Detections
Analytics

1.103 (L1) Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

Information

This policy setting prevents Microsoft Edge from showing security warnings that potentially dangerous command-line flags are in use at its' launch.

The recommended state of this setting is: Enabled.

If Microsoft Edge is being launched with potentially dangerous flags this information should be exposed to the user as a warning, if not the user may unintentionally be using non-secure settings and be exposed to security flaws.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Enable security warnings for command-line flags

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/24354

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: 76b460b9c13cf4ea5050ccbe56723656a8d50c1c05242e1a79e2be6ecacd5781