| 1.2.1 Ensure 'Enable Google Cast' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.3.1 Ensure 'Allow users to manage installed CA certificates' is set to 'Enabled: Disallow users from managing certificates' | ACCESS CONTROL |
| 1.4.3 Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content' | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.4.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories' | CONFIGURATION MANAGEMENT |
| 1.4.9 Ensure 'Default automatic downloads setting' is set to 'Enabled: Prevent all websites from performing multiple downloads, even after a user gesture' | SYSTEM AND INFORMATION INTEGRITY |
| 1.4.10 Ensure 'Default geolocation setting' is set to 'Enabled: Don't allow any site to track users' physical location' | CONFIGURATION MANAGEMENT |
| 1.7.1 Ensure 'Enable insecure download warnings' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.8.1 Ensure 'Configure Edge Website Typo Protection' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.10.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags' | CONFIGURATION MANAGEMENT |
| 1.11.1 Ensure 'Blocks external extensions from being installed' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.14.1 Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled' | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.14.2 Ensure 'Allow cross-origin HTTP Authentication prompts' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.15.1 Ensure 'Enable sign-in to Microsoft Edge using non-Microsoft accounts' is set to 'Disabled' | ACCESS CONTROL |
| 1.15.2 Ensure 'Guided Switch Enabled' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.22.1 Ensure 'Enable saving passkeys to the password manager' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.22.2 Ensure 'Enable saving passwords to the password manager' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.24.1 Ensure 'Enable startup boost' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.32.1 Ensure 'Configure Microsoft Edge Scareware blocker protection' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.32.2 Ensure 'Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.1 Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.2 Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.3 Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.4 Ensure 'Force Microsoft Defender SmartScreen checks on downloads from trusted sources' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.5 Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.34.6 Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.35.1 Ensure 'Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.37 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads. (Default Value)' | SYSTEM AND INFORMATION INTEGRITY |
| 1.38 Ensure 'Allow download restrictions' is set to 'Enabled: Block malicious downloads' | SYSTEM AND INFORMATION INTEGRITY |
| 1.41 Ensure 'Allow Google Cast to connect to Cast devices on all IP addresses' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.42 Ensure 'Allow import of data from other browsers on each Microsoft Edge launch' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.43 Ensure 'Allow importing of autofill form data' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.44 Ensure 'Allow importing of browser settings' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.45 Ensure 'Allow importing of home page settings' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.46 Ensure 'Allow importing of payment info' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.47 Ensure 'Allow importing of saved passwords' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.48 Ensure 'Allow importing of search engine settings' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.49 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.53 Ensure 'Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.54 Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled' | AUDIT AND ACCOUNTABILITY |
| 1.55 Ensure 'Allow remote debugging' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.56 Ensure 'Allow socket pool size randomization for proxies' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.57 Ensure 'Allow the audio sandbox to run' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.59 Ensure 'Allow user feedback' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.63 Ensure 'Allow Web Authentication requests on sites with broken TLS certificates' is set to 'Disabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.64 Ensure 'Allow websites to query for available payment methods' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.66 Ensure 'Automatically import another browser's data and settings at first run' is set to 'Enabled: Disables automatic import, and the import section of the first-run experience is skipped' | CONFIGURATION MANAGEMENT |
| 1.67 Ensure 'Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.69 Ensure 'Block tracking of users' web-browsing activity' is set to 'Enabled: Balanced (Blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)' or higher | CONFIGURATION MANAGEMENT |
| 1.71 Ensure 'Clear browsing data when Microsoft Edge closes' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.72 Ensure 'Clear cached images and files when Microsoft Edge closes' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
