WebView2 Runtime, either by distributing the automatically updated _Evergreen_ Runtime, or by distributing a _Fixed Version_ of the Runtime.
Copy file name to clipboardExpand all lines: microsoft-edge/webview2/concepts/enterprise.md
+86-17Lines changed: 86 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,9 +11,9 @@ ms.date: 11/12/2021
11
11
# Enterprise management of WebView2 Runtimes
12
12
<!-- old title: # Manage WebView2 applications -->
13
13
14
-
[WebView2](../index.md) is a component that developers use to build their applications, and the developers can deploy a self-updating Evergreen WebView2 Runtime onto user devices to power their applications. This article discusses how IT admins can manage WebView2 applications and the WebView2 Runtime.
14
+
This article discusses how IT admins can manage<!-- todo: define --> WebView2 applications and the WebView2 Runtime. A developer can integrate the WebView2 component into their app, and then deploy the self-updating Evergreen WebView2 Runtime (along with the app) onto user devices, to power the latest WebView2 features of the app and get the latest security improvements.
15
15
16
-
Feedback from IT admins and developers is welcome, through the [WebView2 Feedback](https://github.com/MicrosoftEdge/WebViewFeedback) repo.
16
+
Feedback from IT admins and developers is welcome, through the [WebView2Feedback](https://github.com/MicrosoftEdge/WebViewFeedback) repo.
@@ -25,45 +25,114 @@ IT admins can use group policy objects (GPO) to configure policy settings for We
25
25
<!-- ------------------------------ -->
26
26
#### Update policies
27
27
28
-
[Microsoft Edge - Update policies](/deployedge/microsoft-edge-update-policies) are available for IT admins to manage the installing and updating aspects of the WebView2 Runtime. The Microsoft Edge browser and WebView2 Runtime are updated using the same update mechanism. Unless a policy, such as `Update`, is channel-specific, it applies to both the browser and WebView2 Runtime.
28
+
[Microsoft Edge - Update policies](/deployedge/microsoft-edge-update-policies) are available for IT admins to manage the installing and updating aspects of the WebView2 Runtime. The Microsoft Edge browser and WebView2 Runtime are updated using the same update mechanism. The policy applies to both Microsoft Edge and the WebView2 Runtime, unless the policy is channel-specific, such as [Update](/deployedge/microsoft-edge-update-policies#update)and [Update (WebView)](/deployedge/microsoft-edge-update-policies#update-webview).
29
29
30
-
For example, `UpdateSuppressed` allows IT admins to set the time during each day at which to suppress auto-update for both the browser and WebView2 Runtime. This enables IT admins to configure preferences and proxies once for both the browser and the WebView2 Runtime, to control their network bandwidth/traffic or for other purposes.
30
+
To configure update policies for Microsoft Edge (and the WebView2 Runtime), see [Configure Microsoft Edge policy settings on Windows devices](/deployedge/configure-microsoft-edge), in the Microsoft Edge Enterprise documentation.
31
31
32
-
IT admins can follow [Microsoft Edge's guide](/deployedge/configure-microsoft-edge) to configure Microsoft Edge - Update policies.
32
+
33
+
<!-- ------------------------------ -->
34
+
#### Suppressing WebView2 Runtime updates
35
+
36
+
An IT admin can suppress updating of the WebView2 Runtime, if auto-updating needs to be suppressed for a short time. After the time period, updating of the WebView2 Runtime resumes. The [UpdatesSuppressed](/deployedge/microsoft-edge-update-policies#updatessuppressed) policy allows an IT admin to set the time during each day at which to suppress auto-update for both Microsoft Edge and the WebView2 Runtime. This enables an IT admin to configure preferences and proxies once for both the browser and the WebView2 Runtime, to control their network bandwidth and traffic, or for other purposes.
37
+
38
+
However, users should not stop updating their WebView2 Runtime; users should not remain on an older version of the WebView2 Runtime. Using older versions of the WebView2 Runtime isn't recommended. Security updates and servicing updates are only available on the latest Stable channel release (Edge Stable) and the latest Beta channel release (Edge Beta). If you use older releases of the Microsoft WebView2 Runtime, you won't receive the latest quality and security updates.
39
+
40
+
41
+
<!-- ---------- -->
42
+
###### Evergreen Runtime is recommended, rather than a fixed version
43
+
44
+
Using the Evergreen WebView2 Runtime is recommended, unless business-critical requirements necessitate using a fixed version of the WebView2 Runtime. Using the Evergreen WebView2 Runtime:
45
+
* Helps minimize exposure to known vulnerabilities.
46
+
* Ensures timely security improvements.
47
+
* Ensures that WebView2 benefits from continuous security updates that are delivered through Microsoft Edge releases.
48
+
49
+
For information about Evergreen vs. fixed version of the Runtime, see [Distribute your app and the WebView2 Runtime](./distribution.md).
