Also posted in Enterprise but it seems quiet there.
In Group Policy for IE if you add "pop-up allow list" at a root group policy, and then another lower group policy the pop-up lists MERGE. So pop-ups allowed in the root policy and pop-ups allowed in the lower policies BOTH get added to the computer.
This goes for all the other IE GPO settings.
However, for Microsoft Edge it is a REPLACE in policy and registry which is really, really bad for Enterprise.
We need this fixed so it mimics IE and if we set it in a root policy and add new pop-up allow sites for a specific group that those sites are appended to the root policy and not replacing it.