Detections
Analytics

1.106 Ensure 'Enable Process Isolation' is set to 'Enabled'

Information

This policy setting controls if Microsoft Edge uses Process Isolation. Microsoft Edge uses Process Isolation to prevent authorized applications on the device from reading or modifying the contents of Microsoft Edge's running processes. This also helps prevent other applications from accessing encrypted data used by Microsoft Edge.

The recommended state for this setting is: Enabled.

Note: This policy is applied when Microsoft Edge starts. If the policy is changed while Microsoft Edge is running, the new setting will take effect on the next restart.

Without Process Isolation, authorized or compromised applications on the device can inject into or read from Microsoft Edge's running processes. This could allow an attacker to extract sensitive data - including encrypted credentials, session tokens, and browsing content - directly from browser memory, or to modify browser behavior by tampering with its processes.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Enable Process Isolation

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Impact:

Enabling Process Isolation may cause incompatibilities with third-party applications that rely on being able to inject or tamper with Microsoft Edge's processes, such as antivirus, screen reader, or window manager applications.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16

Plugin: Windows

Control ID: e91164fcc0c2e46ad06027a75a0fc6c2b7b15d229cb5217091067f8f1b0cf4c6