50
+
51
+
For details about security fixes in Microsoft Edge (which apply to WebView2 as well), see [Release notes for Microsoft Edge Security Updates](/deployedge/microsoft-edge-relnotes-security), in the Microsoft Edge Enterprise documentation.
52
+
53
+
54
+
<!-- ---------- -->
55
+
###### Rapid Response to Chromium vulnerabilities
56
+
57
+
To help maintain a secure browsing environment, Microsoft Edge addresses Chromium engine-level vulnerabilities soon after the vulnerabilities are disclosed.
58
+
59
+
Security fixes address vulnerabilities such as:
60
+
61
+
***Remote code execution** – Mitigates risks of arbitrary code execution via malicious content.
62
+
***Privilege escalation** – Reduces chances of unauthorized system access.
63
+
***Information disclosure and spoofing** – Protects sensitive data, and helps prevent phishing attacks.
64
+
65
+
66
+
<!-- ---------- -->
67
+
###### Microsoft Edge Lifecycle Policy
68
+
69
+
Microsoft WebView2 follows the Modern Lifecycle Policy.
70
+
71
+
See:
72
+
*[Modern Lifecycle Policy](/lifecycle/policies/modern), in the Modern Lifecycle Policy documentation.
73
+
*[Microsoft Edge Lifecycle Policy](/deployedge/microsoft-edge-support-lifecycle), in the Microsoft Edge Enterprise documentation.
33
74
34
75
35
76
<!-- ------------------------------ -->
36
77
#### Browser policies
37
78
38
-
[Microsoft Edge - Browser policies](/deployedge/microsoft-edge-policies) doesn't apply to WebView2 applications. This is by design, because apps and browsers have different use cases, and IT admins might not be aware of what applications use WebView2.
79
+
[Microsoft Edge - Policies](/deployedge/microsoft-edge-policies) doesn't apply to WebView2 applications. This is by design, because apps and browsers have different use cases, and IT admins might not be aware of what applications use WebView2.
39
80
40
81
Applying browser policies on WebView2 would have unintended consequences. For example, IT admins can block JavaScript in the browser, and that would break WebView2 apps that use JavaScript. To prevent that, browser policies are separate from WebView2 policies.
41
82
42
83
43
84
<!-- ------------------------------ -->
44
85
#### WebView2-specific policies
45
86
46
-
[WebView2-specific policies](/deployedge/microsoft-edge-webview-policies) are available to for you<!--dev, or admin?--> to manage WebView2 directly. However, we recommend that WebView2 app developers implement their own group policies to manage the use of WebView2, because it's easier for administrators to manage the app instead of managing WebView2 directly.
87
+
[Microsoft Edge WebView2 - Policies](/deployedge/microsoft-edge-webview-policies) are available to for you<!--dev, or admin?--> to manage WebView2 directly. However, we recommend that WebView2 app developers implement their own group policies to manage the use of WebView2, because it's easier for administrators to manage the app instead of managing WebView2 directly.
## Windows Server Update Services (WSUS)<!-- todo: deprecated -->
92
+
93
+
Windows Server Update Services (WSUS) enables IT admins to deploy the latest Microsoft product updates. You can use WSUS to fully manage the distribution of updates of WebView2 that are released through Microsoft Update<!-- todo: "Microsoft Update" vs. "Microsoft Edge updater" --> to computers on your network.
51
94
52
-
[Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) enables information technology administrators to deploy the latest Microsoft product updates. You can use WSUS to fully manage the distribution of updates of WebView2 that are released through Microsoft Update to computers on your network.
95
+
See [Windows Server Update Services (WSUS) overview](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus).
53
96
54
-
The recommended way of receiving WebView2 updates is by using the default Microsoft Edge updater. Any modification of update and servicing paths should be done with caution.
97
+
The recommended way of receiving WebView2 updates is by using the default Microsoft Edge updater<!-- todo: "Microsoft Update" vs. "Microsoft Edge updater" -->. Any modification of update and servicing paths should be done with caution.
55
98
56
99
57
100
<!-- ------------------------------ -->
58
-
#### WebView2 Deployment and Update using WSUS
101
+
#### WebView2 deployment and update using Configuration Manager
102
+
<!-- is this option recommended? is this section details about the above section? is Configuration Manager indep from WSUS? -->
103
+
104
+
In Configuration Manager, WebView2 options exist under the **Microsoft Edge Management** node.
59
105
60
-
WebView2 options in Configuration Manager exist under the Microsoft Edge Management node. For more information, visit [Update Microsoft Edge](/mem/configmgr/apps/deploy-use/deploy-edge).
106
+
See [Update Microsoft Edge](/intune/configmgr/apps/deploy-use/deploy-edge#update-microsoft-edge) in _Microsoft Edge Management_, in the App management documentation.
0 commit comments