Detections
Analytics

1.121 Ensure 'Text prediction enabled by default' is set to 'Disabled'

Information

This policy setting controls whether text predictions will be provided for eligible text fields. The Microsoft turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.

The recommended state for this setting is Disabled.

Rationale:

Enabling text predictions could allow data to be transmitted to a third-party cloud service, which could lead to sensitive data being exposed.

Impact:

Text predictions will not be provided in eligible text fields. Sites may still provide their own text predictions.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Text prediction enabled by default

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Default Value:

Enabled. (Text predictions will be provided for eligible text fields.)

See Also

https://workbench.cisecurity.org/benchmarks/11865

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 705bef0660f46372ddb60abe592a864b80e55da519a437a203cda3cf41e05ff1