CSCv7|7.2

Title

Disable Unnecessary or Unauthorized Browser or Email Client Plugins

Description

Uninstall or disable any unauthorized browser or email client plugins or add-on applications.

Reference Item Details

Category: Email and Web Browser Protections

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.4 Ensure 'Control use of JavaScript JIT' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'WindowsCIS Microsoft Edge L1 v1.1.0
1.3.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'WindowsCIS Microsoft Edge L2 v1.1.0
1.5.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'WindowsCIS Microsoft Edge L1 v1.1.0
1.6.1 Ensure 'Configure extension management settings' is set to 'Enabled: *'WindowsCIS Microsoft Edge L2 v1.1.0
1.14.1 Ensure 'Enable startup boost' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.34 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.40 Ensure 'Allow remote debugging' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.49 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.67 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'WindowsCIS Microsoft Edge L2 v1.1.0
1.76 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.107 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG DC STIG v1.0.1
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.9.63.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.9.64.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0
18.9.64.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG DC L1 v1.1.0
18.9.64.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG DC STIG v1.1.0
18.9.64.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG MS STIG v1.1.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 DC
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.12.0 L1 + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 MS
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1