The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →To control whether users can open files through Edge’s DirectInvoke protocol, configure the DirectInvokeEnabled policy in the Microsoft Edge management service in the Microsoft 365 admin center. Set it to enabled to allow DirectInvoke, or disabled to block it and save requested files as ordinary downloads. Assign the configuration policy to the intended Microsoft Entra group, then verify the effective setting on a managed Windows device at edge://policy.
What DirectInvoke does—and what each policy state means
DirectInvoke lets a website request that Edge open a file from a specific URL using a file handler on the user’s device. Microsoft’s DirectInvokeEnabled policy documentation defines a Boolean setting with behavior that can seem counterintuitive:
As an Amazon Associate I earn from qualifying purchases.
- Enabled: users can open files using DirectInvoke.
- Disabled: users cannot open files using DirectInvoke; the requested file is saved to the file system instead.
- Not configured: DirectInvoke is allowed.
Blocking DirectInvoke does not mean the file is unavailable; it changes the handling path from opening through the requested local handler to saving as a file. Microsoft cautions that disabling the policy can cause some SharePoint Online features to work unexpectedly, but its policy reference does not specify which features. Check the SharePoint workflows your users rely on before blocking the protocol.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Before configuring the policy in Microsoft 365
The Edge management service is located in the Microsoft 365 admin center at Settings > Microsoft Edge. Microsoft’s configuration policy guide lists these access and compatibility conditions:
#1 Best Overall
- [Compatible Models]: Wireless Ergonomic keyboard with muti color backlit only for 12.3 inch Microsoft Surface Pro 7 Plus, Surface Pro 7, Surface Pro 6, Surface Pro 5, Surface Pro 4, Surface Pro 3.
- [7 Color Backlit]: This Wireless type cover keyboard with 7 Color LED backlight and 3 brightness level, you can freely choose your favorite color and comfortable brightness and also close the light to work.
- [Multi-Gesture Large Touchpad]: More bigger Trackpad.Applicable to Windows system, open/close the touchpad by pressing "Fn+Space", support multiple gesture shortcuts.Support multi-finger window switching, zoom in/out window, double-finger simulation of mouse right button, improve touch sensitivity, support 4 fingers operation and up to 12 gestures. (Turn on the Trackpad at Surface Setting before).
- [Two Angle Adjustment]: Magnetic removable attach or detach.You can use magnetic adsorption to attach the keyboard and Surface and also can adjust to two angles; You can also separate the keyboard and Surface for use, allowing them to be separated by 33 ft.
- [Ultra-Slim Bluetooth 5.3 Keyboard]: Thin and slim, small and light, easy to carry, can be put into a backpack, pouch or travel case. Comfortable and quiet typing experience, sturdy and durable Ergonomic design, make your hands feel more comfortable when typing, reduce the burden on your hands. Note: Only Bluetooth connection is supported. You need to turn on Bluetooth in Surface settings and select the "bluetooth keyboard" device.
- You need the Microsoft Edge Administrator role.
- The service requires Microsoft Edge 115.0.1901.7 or later.
- The service is unavailable to GCC plan customers.
- Configuration policies are assigned to Microsoft Entra groups. Identify the target group before creating or editing a policy.
The service guide distinguishes cloud policies from Intune-type policies; using the Intune option requires an Intune license. Choose the management route that matches your organization’s licensing and device-management design.
Set DirectInvokeEnabled for a target group
- Sign in to the Microsoft 365 admin center with an account that has the Microsoft Edge Administrator role, then open Settings > Microsoft Edge.
- Open an existing Edge configuration policy or create one using the management service’s configuration-policy workflow.
- In the policy settings selection area, find and add
DirectInvokeEnabled. Microsoft’s documentation confirms the settings-selection workflow but does not establish a specific current picker label, so the exact wording in the portal may vary. - Choose the state that matches the intended behavior: enable the policy to allow DirectInvoke, or disable it to block DirectInvoke and have requested files saved instead.
- Assign the policy to the Microsoft Entra group whose users should receive the setting, then save or apply the policy using the portal workflow.
When multiple Edge management service policies apply, non-conflicting settings can merge. If service policies conflict on a setting, the policy with higher priority wins; priority 0 is the highest. Review overlapping assignments so a second cloud policy does not set a different DirectInvoke state.
