Detections
Analytics

1.1.44 Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'

Information

This policy setting controls whether users are able to utilize payment information stored in Microsoft Edge as well as whether they are prompted to save credit card information.

The recommended state for this setting is: Disabled.

Rationale:

Having payment information automatically filled in and saved in Microsoft Edge could allow for an attacker to gain access to this sensitive data.

Impact:

Users will be unable to use and store AutoFill data for credit card information in Microsoft Edge.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Enable AutoFill for credit cards

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Enabled - Users can control AutoFill for credit cards.

See Also

https://workbench.cisecurity.org/files/3907

Item Details

References: CSCv7|5.1

Plugin: Windows

Control ID: 20c3c12410ca832636e1ee9c62707850c2da1821060394ffd7237f8b3c48405a