1.23 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This setting controls whether ads are blocked on sites with intrusive ads. Intrusive ads are typically ads that push invasive, unwelcomed, and irrelevant ads in front of consumers. These ads can popup unexpectedly, block the host page, open new pages and windows, or play video and audio at inopportune times.

The recommended state for this setting is: Enabled: Block ads on sites with intrusive ads.

Rationale:

Intrusive ads are ads found on websites that are invasive or unwelcome. These ads can contain malicious files or can fool an unknowing user into giving away their username and/or password.

Impact:

Ads that may be non-intrusive can be blocked.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Block ads on sites with intrusive ads:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Ads setting for sites with intrusive ads

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Default Value:

Enabled: Block ads on sites with intrusive ads (Default value).

See Also

https://workbench.cisecurity.org/files/4094