1.1.7 Ensure 'Allow importing of home page settings' is set to 'Disabled'

Information

This policy setting controls whether users are able to import homepage settings from another browser into Microsoft Edge as well as whether homepage settings are imported on first use.

The recommended state for this setting is Disabled.

Rationale:

Having the homepage setting automatically imported or allowing users to import this setting from another browser into Microsoft Edge allows for the potential of compromised settings being imported into Microsoft Edge.

Impact:

If you set this setting to Disabled users will be unable to perform an import homepage settings from other browsers into Microsoft Edge.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow importing of home page settings

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.


Default Value:

The home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.

See Also

https://workbench.cisecurity.org/files/3005