1.105 Ensure 'Show an 'Always open' checkbox in external protocol dialog' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls if the user is prompted with an 'Always open' check box when an external protocol prompt is show.

The recommended state for this setting is: Disabled.

Rationale:

Allowing a protocol to automatically always open for webpages could allow a malicious website to open programs on a device leaving it open to attacks.

Impact:

The end user will be prompted each time they click a link that opens an external protocol, even if they have utilized it before.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Show an 'Always open' checkbox in external protocol dialog

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Enabled. (v84 or greater)

See Also

https://workbench.cisecurity.org/files/4094