Detections
Analytics

1.86 Ensure 'Controls the availability of browsing with Copilot in Microsoft Edge' is set to 'Disabled'

Information

This policy setting controls the availability of browsing with Copilot in Microsoft Edge.

The recommended state for this setting is: Disabled.

Browsing with Copilot allows an AI agent to navigate and interact with web content on behalf of the user, including authenticated web applications. This introduces the risk of an automated process accessing, processing, or acting on sensitive data within the browser session without direct user oversight of each individual action.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Controls the availability of browsing with Copilot in Microsoft Edge

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Impact:

Users will not be able to use browsing with Copilot, even if they have an active Microsoft 365 Copilot subscription. The feature cannot be turned on by users.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: cb6f3facc6f12fa5419c05016779a11a0200f29852ab53fb05938156d4b57226