Blog Post

Microsoft Security Baselines Blog
1 MIN READ

Security baseline for Microsoft Edge version 112

Rick_Munck's avatar
Rick_Munck
Icon for Microsoft rankMicrosoft
Apr 07, 2023

Microsoft is pleased to announce the release of the security baseline for Microsoft Edge, version 112!

 

We have reviewed the settings in Microsoft Edge version 112 and updated our guidance with the removal of three obsolete settings. A new Microsoft Edge security baseline package was just released to the Download Center. You can download the new package from the Security Compliance Toolkit.

 

Allow using the deprecated U2F Security Key API (Removed)

This setting became obsolete in version 104 and is now being removed from the security baseline.

 

Enable 3DES cipher suites in TLS (Removed)

This setting became obsolete in version 97 and is now being removed from the security baseline.

 

Specifies whether the display-capture permissions-policy is checked or skipped (Removed)

This setting became obsolete in version 110 and is now being removed from the security baseline.

 

Microsoft Edge version 112 introduced 5 new computer settings and 5 new user settings. We have included a spreadsheet listing the new settings in the release to make it easier for you to find them.

 

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

 

One item to note, we are trying out a slightly new layout for the spreadsheet. It’s still a work in progress so if you have any suggestions we are open to them.

 

Please continue to give us feedback through the Security Baseline Community or this post.

Updated Apr 07, 2023
Version 2.0

9 Comments

  • MichaelOliv's avatar
    MichaelOliv
    Iron Contributor

    Hello, 

     

    I resolve my problem. The lateral toolbar is manage like extensions. So I find extensions ID here : edge://sidebar-internals/ and authorize them.

     

  • MichaelOliv's avatar
    MichaelOliv
    Iron Contributor

    Hello, 

     

    I try this new baseline on Intune. But on my test computer with this policy, the default applications on lateral toolbar are no inaccessible. (disabled for managed devices)

    It was not the case with the previous baseline. And I don't know why it's like that.

    Could you help me please?

  • AndrewP1705's avatar
    AndrewP1705
    Copper Contributor

    Hi Julia_Idaewor that's great to hear that the new Edge baseline will be released next month. Could you confirm when Office and updated baselines will be added?

     

  • Rhand09's avatar
    Rhand09
    Copper Contributor

    Rick_Munck  I see, we are using the spreadsheet to configure our policy.  TyposquattingCheckerEnabled is no longer present in the spreadsheet and SmartScreenPuaEnabled was never present in there (at least not from 96 and up, we never have used that setting).
    I think I will be using the policy analyzer just to be safe from now on :).

  • Rhand09 TypepoSquatting is still in the baseline (just checked the GPO and scripts) was added in 107 and still there in 112.  PUA is also still in the baseline, added in v80. We converted to new tooling for the spreadsheet, as we stated in the blog, so it could be an error in the spreadsheet.

  • Rhand09's avatar
    Rhand09
    Copper Contributor

    I am missing the following setting (from the 107 baseline):
    Configure Edge TyposquattingChecker

     

    Should this setting not be present anyomore in the baseline? (with the option enabled)

     

    And this one seems to be new in this baseline (should this one be there):
    Configure Microsoft Defender SmartScreen to block potentially unwanted apps