Detections
Analytics

1.1.56 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

Information

This policy setting prevents Microsoft Edge from showing security warnings that potentially dangerous command-line flags are in use at its' launch.

The recommended state of this setting is 'Enabled'.

Rationale:

If Microsoft Edge is being launched with potentially dangerous flags this information should be exposed to the user as a warning, if not the user may be unintentionally using non-secure settings and be exposed to security flaws.

Impact:

None - this is the default behavior.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Enable security warnings for command-line flags

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Enabled.

See Also

https://workbench.cisecurity.org/files/3907

Item Details

References: CSCv7|5.1

Plugin: Windows

Control ID: b5efbe8370e266bb16ee22159156aa10c05c0d790a7cd8f1aaad60705358f6c0