1.1.71 Ensure 'Show an 'Always open' checkbox in external protocol dialog' is set to 'Disabled' - Disabled.

Information

This policy setting controls if the user is prompted with an 'Always open' check box when an external protocol prompt is show.

The recommended state for this setting is: Disabled.

Rationale:

Allowing a protocol to automatically always open for webpages could allow a malicious website to open programs on a device leaving it open to attacks.

Impact:

The end user will be prompted each time they click a link that opens an external protocol, even if they have utilized it before.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Show an 'Always open' checkbox in external protocol dialog

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Enabled. (v84 or greater)

See Also

https://workbench.cisecurity.org/files/3907

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv7|9.2

Plugin: Windows

Control ID: 533ec81d8a873765e75d03833eaca1c9ca5c82319858d286fc0c49258e41fd9b