Detections
Analytics

CSCv7|7.2

Title

Disable Unnecessary or Unauthorized Browser or Email Client Plugins

Description

Uninstall or disable any unauthorized browser or email client plugins or add-on applications.

Reference Item Details

Category: Email and Web Browser Protections

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.11 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.0.1
1.1.11 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.0.0
1.3.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.3 Ensure 'Default Adobe Flash setting' is set to 'Enabled: Block the Adobe Flash plug-in'WindowsCIS Microsoft Edge L2 v1.0.0
1.3.3 Ensure 'Default Adobe Flash setting' is set to 'Enabled: Block the Adobe Flash plug-in'WindowsCIS Microsoft Edge L2 v1.0.1
1.3.4 Ensure 'Control use of JavaScript JIT' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.4 Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'WindowsCIS Microsoft Edge L1 v1.1.0
1.3.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'WindowsCIS Microsoft Edge L1 v2.0.0
1.3.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth'WindowsCIS Microsoft Edge L2 v1.1.0
1.3.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'WindowsCIS Microsoft Edge L2 v1.1.0
1.5.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'WindowsCIS Microsoft Edge L1 v2.0.0
1.5.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'WindowsCIS Microsoft Edge L1 v1.1.0
1.6.1 Ensure 'Configure extension management settings' is set to 'Enabled: *'WindowsCIS Microsoft Edge L2 v1.1.0
1.6.1 Ensure 'Configure extension management settings' is set to 'Enabled: *'WindowsCIS Microsoft Edge L2 v2.0.0
1.9 Ensure 'Extend Flash content setting to all content' is set to 'Disabled'WindowsCIS Google Chrome L1 v2.0.0
1.14.1 Ensure 'Enable startup boost' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.14.1 Ensure 'Enable startup boost' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.18 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'WindowsCIS Google Chrome L1 v3.0.0
1.34 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.35 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.40 Ensure 'Allow remote debugging' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.41 Ensure 'Allow remote debugging' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.49 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.49 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.67 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'WindowsCIS Microsoft Edge L2 v1.1.0
1.69 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'WindowsCIS Microsoft Edge L2 v2.0.0
1.76 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.78 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.107 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.113 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v3.0.0 L1 + BL
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.0 L1 Member Server
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v3.0.0 L1
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L1 + BL
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v3.0.0 L1 Domain Controller
18.10.57.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L1