Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Microsoft Edge STIG Computer v2r5
Data collected on: 4/1/2026 12:46:47 PM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 4/1/2026 8:21:20 AM
Modified | 4/1/2026 9:00:32 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 2 (AD), 2 (SYSVOL)
Unique ID | {C8B08C9B-6C2A-41EC-84BD-B2E7A8688538}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Microsoft Edge

Policy | Setting | Comment
--- | --- | ---
Allow download restrictions | Enabled |
Download restrictions | Block malicious downloads and dangerous file types
Policy | Setting | Comment
Allow importing of autofill form data | Disabled |
Allow importing of browser settings | Disabled |
Allow importing of browsing history | Disabled |
Allow importing of Cookies | Disabled |
Allow importing of extensions | Disabled |
Allow importing of home page settings | Disabled |
Allow importing of open tabs | Disabled |
Allow importing of payment info | Disabled |
Allow importing of saved passwords | Disabled |
Allow importing of search engine settings | Disabled |
Allow importing of shortcuts | Disabled |
Allow media autoplay for websites | Disabled |
Allow media autoplay on specific sites | Enabled |
Allow media autoplay on specific sites
[*.]gov
[*.]mil
Policy | Setting | Comment
Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft | Disabled |
Allow QUIC protocol | Disabled |
Allow user feedback | Disabled |
Allow websites to query for available payment methods | Disabled |
Ask where to save downloaded files | Enabled |
Block tracking of users' web-browsing activity | Enabled |
Block tracking of users' web-browsing activity | Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)
Policy | Setting | Comment
Configure InPrivate mode availability | Enabled |
Configure InPrivate mode availability | InPrivate mode disabled
Policy | Setting | Comment
Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users | Enabled |
Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users | The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.
Policy | Setting | Comment
Configure the Share experience | Enabled |
Configure the Share experience | Don't allow using the Share experience
Policy | Setting | Comment
Continue running background apps after Microsoft Edge closes | Disabled |
Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business | Disabled |
Control where developer tools can be used | Enabled |
Control where developer tools can be used | Don't allow using the developer tools
Policy | Setting | Comment
Disable synchronization of data using Microsoft sync services | Enabled |
Enable AutoFill for addresses | Disabled |
Enable AutoFill for payment instruments | Disabled |
Enable deleting browser and download history | Disabled |
Enable guest mode | Disabled |
Enable network prediction | Enabled |
Enable network prediction | Don't predict network actions on any network connection
Policy | Setting | Comment
Enable online OCSP/CRL checks | Enabled |
Enable search suggestions | Disabled |
Enable site isolation for every site | Enabled |
Enable site isolation for specific origins | Enabled |
Enable site isolation for specific origins |
Policy | Setting | Comment
Enable the Collections feature | Disabled |
Manage Search Engines | Enabled |
Manage Search Engines | [{"allow_search_engine_discovery": false},{"is_default": true,"name": "Microsoft Bing","keyword": "bing","search_url": "https://www.bing.com/search?q={searchTerms}"},{"name": "Google","keyword": "google","search_url": "https://www.google.com/search?q={searchTerms}"}]
Policy | Setting | Comment
Notify a user that a browser restart is recommended or required for pending updates | Enabled |
Notify a user that a browser restart is recommended or required for pending updates | Required - Show a recurring prompt to the user indicating that a restart is required
Policy | Setting | Comment
Show Hubs Sidebar | Disabled |
Spell checking provided by Microsoft Editor | Disabled |
Suggest similar pages when a webpage can't be found | Disabled |
Use built-in DNS client | Disabled |
Visual search enabled | Disabled |

Microsoft Edge/Cast

Policy | Setting | Comment
--- | --- | ---
Enable Google Cast | Disabled |

Microsoft Edge/Content settings

Policy | Setting | Comment
--- | --- | ---
Allow pop-up windows on specific sites | Enabled |
Allow pop-up windows on specific sites
[*.]mil
[*.]gov
Policy | Setting | Comment
Configure cookies | Enabled |
Configure cookies | Keep cookies for the duration of the session, except ones listed in "SaveCookiesOnExit"
Policy | Setting | Comment
Control use of the Web Bluetooth API | Enabled |
Control use of the Web Bluetooth API | Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API
Policy | Setting | Comment
Control use of the WebUSB API | Enabled |
Control use of the WebUSB API | Do not allow any site to request access to USB devices via the WebUSB API
Policy | Setting | Comment
Default geolocation setting | Enabled |
Default geolocation setting | Don't allow any site to track users' physical location
Policy | Setting | Comment
Default pop-up window setting | Enabled |
Default pop-up window setting | Do not allow any site to show popups

Microsoft Edge/Extensions

Policy | Setting | Comment
--- | --- | ---
Control which extensions cannot be installed | Enabled |
Extension IDs the user should be prevented from installing (or * for all)
*

Microsoft Edge/HTTP authentication

Policy | Setting | Comment
--- | --- | ---
Supported authentication schemes | Enabled |
Supported authentication schemes | ntlm,negotiate

Microsoft Edge/Password manager and protection

Policy | Setting | Comment
--- | --- | ---
Enable saving passwords to the password manager | Disabled |

Microsoft Edge/Proxy server

Policy | Setting | Comment
--- | --- | ---
Proxy settings | Enabled |
Proxy settings | ADD YOUR PROXY CONFIGURATIONS HERE

Microsoft Edge/SmartScreen settings

Policy | Setting | Comment
--- | --- | ---
Configure Microsoft Defender SmartScreen | Enabled |
Configure Microsoft Defender SmartScreen to block potentially unwanted apps | Enabled |
Prevent bypassing Microsoft Defender SmartScreen prompts for sites | Enabled |
Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads | Enabled |

User Configuration (Disabled)
No settings defined.