CIS Microsoft Edge v5.0.0 L2

Audit Details

Name: CIS Microsoft Edge v5.0.0 L2

Updated: 10/27/2026

Authority: CIS

Plugin: Windows

Revision: 1.0

Estimated Item Count: 45

File Details

Filename: CIS_Microsoft_Edge_v5.0.0_L2.audit

Size: 98 kB

MD5: 1fc070bed7b2d209922b0602929969ba
SHA256: 50fc03a4ab41240c2aeb6697fcd152f2ad10ee298260988d6bb4f4448b8931c8

Audit Items

DescriptionCategories
1.4.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.4.2 Ensure 'Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.4.4 Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'

SYSTEM AND INFORMATION INTEGRITY

1.4.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories via the File System API'

CONFIGURATION MANAGEMENT

1.4.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'

CONFIGURATION MANAGEMENT

1.4.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'

CONFIGURATION MANAGEMENT

1.4.11 Ensure 'Default idle detection setting' is set to 'Enabled: Do not allow any site to detect the user's idle state' or 'Enabled: Ask every time a site wants to detect the user's idle state'

CONFIGURATION MANAGEMENT

1.11.2 Ensure 'Configure extension management settings' is set to 'Enabled: { '*': {'installation_mode': 'blocked' }}'

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.14.3 Ensure 'Supported authentication schemes' is set to 'Enabled: negotiate'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.39 Ensure 'Allow features to download assets from the Asset Delivery Service' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.40 Ensure 'Allow file selection dialogs' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.50 Ensure 'Allow or block audio capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.51 Ensure 'Allow or block video capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.52 Ensure 'Allow or deny screen capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.58 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.60 Ensure 'Allow users to open files using the ClickOnce protocol' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.61 Ensure 'Allow users to open files using the DirectInvoke protocol' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.62 Ensure 'Allow users to proceed from the HTTPS warning page' is set to 'Disabled'

SYSTEM AND COMMUNICATIONS PROTECTION

1.65 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.68 Ensure 'Block third party cookies' is set to 'Enabled'

CONFIGURATION MANAGEMENT

1.70 Ensure 'Browser sign-in settings' is set to 'Enabled: Disable browser sign-in'

CONFIGURATION MANAGEMENT

1.76 Ensure 'Configure Online Text To Speech' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.77 Ensure 'Configure Speech Recognition' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.83 Ensure 'Control use of the Headless Mode' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.84 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'

CONFIGURATION MANAGEMENT

1.86 Ensure 'Controls the availability of browsing with Copilot in Microsoft Edge' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.87 Ensure 'Default sensors setting' is set to 'Enabled: Do not allow any site to access sensors'

CONFIGURATION MANAGEMENT

1.100 Ensure 'Enable Copilot address bar suggestions' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.102 Ensure 'Enable Drop feature in Microsoft Edge' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.104 Ensure 'Enable guest mode' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.106 Ensure 'Enable Process Isolation' is set to 'Enabled'

SYSTEM AND INFORMATION INTEGRITY

1.108 Ensure 'Enable QR Code Generator' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.110 Ensure 'Enable search suggestions' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.112 Ensure 'Enable service-based extraction for Reading Mode in Microsoft Edge' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.118 Ensure 'Enable Translate' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.121 Ensure 'Enable User Web App Install From Browser' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.124 Ensure 'Enforce Bing SafeSearch' is set to 'Enabled: Configure moderate search restrictions in Bing'

CONFIGURATION MANAGEMENT

1.125 Ensure 'Enforce Google SafeSearch' is set to 'Enabled'

SYSTEM AND COMMUNICATIONS PROTECTION

1.127 Ensure 'Enhanced Security Mode configuration for Intranet zone sites' is set to 'Disabled'

SYSTEM AND INFORMATION INTEGRITY

1.130 Ensure 'Live captions allowed' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.136 Ensure 'Show an 'Always open' checkbox in external protocol dialog' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.140 Ensure 'Specify if online OCSP/CRL checks are required for local trust anchors' is set to 'Enabled'

CONFIGURATION MANAGEMENT

1.141 Ensure 'Spell checking provided by Microsoft Editor' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.145 Ensure 'Text prediction enabled by default' is set to 'Disabled'

CONFIGURATION MANAGEMENT

CIS_Microsoft_Edge_v5.0.0_L2.audit from CIS Microsoft Edge v5.0.0