Detections
Analytics

1.11.1 Ensure 'Blocks external extensions from being installed' is set to 'Enabled'

Information

This policy setting determines whether external extensions (an extension that is not installed from the Chrome Web Store) can be installed.

The recommended state for this setting is: Enabled.

Allowing users to install extensions from locations other than the Chrome Web Store can lead to unknown or malicious extensions being installed.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Enabled :

Computer Configuration\Polices\Administrative Templates\Microsoft Edge\Extensions\Blocks external extensions from being installed

Impact:

Users will not be able to install extensions that do not originate form the Chrome web store.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-10, 800-53|CM-11, 800-53|SC-18, CSCv7|7.2

Plugin: Windows

Control ID: f60d81910323cc73c1377ca84b18ef84bcde575215a8f045bbfd650b70d8fe3f