1.1.25 Ensure 'Ask where to save downloaded files' is set to 'Disabled'

Information

This policy setting controls whether a user is presented with a prompt asking where downloaded files should be saved, rather than files being downloaded to the default download directory.

The recommended state for this setting is Disabled.

Rationale:

Ensuring files from external sources are saved in a location known to be protected will help ensure mitigations for malicious files are not circumvented.

Impact:

Users will not be prompted when downloading files, all files will be downloaded to the default download directory.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Ask where to save downloaded files

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Not Configured - If this policy is not configured, the user will be able to change this setting.

See Also

https://workbench.cisecurity.org/files/3907

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv7|5.1

Plugin: Windows

Control ID: 0617db238bf2fa4ad1abe0db02b45845d55a7475a3f7b0a8109c31a4c33c887c