To enforce potentially unwanted app (PUA) blocking in Microsoft Edge on Windows devices managed by Intune, create a Settings Catalog profile and enable Configure Microsoft Defender SmartScreen to block potentially unwanted apps (SmartScreenPuaEnabled). For centrally enforced browser protection, also enable Configure Microsoft Defender SmartScreen (SmartScreenEnabled). Pilot the profile, then verify the applied policies at edge://policy.
What Edge PUA protection does
Edge’s PUA control uses Microsoft Defender SmartScreen reputation protection to warn about or block websites, downloads, and installers associated with potentially unwanted applications. Examples can include adware, toolbars, bundled software, coin miners, and low-reputation installers. A PUA is not necessarily malware: it may be software that users or administrators consider unwanted or risky, without meeting the definition of a virus.
This is browser-level protection for reputation-related web and download activity, not a guarantee that Edge will identify every unwanted program. Microsoft describes the policy and its behavior in the SmartScreenPuaEnabled policy documentation.
Identify the policies to configure
The PUA-specific control and the general SmartScreen control are separate policies. Enabling only the PUA policy does not enforce every SmartScreen feature or prevent a user from turning off general SmartScreen protection.
#1 Best Overall
- Compact Mouse: With a comfortable and contoured shape, this Logitech ambidextrous wireless mouse feels great in either right or left hand and is far superior to a touchpad
- Durable and Reliable: This USB wireless mouse features a line-by-line scroll wheel, up to 1 year of battery life (2) thanks to a smart sleep mode function, and comes with the included AA battery
- Universal Compatibility: Your Logitech mouse works with your Windows PC, Mac, or laptop, so no matter what type of computer you own today or buy tomorrow your mouse will be compatible
- Plug and Play Simplicity: Just plug in the tiny nano USB receiver and start working in seconds with a strong, reliable connection to your wireless computer mouse up to 33 feet / 10 m (5)
- Better than touchpad: Get more done by adding M185 to your laptop; according to a recent study, laptop users who chose this mouse over a touchpad were 50% more productive (3) and worked 30% faster (4)
| Edge setting | Policy identifier | Recommended value | Purpose |
|---|---|---|---|
| Configure Microsoft Defender SmartScreen to block potentially unwanted apps | SmartScreenPuaEnabled |
Enabled (1) |
Enables Edge’s PUA protection. |
| Configure Microsoft Defender SmartScreen | SmartScreenEnabled |
Enabled (1) |
Enforces general SmartScreen protection so users cannot turn the feature off. |
| Prevent bypassing Microsoft Defender SmartScreen prompts for sites | Separate SmartScreen control | Enabled, if appropriate | Prevents bypass of applicable site warnings. |
| Prevent bypassing Microsoft Defender SmartScreen warnings about downloads | Separate SmartScreen control | Enabled, if appropriate | Prevents bypass of applicable download warnings. |
The PUA policy is Boolean, supports mandatory enforcement and dynamic policy refresh, and is not per-profile. Microsoft documents support for Edge 80 and later on Windows and macOS, and Edge 118 and later on Android and iOS. The procedure below is specifically for Windows; Intune profile types and deployment paths differ on other platforms. See Microsoft’s documentation for SmartScreenPuaEnabled and SmartScreenEnabled.
When SmartScreenPuaEnabled is Not configured, the organization has not set the policy and users may be able to choose the browser setting; Microsoft documents PUA blocking as off by default in that policy state. Disabled is an explicit administrative instruction to disable the feature. These states are not interchangeable.
Rank #2
- Pair and Play: With fast, easy Bluetooth wireless technology, you’re connected in seconds to this quiet cordless mouse —no dongle or port required
- Less Noise, More Focus: Silent mouse with 90% reduced click sound and the same click feel, eliminating noise and distractions for you and others around you (1)
- Long-Lasting Battery Life: Up to 18-month battery life with an energy-efficient auto sleep feature, so you can go longer between battery changes (2)
- Comfortable, Travel-Friendly Design: Small enough to toss in a bag; this slim and ambidextrous portable compact mouse guides either your right or left hand into a natural position
- Long-Range: Reliable, long-range Bluetooth wireless mouse works up to 10m/33 feet away from your computer (3)
Check prerequisites for Windows deployment
- The Windows device is enrolled in Intune and included in the profile assignment.
- Microsoft Edge is installed, and the device can receive browser policy through device management.
- The target platform is Windows 10 and later in the Intune profile workflow.
- You know whether an Edge security baseline, another Intune profile, or Active Directory Group Policy already configures SmartScreen.
- You have a pilot device group and a way to review whether expected business software is affected.
Policy documentation lists several supported Edge platforms, but the Intune steps and policy behavior are platform-specific. Do not assume that a Windows Settings Catalog profile is also the correct procedure for macOS, Android, or iOS.
