How to Disable Browser Notifications using Intune

In this post, I will show you how to disable browser notifications using Intune. You can block the toast notifications for both Google Chrome and Microsoft Edge browsers using Microsoft Intune.

A browser push notification is simply a notification that is sent by web applications and websites. The messages are received by the user’s browser client. Web push notifications can be sent even when the particular website is not actively in use.

The majority of sites you visit attempt to send notification to visitors when their site is accessed. Examples of these notifications are requesting users to send the current location, install the browser plugins, review the product etc. When you install Google Chrome or Microsoft Edge, the toast notifications are allowed by default.

Without Intune, you can use GPO to block the browser notifications, which works well for AD domain joined computers. Home users can manually block browser notifications from all sites via the browser settings.

Check out some useful articles on what can be achieved with Intune:

• Disable Windows Hello for Business using Intune
• Create a Wi-Fi Profile in Intune
• Configure Lock Screen Message for iOS Devices with Intune
• Deploy Microsoft Store Apps using Intune

Why should you block browser notifications?

Not all notifications are beneficial and safe for your browser and computer. In a few cases, customers receive (push) notifications from a malicious internet site that attempts to impersonate an Anti-Virus program. Some users may also click on the notifications and set up the recommended application, that may cause a safety breach.

Most organizations prefer to block the browser toast notifications using group policy or by deploying the scripts. To prevent the malware from being installed, many organizations conduct several security trainings advising users not to install or click suspicious pop-ups. If you’re an organization managing devices using Intune MDM, you can create a Configuration profile and deploy the settings to block the browser toast notifications.

How to Disable Browser Notifications using Intune

We will look at the steps to create a Configuration Profile in Intune to block all the toast notifications from browsers. You can create separate profiles to disable browser notifications for Google Chrome and Microsoft Edge. In this article, I am going to create a single configuration profile that will block the toast notifications for both Chrome and Edge browser with Intune. Refer to the following guide on deploying Google Chrome with Intune.

Perform the following steps to create a new configuration profile in Microsoft Intune to block browser notifications. First sign-in to the Intune Admin center. Select Devices > Manage Devices > Configuration > Policies > Create profile.

On the Create a profile window, configure the following settings and select Create.

• Platform: Windows 10 and later
• Profile Type: Settings Catalog

In the Basics tab, enter the following properties.

• Name: Enter a descriptive name for the profile which you can easily identify them later. For example, a good profile name is Disable Browser Notifications using Intune.
• Description: Enter a brief description for the profile. This setting is optional, but recommended.

Click Next.

In the Configuration Settings section, under Settings Catalog, click Add Settings. The Settings catalog in Intune allows managing browser settings for Google Chrome and Microsoft Edge. You can select multiple settings and configure those settings and target it to devices and users.

On the Settings picker window, type “default notification setting” in the search box and click Search. From the search results, select two settings:

• Administrative Templates\Google\Google Chrome\Content Settings
• Microsoft Edge\Content Settings

Turn off Chrome Browser Notifications

In the Settings Picker search results, select Administrative Templates\Google\Google Chrome\Content Settings. There are two settings that you’ll see here for Chrome users.

1. Default Notification Setting
2. Default Notification Setting (user)

The difference between the two settings is that one applies to the device, and the other applies to users. Here I’m configuring the settings for the SYSTEM context, but you can configure the settings for the USER context.

If you are looking to turn off the toast notifications for Google Chrome, select Default Notification Setting.

Turn off Browser Notifications for Microsoft Edge

In the Settings Picker search results, select Microsoft Edge\Content Settings. There are two settings that you’ll see here for Microsoft Edge.

1. Default Notification Setting
2. Default Notification Setting (user)

The difference between the two settings is that one applies to the device, and the other applies to users. Here I’m setting up the settings for the SYSTEM context, but you can also set up the settings for the USER context.

If you are looking to turn off the toast notifications for Microsoft Edge, select Default Notification Setting.

When you close the Settings picker window, you will be presented with the settings that you just selected in the above step.

For Google Chrome, configure the following settings to block the notifications:

• Default Notification Settings: Select Enabled.
• Default Notification Setting (Device): Select Do not allow any site to show desktop notifications.

For Microsoft Edge, configure the following settings to block the notifications:

• Default Notification Settings: Select Enabled.
• Default Notification Setting (Device): Select Do not allow any site to show desktop notifications.

In Intune, Scope tags determine which objects admins can see. In the Scope tags section, you specify scope tags. Click Next.

In the Assignments window, specify the groups to which you want to apply this policy. I advise disabling the taskbar settings on a small number of test users first, and then rolling it out to more users if the testing is successful. Select Next.

On the Review + Create page, review all the settings that you have defined to disable browser notifications via Intune and select Create.

After you create a configuration policy in Intune, a notification appears “Policy created successfully“. This confirms the policy is created and is being applied to groups that we selected. The new profile that we created to block the browser toast notifications appears under the list of Configuration Profiles in Intune.

You must wait for the policy to apply to the targeted groups and once the devices check-in with the Intune service they will receive your profile settings. You can also force sync Intune policies on your computers. To monitor the deployment, select the policy and review the Device and user check-in status.

End-User Experience after Disabling Browser Notifications

Let’s check to see if the browser policy is actually applied to devices and what users see when they attempt to alter the browser notification settings after you have successfully deployed the Intune device configuration profile.

When a user opens the Microsoft Edge settings and selects the Notifications, the Intune policy completely blocks the notifications. The user cannot modify the setting to allow the toast notifications any more. With these settings, the users can now browse the sites without any notification pop-ups appearing.

Similarly, for Google Chrome, the notification settings are blocked, and no sites are allowed to push notifications to users. To allow a notification from a specific site, please contact the Intune admin to allow exclusions for specific sites.

I hope this article helped you to block the toast notifications for Chrome and Edge browser. With Intune, it’s so easy to configure and deploy the browser configuration settings to devices. If you need any clarifications or have questions, please let me know in the comments section below.