Detections
Analytics

1.92 Ensure 'Dynamic Code Settings' is set to 'Enabled: Prevent the browser process from creating dynamic code'

Information

This policy setting controls the Dynamic Code Settings for Microsoft Edge.

The recommended state for this setting is: Enabled: Prevent the browser process from creating dynamic code.

Leaving this policy in its default state decreases the security of Microsoft Edge by allowing potentially hostile Dynamic Code and third-party code to make changes to Microsoft Edge's behavior.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Prevent the browser process from creating dynamic code :

Computer Configuration\Administrative Templates\Microsoft Edge\Dynamic Code Settings

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

Compatibility issues may arise with third-party software (e.g. certain printer drivers) that must run in the browser process.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16, CSCv7|8.3

Plugin: Windows

Control ID: 38ebc68742f85f698289fb373ef5132dbe61b586297a6f36c6ac9ecec0b47c1c