Detections
Analytics

1.94 (L1) Ensure 'Enable deleting browser and download history' is set to 'Disabled'

Information

This policy controls whether users can delete browser and download history for Microsoft Edge.

The recommended state for this setting is: Disabled.

Note: Even when this policy is Disabled, the browsing and download history isn't guaranteed to be retained. Users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.

Deleting browser data will delete information that may be important for a computer investigation. Investigators such as Computer Forensics Analysts may not be able to retrieve pertinent information for the investigation.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Enable deleting browser and download history

Impact:

Browser data deletion by users will be prohibited.

Note: This setting will preserve browsing history that could contain a user's personal browsing history. Ensure this setting is in compliance with organizational policies.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: a3628cc37abd6c5ede2e05b85be5256fd4613b6bda0e8a2c6051a164af0bfccc