1.1.18 Ensure 'Allow the audio sandbox to run' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls whether audio processes in Microsoft Edge run in a sandbox.

Note: Security software setups within your environment might interfere with the sandbox.

The recommended state for this setting is: Enabled.

Rationale:

Having audio processes run in a sandbox ensures that if a website misuses audio processes that data may not be manipulated or exfiltrated from the system.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow the audio sandbox to run

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Not Configured - The default configuration for the audio sandbox will be used, which might differ based on the platform.

See Also

https://workbench.cisecurity.org/files/3907