Enable site isolation for every site

Information

The 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. Note that you can also use the 'IsolateOrigins' (Enable site isolation for specific origins) policy to isolate additional finer-grained origins.

If you enable this policy users can't opt out of the default behavior where each site runs in its own process.

If you disable or dont configure this policy a user can opt out of site isolation. (For example by using 'Disable site isolation' entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.

Solution

Policy Path: Microsoft Edge
Policy Setting Name: Enable site isolation for every site

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v81/ba-p/1303621

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: 31866647866a23ff354c16d147b83c0e59d5d33610399794900a64cd44812148