Detections
Analytics

1.1.5 Ensure 'Allow importing of autofill form data' is set to 'Disabled'

Information

This policy setting controls whether users are allow to import autofill data from other browsers into Microsoft Edge.

The recommended state for this setting is Disabled.

Rationale:

Allowing autofill data to be imported could potentially allow sensitive data such as personally identifiable information (PII) from a non-secured source into Microsoft Edge. Considering that storage of sensitive data should be handled with care disabling this setting is recommended.

Impact:

If you set this setting to Disabled users will be unable to perform an import of autofill data during Microsoft Edge first run. This will also prevent users from importing data after Microsoft Edge has been setup.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow importing of autofill form data

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Default Value:

Autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.

See Also

https://workbench.cisecurity.org/files/3005

Item Details

References: CSCv7|5.1

Plugin: Windows

Control ID: ef69863d38c4d762a77b329c02cf36759d985a913d2d470bf97a8c8b05126871