Detections
Analytics

1.34 Ensure 'Allow importing of search engine settings' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls whether users are able to import search engine settings from another browser into Microsoft Edge as well as whether said setting is imported on first use.

The recommended state for this setting is Disabled.

Rationale:

Having search engine settings automatically imported or allowing users to import the settings from another browser into Microsoft Edge could allow for a malicious search engine to be set.

Impact:

Users will be unable to perform an import of their search engine settings from other browsers into Microsoft Edge.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow importing search engine settings

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Default Value:

Search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.

See Also

https://workbench.cisecurity.org/benchmarks/11865

Item Details

References: CSCv7|9.2

Plugin: Windows

Control ID: b1c622bf13eda2ea9a8c7b937da107223a45c43fdafbc700cf47f5f5b48f1737