Rank #2
- Transform Surface Pro 9 into a full laptop.
- New Sapphire and Forest[1] colors are made with partially biobased Alcantara material.[2]
- Designed for Surface Pro 9, Surface Pro 8, or Surface Pro X.
- Surface Slim Pen 2 (not included) recharges in the built in storage tray.
- Full mechanical keyset, backlit keys, and large touchpad.
Check whether the intended setting took effect
After the policy has been assigned and the browser has refreshed its policies, open edge://policy on a managed Windows device. Microsoft’s Windows policy configuration guide identifies this page for checking applied browser policies. Look for DirectInvokeEnabled and confirm that its effective value matches the intended allow-or-block state.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf the value is missing or different, check the policy source and device-level settings rather than assuming the cloud assignment controls the browser. Microsoft warns that conflicting Group Policy Object (GPO) or mobile device management (MDM) settings can override Edge management service settings. Review the applicable GPO and MDM configuration, along with service-policy priority, before changing precedence behavior.
Rank #3
- Compatibility: 13-inch Microsoft Surface Pro Keyboard is designed for Surface Pro 11 (2024) / Surface Pro 10 (2024) / Surface Pro 9 / Surface Pro 8 / Surface Pro X. Please check your surface model before purchasing
- Slim Light Travel-Ready: This ultra-portable Surface Pro keyboard slips easily into any bag. It features a built-in pen storage slot (Please note: for storage only, no charging. Pen not included) and auto sleep/wake for longer battery life
- A Complete Typing & Navigation Experience: The Microsoft Surface Keyboard features a large precision touchpad supporting 12 intuitive gestures and responsive scissor-switch keys for fast, fluid, and quiet typing, accented by a subtle 7-color backlight
- Flexible & Stable Design: Engineered for the Surface Keyboard. Enjoy total flexibility: magnetically attach or detach in a snap, adjust the angle for comfort, and rely on its stable design for use on your lap, desk, or on the go
- Wireless Connection : Effortlessly pair with your surface pro cover keyboard! Auto-reconnect when reopened after initial pairing. Stays connected up to 33ft even when detached—type freely anywhere. No interruptions, just seamless productivity
DirectInvoke is separate from ClickOnce
DirectInvoke and ClickOnce are distinct Edge features controlled by separate policies: DirectInvokeEnabled and ClickOnceEnabled. Changing the DirectInvoke setting does not, by itself, change ClickOnce. Microsoft’s ClickOnce and DirectInvoke guide also explains that when an enabled request is flagged as unsafe by Microsoft 365 Defender SmartScreen URL reputation, users receive an additional warning. When either protocol is disabled, its requested files are handled as regular downloads, with unsafe files marked unsafe consistently with other unsafe downloads.
Policies for automatically opening specified file types, or restricting those automatic-open rules to certain URLs, are separate controls. They are not substitutes for the DirectInvoke allow-or-block policy.
Rank #4
- Surface Pro Type Cover has a new improved design with slightly spread out keys for a more familiar and efficient typing experience that feels like a traditional laptop
- The two button trackpad is now larger for precision control and navigation
- The keyboard is sturdy with enhanced magnetic stability along the fold so you can adjust it to the right angle and work on your lap, on the plane, or at your desk. Since it's designed just for Surface, Surface Pro Type Cover easily clicks into place to go from tablet to laptop instantly
- Protects and shields the screen from bumps and scratches
- Compatible with Surface Pro 3, Surface Pro 4 and Surface Pro.
Platform and Windows policy details
Microsoft lists DirectInvokeEnabled as supported on Windows beginning with Edge 78. Its current policy reference marks macOS, Android, and iOS as unsupported. The policy supports dynamic refresh and can be configured through Windows Group Policy or the registry as well as through the Edge management service.
- Group Policy path: Administrative Templates > Microsoft Edge.
- Registry policy name:
DirectInvokeEnabledunderSOFTWAREPoliciesMicrosoftEdge. - Registry data type:
REG_DWORD. Microsoft documents0x00000000as an example value for disabled.
These Windows policy routes are useful where local policy management is appropriate, but a device-level GPO or MDM setting that conflicts with the cloud policy can determine the effective result.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
