06: Where does Browser Router store user selected browser (and how can I fake it if I need to) in versions 2536 and later?

David Miller

Dec 29, 2020

3802

Warning: This article pertains to build 2536 and later. For builds before this, the directions are different, and technically, not supported, if using a CSE version lower than 2536 please upgrade to latest PolicyPak version before using the steps in this KB.

PolicyPak Browser Router has a function called "User Selectable browser." Learn more about this feature first here:

You might need to have PPBR think that a user specifically chose a particular browser, even if they did not.

The values a particular user chose are stored for both HTTP and HTTPS. They are stored per user in the following location in the registry:

"HKEY_CURRENT_USER\SOFTWARE\PolicyPak\Client-Side Extensions\{1659C456-08FC-4359-B125-BB70EE34DD55}\PPBRAgent\SavedOldValues"Then within SavedOldValues there are two keys, one for HTTP and one for HTTPs.

/Software/Microsoft/Windows/Shell/Associations/UrlAssociations/http/UserChoice

/Software/Microsoft/Windows/Shell/Associations/UrlAssociations/https/UserChoice

The first path is default browser for HTTP schema and the second one is HTTPS.

Those two keys hold a REG_SZ called ProgID which specifies the user’s chosen (or perceived) default browser.

For instance, in this example, after the Admin has chosen User Selectable, then the User chooses Edge (UWP version), you can see the result here.

Supported values in ProgID are:

Edge (With Chromium):
- MSEdgeHTM
Edge (UWP version):
- AppXq0fevzme2pys62n3e0fbqa7peapykr8v for HTTP
- AppX90nv6nhay5n6a98fnetv7tpk64pp35es for HTTPS
Internet Explorer
- IE.HTTP
- IE.HTTPS
Chrome:
- ChromeHTML

Note: Firefox uses a customized value for ProgId dependent on the version of Firefox installed, you can set the default browser to Firefox then look under the following key to find the correct custom ProgId value:

HKCU\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice\ProgId

For Example:

Example: If user has NOT yet selected a Browser as yet or if MS Edge Chromium is the perceived browser, then specify the default as CHROME (one time) and allow the user to select a different browser if desired going forward.

Prerequisites:

A PPBR User Selectable policy applied on the User Side
Browser you wish to use as the default must be installed
The PPBR policy should be applied AFTER the GP Preferences policy.

To do this you'll use a Group Policy Preferences Registry Item to SET the value… but only if Item Level Targeting proves the value is ABSENT OR if the value is set to MSEdgeHTM (Edge Chromium). Note: The GPO must be linked to where USERS are, not COMPUTERS, because the logged-in user SID is used during this operation.

Step 1. Set the value…

Hive: HKEY_CURRENT_USER
Key Path: SOFTWARE\PolicyPak\Client-Side Extensions\{1659C456-08FC-4359-B125-BB70EE34DD55}\PPBRAgent\SavedOldValues\Software/Microsoft/Windows/Shell/Associations/UrlAssociations/http/UserChoice
Value Name: ProgID
Value Type: REG_SZ
ValueData: ChromeHTML

Step 2. But only if this OTHER value:

HKCU\ Software\PolicyPak\Client-Side Extensions\{1659C456-08FC-4359-B125-BB70EE34DD55}\PPBRAgent\SavedOldValues\Software/Microsoft/Windows/Shell/Associations/UrlAssociations/http/UserChoice\

Is ABSENT OR if ProgId at the location below is set to MSEdgeHTM (as verified by ILT)

HKCU\ Software\PolicyPak\Client-Side Extensions\{1659C456-08FC-4359-B125-BB70EE34DD55}\PPBRAgent\SavedOldValues\Software/Microsoft/Windows/Shell/Associations/UrlAssociations/http/UserChoice\ProgId\

Be sure to have entries which set HTTP and HTTPS like these two values here (i.e., Repeat Steps 1 & 2 above for HTTPS value)

Again... Remember: You need two entries. One for HTTP and one for HTTPS.

Note: If Chrome is not installed PPBR will fail back to Internet Explorer. Also, for first time logins, Chrome will not become the default browser until the 2^nd processing of gpupdate.
For convenience the required User side Group Policy Preference XMLS are attached below:

HTTP: No Default or default Edge then Set to Chrome HTTP.xml

HTTPS: No Default or default Edge then Set to Chrome HTTPS.xml