Create the Intune Settings Catalog profile
- Open the Microsoft Intune admin center, then go to Devices and open Configuration or Configuration policies. Portal labels can change, so use the setting name below if the navigation differs.
- Select Create or Create policy. Choose Windows 10 and later for the platform and Settings catalog for the profile type, then select Create.
- Give the profile a descriptive name, such as Edge – Enable SmartScreen PUA Protection, and select Next.
- Under Configuration settings, choose Add settings. Search for Configure Microsoft Defender SmartScreen to block potentially unwanted apps.
- Select the setting under Microsoft Edge → SmartScreen settings and set it to Enabled.
- Add Configure Microsoft Defender SmartScreen and set it to Enabled if you want to enforce general SmartScreen as well.
- If your policy requires non-bypassable warnings, add the separate site-prompt and download-warning bypass settings and enable them as appropriate for your organization.
- Select Next through scope tags and assignments. Assign the profile to a pilot device group, review the configuration, and select Create.
Microsoft’s Edge Settings Catalog guidance describes the Windows 10 and later, Settings catalog, add-settings, and assignment workflow. The display name and identifier are more durable ways to find the control than relying on a particular portal layout.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesRank #3
- 【Dual Mode Wireless Bluetooth Mouse】: Switch easily between two devices—connect one via Bluetooth (BT5.2/3.0) and the other using a 2.4G USB receiver. No drivers needed; just plug and play. Enjoy a reliable connection up to 33 feet. Note: You can't use both modes simultaneously; the USB receiver is stored in the mouse.
- 【Rechargeable Wireless Mouse】: Equipped with a 500mAh lithium-ion battery, it charges in 2 hours for over 7 days of use and 30 days on standby. The mouse sleeps after 5 minutes of inactivity to save power and can be woken with any click.
- 【Colorful LED Breathing Light】: Features 7 colorful LED lights that change randomly, adding a fun atmosphere to your workspace.
- 【Portable Mouse】Compact size (4.4 x 2.3 x 1.1 inches) makes it easy to fit in your laptop bag. Lightweight and ergonomic, it's perfect for travel. Contact us anytime for support.
- 【Wide Compatibility】: Works with laptops, PCs, tablets, and smartphones across various operating systems, including Android, Windows, and Mac. Ideal for home, office, and travel.
Roll out and verify the policy
Start with a pilot
Assign the profile to a small group that represents your Windows fleet. Check the Intune profile’s device and per-setting status, and review whether legitimate installers or business utilities are affected before expanding the assignment. Check targeting, exclusions, filters, and device check-in if the profile reports an error or remains pending.
Inspect Edge’s effective policy
- On a pilot device, open Microsoft Edge and visit
edge://policy. - Search for
SmartScreenPuaEnabledandSmartScreenEnabled. - Confirm each configured policy is listed with the expected value and inspect its source and status. This is the browser-side check for whether Edge has received the policy.
- Visit
edge://settings/privacyand check the Block potentially unwanted apps control under Security. The UI is useful for confirming the visible state, butedge://policyis the better way to confirm policy application.
Microsoft’s Edge deployment guidance recommends edge://policy for checking active Edge policies.
Rank #4
- Your hand can relax in comfort hour after hour with this ergonomically designed mouse. Its contoured shape with soft rubber grips, gently curved sides and broad palm area give you the support you need for effortless control all day long.
- You’ve got the control to do more, faster. Flipping through photo albums and Web pages is a breeze, especially for right-handers—with three standard buttons plus Back/Forward buttons that you can also program to switch applications, go full screen and more. And side-to-side scrolling plus zoom gives you the power to scroll horizontally and vertically through your music library, maps and Facebook feeds, and zoom in and out of photos and budget spreadsheets with a click.* * Requires Logitech SetPoint software (Windows) or Logitech Control Center software (Mac OS X)
- Two years of battery life practically eliminates the need to replace batteries. ** The On/Off switch helps conserve power, smart sleep mode extends battery life and an indicator light eliminates surprises. ** Battery life may vary based on user and computing conditions.
- The tiny Logitech Unifying receiver stays in your laptop. There’s no need to unplug it when you move around, so there’s less worry of it being lost. And you can easily add compatible wireless mice and keyboards to the same wireless receiver.
Check Windows policy storage if needed
For a mandatory Windows Edge policy, the expected registry representation is HKLMSOFTWAREPoliciesMicrosoftEdge, with SmartScreenPuaEnabled as a REG_DWORD set to 0x00000001. Treat this as a diagnostic check, not a deployment method: manage the setting through Intune to avoid unmanaged changes and management drift. Microsoft documents the policy’s registry value in its policy reference.
