Share via

GPO's are needed for Microsoft Edge Version 112.0.1722.34 - Security Issues

ChevITGuy 26 Reputation points
2023-04-07T16:16:43.19+00:00

After installing Microsoft Edge Version 112.0.1722.34 I found SECURITY areas of concern that do not appear to have GPO settings: Profiles\Profile Preferences - Automatic sign in on Microsoft Edge (was set to ON in Blue) The BrowserSignin GPO is set to DISABLED. Why is this Automatic sign in function turned ON? It should be OFF by Policy with the "briefcase" icon to the left of the setting. There is no GPO setting to suppress "Show suggestions to follow creators in Microsoft Edge" setting. Still missing GPO's requested as far back as Version 99: Background Sync - Need to DISABLE this in GPO. Payment Handlers - Need to disable installation of these in GPO. MOST SERIOUS Security concern: GPO greatly needed for "Share browsing data with other Windows Features" !!! When I saw this come up, I wanted to say, "Share your virus with other Windows Features!!!" REALLY? Let's get a GPO for this ASAP! I can turn it off on new users in my business domain when I setup their accounts, but I can't for older existing users without logging in to their ID's, not possible with over 100 users here. Your help is GREATLY Appreciated in working to SECURE our web browser environment. The "Sidebar" is HIDDEN by Mandatory GPO at our business domain. In our business we just need enough "Browser" for web browsing functions. The rest including Payment Methods, Suggestions, and Rewards are turned OFF by GPO. ChevITGuy

Microsoft Edge
Microsoft Edge
A Microsoft cross-platform web browser that provides privacy, learning, and accessibility tools.
2,238 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,099 questions
0 comments
Accepted answer
  1. ShiJieLi-MSFT 8,731 Reputation points Microsoft Vendor
    2023-04-10T09:04:22.8133333+00:00

    Hi @ChevITGuy ,

    Actually, some of the desired GPOs have already been available:

    1. First of all, BrowserSignin is not related to Automatic sign in on Microsoft Edge. Disabling BrowserSignin specifies that users cannot sign into Microsoft Edge while Automatic sign in on Microsoft Edge decides whether it will automatically sign you in by using your sign in info from other Microsoft sites like Outlook. Apparently, they are not identical but BrowserSignin has priority over Automatic sign in on Microsoft Edge.
    2. Show suggestions to follow creators in Microsoft Edge can be turned off by EdgeFollowEnabled.
    3. Share browsing data with other Windows Features can be turned off by LocalBrowserDataShareEnabled.

    Unfortunately, Background Sync and Payment Handlers settings are not available in GPO. You can request these GPOs by sending feedback to the Dev Team (if you haven't). To send feedback, you can press Alt+Shift+I in Microsoft Edge.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Best Regards,

    Shijie Li

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest