Detections
Analytics

1.83 Ensure 'Enable Drop feature in Microsoft Edge' is set to 'Disabled'

Information

This policy setting configures the drop feature in Microsoft Edge. The drop feature lets users send messages or files to themselves.

The recommended state for this setting is Disabled.

Rationale:

Enabling the Microsoft Edge Drop feature could allow sensitive data to be transmitted to a device that is not authorized or a third-party, which could lead to that data being exposed.

Impact:

Users can't use the drop feature in Microsoft Edge to share files and messages between phones and desktop devices.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Enable Drop feature in Microsoft Edge

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft from Download Edge for Business.

Default Value:

Enabled. (Users can use the Drop feature in Microsoft Edge.)

See Also

https://workbench.cisecurity.org/benchmarks/11865

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: e7d5deb28b37b100952261beb4a7b9acdf9e2e2de27b7eda6fc3240b85630b60