Detections
Analytics

1.123 (L1) Ensure 'Shopping in Microsoft Edge Enabled' is set to 'Disabled'

Information

This policy setting allows users to compare the prices of products, get coupons or rebates from the website, auto-apply coupons, and check out faster using autofill data. Coupons for the current retailer and prices from other retailers will be fetched from a server.

The recommended state for this setting is: Disabled.

Note: Starting in Microsoft Edge version 90.0.818.56, the behavior of the messaging letting users know that there is a coupon, rebate, price comparison or price history available on shopping domains is also done through a horizontal banner below the address bar.

Shopping in Microsoft Edge shares a user's browsing and search history to provide price comparison and coupons, which could inadvertently expose and share sensitive data with a third-party.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Shopping in Microsoft Edge Enabled

Impact:

Users with roles that require this feature will have to perform price comparisons on their own unless they are exempted from this setting.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 5c07dd9b7ccb8b7d0678a7baf325957f60462b5a166dd98970e85620c590e80d