Security baseline for Microsoft Edge, version 89

[Rick_Munck]

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft Edge, version 89!

We have reviewed the new settings in Microsoft Edge version 89 and determined that there are no additional security settings that require enforcement. The settings from the Microsoft Edge version 88 package continues to be our recommended baseline. That baseline package can be downloaded from the Microsoft Security Compliance Toolkit.

Microsoft Edge version 89 introduced 8 new computer settings, 8 new user settings. We have attached a spreadsheet listing the new settings to make it easier for you to find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baselines Discussion site or this post.

[GavinHW]

I've been doing battle with a recommendation in the baseline that doesn't have an override for trusted sites.

The baseline recommends "Configure Microsoft Defender SmartScreen to block potentially unwanted apps" set to Enabled, as well as the settings so it can't be bypassed.

I was trying to download an executable for a vendor that was getting blocked by the SmartScreen download policy. I added the download URL to "Configure the list of domains for which Microsoft SmartScreen won't trigger warnings" but that did not allow the download to continue. 

Currently the workaround is 'use Chrome' but is there a way to allow a specific domain/URL to bypass the SmartScreen download block?

[Rick_Munck]

@GavinHW sorry just now seeing your post.  Are you running Microsoft Defender for Enterprise (formally MDATP) by chance.  The above setting you mention should allow the download.  Also are you sure the actual download is coming from the same domain and not hosted in a content distribution farm?

[sebv1415]

Could someone please explain why the title says Edge 89, but when I try to download the file, it downloads Edge 88?

I see the attached doc on the website. Should I just add those reg keys if needed?

Thanks!

[Rick_Munck]

@sebv1415 version 89 had no new security settings, therefor the version 88 security baseline is still current (which is what is on the Download Center).  What is attached to this blog are the net new settings that are available in version 89 to make it easier for IT Pros to find them.

[sebv1415]

Hello,

Since adding the Edge Baseline.. I am no longer able to access my wireless controller most likely due to the authetication.

The site I navigate to is - http://IP.address

When I try to navigate to my WLC's GUI, I get the following error once I attempt to log in...

401 Unauthorized<script language="javascript">var agt=navigator.userAgent.toLowerCase();if (agt.indexOf("msie") != -1) {document.execCommand("ClearAuthenticationCache");top.location = "/";}</script>

 Does anyone know what settings need to be changed to allow log-ins?

I have tried a few and have not been able to get the login prompt.

Thanks