1.111 Ensure 'Show an 'Always open' checkbox in external protocol dialog' is set to 'Disabled'

Information

This policy setting controls if the user is prompted with an 'Always open' check box when an external protocol prompt is shown.

The recommended state for this setting is: Disabled.

Rationale:

Allowing a protocol to automatically 'always open for webpages' could allow a malicious website to open programs on a device leaving it open to attacks.

Impact:

The end user will be prompted each time they click a link that opens an external protocol, even if they have utilized it before.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Show an 'Always open' checkbox in external protocol dialog

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Default Value:

Enabled. (v84 or greater)

See Also

https://workbench.cisecurity.org/benchmarks/11865

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 5cd3689b92ea20f78dcb83bf171cc2bb7a399008e9f2a4aa789a97547617eb58