Configure Defender Antivirus PUA protection separately
Edge SmartScreen PUA protection is not the same as Microsoft Defender Antivirus PUA protection. SmartScreen focuses on browser URLs, downloads, and associated application reputation. Defender Antivirus can detect and block PUA-related file activity on the endpoint, and may quarantine detected files, depending on its configuration and platform. If your goal is broader endpoint PUA reduction, configure both controls rather than treating one as a substitute for the other. Microsoft explains the distinction and Defender Antivirus behavior in its Defender Antivirus PUA guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- 【Plug and Play for Home/Office/School】The wireless computer mouse features 2.4GHz connectivity, delivering a stable, interference-free connection up to 32ft. Designed for 𝐦𝐞𝐝𝐢𝐮𝐦 𝐭𝐨 𝐥𝐚𝐫𝐠𝐞 𝐬𝐢𝐳𝐞𝐝 𝐡𝐚𝐧𝐝𝐬, it ensures comfortable use all day. Simply plug in the USB-A receiver for instant pairing—no drivers needed. 📌📌 If the mouse isn’t suitable, place the USB receiver in the battery compartment and return both.
- 【3 Levels Adjustable DPI】This travel USB mouse offers 3 adjustable DPI settings (800, 1200, 1600), allowing you to customize sensitivity for precise design work. Effortlessly switch to match your task and elevate your productivity. 📌 Please remove the film at the bottom of the mouse before use.
- 【Effortless Browsing】Equipped with forward and backward buttons, this computer mice streamlines your workflow, making it easy to navigate through web pages and files with a simple click. 📌Side button does not work on Mac.
- 【Visible Indicator Light】 The pc mouse features a visual indicator for DPI levels and low battery alerts. The red light flashes once for 800 DPI, twice for 1200 DPI, and three times for 1600 DPI. When the battery level is below 10%, the light flashes red until the mouse is completely out of power.
- 【Click to Wake】With smart sleep mode, it saves power by standby after 10 inactive minutes, just 2-3 clicks to wake. This efficient design delivers 3x longer battery life than motion-wake mice. Engineered for durability, its buttons and scroll wheel are tested for 10 million clicks, ensuring long-term reliability and consistent performance.
In Intune, Defender Antivirus PUA protection is a separate setting. Microsoft’s Windows device restriction documentation describes Not configured, Off, Enable (detect and block), and Audit (detect without blocking) choices. For a staged endpoint rollout, begin in Audit, review detections and software inventory, resolve business exceptions, and then move to blocking if the pilot is acceptable. See Intune’s Windows device restriction reference and Microsoft’s PUA configuration guidance.
Troubleshoot when the setting does not appear
- Confirm enrollment and assignment. Check that the device is enrolled, in scope, not excluded by a group or filter, and assigned the intended profile.
- Check the last device check-in and profile status. Review Intune’s device and per-setting reporting for errors or pending application.
- Trigger a sync. In Windows, open Settings → Accounts → Access work or school, select the connected work account, choose Info → Sync. Use Company Portal sync if that is the available organizational route. Sync requests do not guarantee immediate policy arrival.
- Inspect policy conflicts. Look for another Settings Catalog profile, Edge security baseline, or Group Policy setting the same policy differently. In
edge://policy, inspect the policy source and status rather than relying only on the Intune assignment view. - Refresh Edge’s policy view. After the device has checked in, reopen
edge://policyand refresh the page; restart Edge if necessary. - Confirm Edge is present and supported. The documented Windows minimum for
SmartScreenPuaEnabledis Edge 80. Other platform minimums do not establish that the Windows Intune procedure applies unchanged elsewhere.
Choose Settings Catalog or an Edge security baseline
| Approach | Best fit | Trade-off |
|---|---|---|
| Settings Catalog | A focused PUA or SmartScreen change, pilot rollout, or independently scoped browser setting. | You select and maintain each setting; review other profiles for overlap. |
| Edge security baseline | An organization adopting Microsoft’s broader recommended Edge security posture and baseline-driven governance. | It configures settings beyond PUA protection, and may conflict with custom profiles that set the same controls. |
Microsoft’s Edge security baseline reference includes SmartScreen-related settings such as general SmartScreen and PUA blocking. If you already assign a baseline, inspect its settings before creating a second profile for the same controls. For a narrowly scoped change, a Settings Catalog profile makes the assignment and intent easier to isolate.
Handle warnings and legitimate business software carefully
A PUA warning may affect a legitimate utility, remote-support tool, installer, or bundled enterprise application. In a pilot, record the exact file, publisher, hash, download URL, and business purpose, then determine whether the software can be removed or replaced. Use a narrowly scoped exception only after security review; do not disable SmartScreen globally to resolve one blocked download.
Organizations using Microsoft Defender for Endpoint should check the applicable indicator workflow before relying on Edge allowlist policies. Microsoft directs administrators in relevant scenarios to manage SmartScreen allow and block decisions through Defender portal indicators; see the SmartScreen allowlist policy guidance.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
