Disable Browser Notifications using Intune (Chrome/Edge)

By default, browser toast notifications are turned on in both Microsoft Edge and Google Chrome. These notifications pop up in the bottom right corner of your screen and are also visible in the notification center. Even if you close the browser window, notifications from websites with desktop notifications enabled can still show up.

The notifications could be tailored to entice you with tempting shopping offers, prompt you to install plugins, warn you about fake antivirus threats, provide product reviews, and offer various other types of information.

It’s vital to be cautious as these notifications may pose security risks. Clicking on malicious links or downloading suspicious software can compromise your device and personal information. Below is an example screenshot illustrating how these notifications may appear on a Windows 11 device.

Image Source: Microsoft

Methods to Block Browser Notifications on Windows 10/11

  • Manual method.
  • Using Intune admin center.
  • Using Active Directory Group Policy.
  • Using a Powershell script.

Reasons to Block Browser Notifications

There are several compelling reasons to consider blocking browser notifications:

  1. Distraction: Browser notifications can interrupt your workflow, distracting you from important tasks and reducing productivity.
  2. Privacy Concerns: Some notifications may contain sensitive information or track your online behavior, raising privacy concerns.
  3. Security Risks: Clicking on notifications from untrusted sources can expose you to malware, phishing scams, and other security threats.
  4. Data Usage: Continuous notifications can consume bandwidth and data.
  5. User Experience: Constant notifications can disrupt the user experience, causing frustration and annoyance.

Blocking browser notifications can help maintain focus, protect privacy, enhance security, and improve the overall browsing experience.

Disable Browser Notifications using Intune (Chrome/Edge)

You can easily manage browser notifications and Disable them when you have enrolled your devices in Intune. In the upcoming sections of this blog post, we will create a device configuration profile for disabling/blocking browser toast notifications for Microsoft Edge and Google Chrome web browsers.

  • Sign in to the Intune admin center.
  • Go to Devices Configuration > Under Policies tab > click on Create.
Disable Browser Notifications using Intune (Chrome/Edge)
Disable Browser Notifications using Intune (Chrome/Edge)
  • Select Platform as Windows 10 and later
  • Profile type as Settings Catalog
  • Click on the Create button.
Disable Browser Notifications using Intune (Chrome/Edge)
Disable Browser Notifications using Intune (Chrome/Edge)

Basics Tab

Enter the Name and Description of the profile. Click on Next to proceed. For Example:

  • Name: Disable browser notifications policy
  • Description: This device configuration profile will disable Browser notifications for Chrome and Edge.

Configuration Settings

  • Click on “+ Add settings
  • In the Settings picker, search for “default notification setting“.

To configure the default notification settings for Google Chrome and Microsoft Edge browsers, follow these steps:

For Google Chrome:

  1. Select the category “Google Google Chrome Content settings”.
  2. Check the box for “Default notification setting“.
Disable Browser Notifications using Intune for Google Chrome
Disable Browser Notifications using Intune for Google Chrome

For Microsoft Edge:

  1. Select the category “Microsoft Edge\Content settings”.
  2. Check the box for “Default notification setting“.
Disable Browser Notifications using Intune for Microsoft Edge
Disable Browser Notifications using Intune for Microsoft Edge
  • Exit out of the Settings Picker.
  • Enable the toggle switch next to “Default notification setting” and select “Do not allow any site to show desktop notifications” from the drop-down menu for both Google Chrome and Microsoft Edge. Then, click on “Next” to proceed to the next step.

Setting the policy to 1 lets websites display desktop notifications. Setting the policy to 2 denies desktop notifications. Leaving it unset means AskNotifications applies, but users can change this setting.

About “Default Notification Setting
Disable Browser Notifications using Intune for Chrome/Microsoft Edge
Disable Browser Notifications using Intune for Chrome/Microsoft Edge

Scope tags

Click on Next.

Assignments tab

Select “Add groups” and opt for an “Entra security group” containing either Windows 10/11 devices or Entra ID users. Adding devices to the group and targeting them accordingly is recommended for a controlled deployment. Once testing proves successful, you can expand the deployment by including additional devices in the group.

Disable Browser Notifications using Intune for Chrome/Microsoft Edge
Disable Browser Notifications using Intune for Chrome/Microsoft Edge

Review + create

Review the device configuration profile details on the Review + Create tab and click Create.

Sync Intune Policies

The device check-in process might not begin immediately. If you’re testing this policy on a test device, you can manually kickstart Intune sync from the device itself or remotely through the Intune admin center.

Alternatively, you can use PowerShell to force the Intune sync on Windows devices. Another way to trigger the Intune device check-in process is by restarting the device.

Monitoring “Disable Browser Notification” Policy

To monitor the deployment progress of a Device configuration profile, follow the below steps:

  • Sign in to the Microsoft Intune admin center.
  • Click on “Devices” and then click on “Configuration“.
  • Choose the Device Configuration profile you want to work with, and at the top of the page, you’ll see a quick view of the Success, Failure, Conflict, Not Applicable, and In Progress status.
  • Click on “View report” to access more detailed information.

End-user Experience

After the Intune policy is applied on the target Windows 11/10 devices, you can check and confirm if the desktop notifications are stopped.

Verify Notifications Status in Google Chrome

To verify and confirm whether desktop toast notifications are disabled/blocked for the Google Chrome browser, follow these steps:

  • Open the Google Chrome browser.
  • Click on the three vertical dots in the top-right corner.
  • Choose “Settings” from the menu.
Verify Notifications Status in Google Chrome
Verify Notifications Status in Google Chrome
  • On the left-hand side, click on Privacy and Security and then click on Site Settings.
Verify Notifications Status in Google Chrome
Verify Notifications Status in Google Chrome
  • Click on Notifications.
Verify Notifications Status in Google Chrome
Verify Notifications Status in Google Chrome
  • On the Notifications settings page, you’ll notice that the notification options are disabled, and “Don’t allow sites to send notifications” is preselected. This setting cannot be modified as it is now managed through Intune.
Verify Notifications Status in Google Chrome
Verify Notifications Status in Google Chrome

Verify Notifications Status in Microsoft Edge

To verify and confirm whether desktop toast notifications are disabled/blocked for the Microsoft Edge browser, follow these steps:

  • Open the Microsoft Edge browser.
  • Click on the three vertical dots in the top-right corner.
  • Choose “Settings” from the menu.
Verify Notifications Status in Microsoft Edge
Verify Notifications Status in Microsoft Edge
  • Click on Cookies and Site Permissions, then Notifications on the right-hand side.
Verify Notifications Status in Microsoft Edge
Verify Notifications Status in Microsoft Edge
  • On the Notifications settings page, you’ll see that notifications are currently disabled/blocked, and the toggle switch to adjust this setting is disabled (greyed out). This indicates that Intune controls the setting.
Verify Notifications Status in Microsoft Edge
Verify Notifications Status in Microsoft Edge

Leave a Comment