1.25 Ensure 'Allow features to download assets from the Asset Delivery Service' is set to 'Disabled'


This policy setting configures the Microsoft Edge Asset Delivery Service. The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients. These assets can be configuration files or Machine Learning models that power the features that use this service.

The recommended state for this setting is Disabled.


To reduce the attack surface of the system, downloads such as those described in this recommendation should not be allowed to download automatically without the approval of an Administrator.


Microsoft Edge features will not be able to download assets needed for them to run correctly.


To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow features to download assets from the Asset Delivery Service

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Not configured.

See Also


Item Details


References: 800-53|CM-7(5), 800-53|CM-10, CSCv7|2.7

Plugin: Windows

Control ID: e8e0ebca61b176b59f30c6c5037b3ae66fbaef0883ae467d00cffb0596d6340d