Microsoft Security Baselines Blog

Learn more:  aka.ms/baselines    |    Download the Security Compliance Toolkit:  aka.ms/SCT

Options
1,723
Rick_Munck on May 20 2024 08:03 AM
2,889
Rick_Munck on Apr 26 2024 02:09 PM
3,322
Rick_Munck on Mar 27 2024 08:22 AM
4,703
Rick_Munck on Mar 01 2024 06:14 AM
6,154
Rick_Munck on Feb 14 2024 08:19 AM
10.6K
Rick_Munck on Dec 14 2023 05:19 PM
10.8K
Rick_Munck on Dec 14 2023 03:39 PM
11.7K
Rick_Munck on Nov 10 2023 06:36 AM
45.2K
Rick_Munck on Oct 31 2023 10:09 AM
11.3K
Rick_Munck on Oct 15 2023 02:42 PM
15.1K
Rick_Munck on Sep 18 2023 01:24 PM
11.1K
Rick_Munck on Aug 21 2023 02:51 PM
11.6K
Rick_Munck on Jul 24 2023 08:08 AM
18.9K
Rick_Munck on Jun 29 2023 07:00 AM
17.9K
Rick_Munck on Jun 05 2023 10:55 AM
13.6K
Rick_Munck on May 06 2023 06:19 AM
14.8K
Rick_Munck on Apr 07 2023 06:00 AM
11.3K
Rick_Munck on Mar 14 2023 05:33 AM
12.6K
Rick_Munck on Feb 13 2023 05:18 AM
14.2K
Rick_Munck on Jan 17 2023 06:01 AM
19.2K
Rick_Munck on Dec 06 2022 06:47 PM
14.1K
Rick_Munck on Nov 17 2022 12:59 PM
57.3K
Rick_Munck on Oct 18 2022 10:10 AM
11.4K
Rick_Munck on Oct 04 2022 09:00 AM
225K
Rick_Munck on Sep 20 2022 10:01 AM
11.3K
Rick_Munck on Sep 02 2022 08:00 AM
12.7K
Rick_Munck on Aug 08 2022 08:30 AM
15.7K
Rick_Munck on Jun 24 2022 07:37 AM
26.8K
Rick_Munck on Jun 14 2022 09:13 AM
15.4K
Rick_Munck on Jun 03 2022 08:08 AM

Latest Comments

Hi, In the Edge version 124.0.2478.51,file downloads from all internal http sites are affected. It giver an error stating that file can not be downloaded as it is not secure however it gives option to "Keep" to continue download.Found few article which states that it will be fixed via group policy "...
0 Likes
@ZGerber yes, once a new baseline is required, we will drop that setting and any others that are obsolete or deprecated.
0 Likes
@DM51673 correct, this setting is a temporary setting and will be removed in future versions of Microsoft Edge. You can enable it to test for issues and you can disable it while you resolve issues. We posted this as part of the release here: Microsoft Edge Browser Policy Documentation | Microsoft Le...
0 Likes
Hi @Rick_Munck, given that both Chrome and Edge went all-in for Kyber key encapsulation in v124 and it's now enabled by default, is there a reason why there is not a recommendation to set PostQuantumKeyAgreementEnabled = 1 in the v124 baseline? Is it simply because the intent is to dispense with thi...
0 Likes
@Rick_Munck I followed the recommended Microsoft Edge version 117 security baseline, but I am getting an error message "Unknown policy" for WebSQLAccess, which is "Force WebSQL to be enabled". That setting is now showing as obsolete on the Edge policy page. Will that recommendation be adjusted in a ...
0 Likes