Detections
Analytics

1.124 (L1) Ensure 'Shopping in Microsoft Edge Enabled' is set to 'Disabled'

Information

This policy setting allows users to compare the prices of products, get coupons or rebates from the website, auto-apply coupons, and check out faster using autofill data. Coupons for the current retailer and prices from other retailers will be fetched from a server.

The recommended state for this setting is: Disabled.

Note: Starting in Microsoft Edge version 90.0.818.56, the behavior of the messaging letting users know that there is a coupon, rebate, price comparison or price history available on shopping domains is also done through a horizontal banner below the address bar.

Shopping in Microsoft Edge shares a user's browsing and search history to provide price comparison and coupons, which could inadvertently expose and share sensitive data with a third-party.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Shopping in Microsoft Edge Enabled

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

Users with roles that require this feature will have to perform price comparisons on their own unless they are exempted from this setting.

See Also

https://workbench.cisecurity.org/benchmarks/24354

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 7442560bdd616885606b63e5eafb0f83d3dceba497678724b2bac4cfa2676ee6