Security baseline (DRAFT) for Chromium-based Microsoft Edge, version 78

Hi,

Could you please share more details on following policy :-

Control which extensions cannot be installed

Baseline recommendation is 1 = * which am not able to understand.

TIA

[Aaron Margosis] Here's the explanation/help text for this setting:

List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.
Use "*" to block all extensions that aren't explicitly listed in the allow list.
If you don't configure this policy, users can install any extension in Microsoft Edge.
Example value:
extension_id1
extension_id2

So "*" means users can't install any extensions, unless they are first added (by an admin) to the allow list.

Hope this helps.