Windows 10: Security baseline for Microsoft Edge version 88 available

Brink · Jan 25, 2021

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft Edge version 88!

We have reviewed the settings in Microsoft Edge version 88 and updated our guidance with the addition of one setting that we will explain below. A new Microsoft Edge security baseline package was just released to the Download Center. You can download the version 88 package from the Security Compliance Toolkit.

Basic Authentication

HTTP Basic Authentication is a non-secure authentication method that relies on sending the username and password to the server in plaintext (base64). When Basic Authentication is used over non-secure HTTP connections, the credentials can be trivially stolen by others on the network.

Basic Authentication for HTTP has been configurable since Internet Explorer 7. Until now, however, there wasn't a way to configure it for Microsoft Edge. With version 88 we now have that ability and are recommending the disablement of basic authentication over HTTP. Disabling Basic Authentication over HTTP falls in line with our other security baselines where we disable this method.

Microsoft Edge version 88 introduced 17 new computer settings and 17 new user settings. We have included a spreadsheet listing the new settings in the release to make it easier for you to find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baselines Discussion site or this post.
Click to expand...

Source: https://techcommunity.microsoft.com/...8/ba-p/2094443

Latest Microsoft Edge released for Windows

:)

Brink · Jan 25, 2021

Security baseline for Microsoft Edge version 87 available

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft Edge, version 87!

We have reviewed the new settings in Microsoft Edge version 87 and determined that there are no additional security settings that require enforcement. The settings from the Microsoft Edge version 85 package continue to be our recommended baseline. That baseline package can be downloaded from the Microsoft Security Compliance Toolkit.

Microsoft Edge version 87 introduced 15 new computer settings, 15 new user settings, and removed 1 setting. We have attached a spreadsheet listing the new settings to make it easier for you to find them.
As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baselines Discussion site or this post.
Click to expand...

Source: https://techcommunity.microsoft.com/...7/ba-p/1950297

Latest Microsoft Edge released for Windows

Brink · Jan 25, 2021

Security baseline for Microsoft Edge version 86 available

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft Edge, version 86!

We have reviewed the new settings in Microsoft Edge version 86 and determined that there are no additional security settings that require enforcement. The settings from the Microsoft Edge version 85 package continue to be our recommended baseline. That baseline package can be downloaded from the Microsoft Security Compliance Toolkit.

Microsoft Edge version 86 introduced 32 new computer settings and 28 new user settings. We have attached a spreadsheet listing the new settings to make it easier for you to find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baselines Discussion site or this post.
Click to expand...

Source: https://techcommunity.microsoft.com/...6/ba-p/1758453

Latest Microsoft Edge released for Windows

Brink · Jan 25, 2021

Security baseline news for Microsoft Edge version 81

We have reviewed the new settings in version 81 of Microsoft Edge and determined that no new security settings are required. The settings recommended in the version 80 baseline will continue to be the security baseline for version 81! This means we will not be releasing our typical package.

Version 81 of Microsoft Edge adds 15 new computer- and user-based settings. There are now 285 enforceable Computer Configuration policy settings and 269 User Configuration policy settings. Using our streamlined approach, our baseline remains at 12 Group Policy settings. We have attached a spreadsheet with the new settings to make it easier for you to find them.

The version 80 package continues to be available as part of the Security Compliance Toolkit. Like all our baseline packages, this package includes:

Importable GPOs

A script to apply the GPOs to local policy

A script to import the GPOs into Active Directory Group Policy

A spreadsheet documenting all recommended settings in spreadsheet form (minus the version 81 setting that are attached to this blog)

Policy Analyzer rules

GP Reports

We always welcome feedback through the Baselines Discussion site.
Click to expand...

Source: https://techcommunity.microsoft.com/...1/ba-p/1303621

Latest Microsoft Edge released for Windows

Windows 10: Security baseline for Microsoft Edge version 88 available

Security baseline for Microsoft Edge version 88 available

Security baseline for Microsoft Edge version 88 available

Security baseline for Microsoft Edge version 88 available

Security baseline for Microsoft Edge version 88 available - Similar Threads - Security baseline Microsoft

Security baseline for Microsoft Edge version 90 released

Security baseline for Microsoft Edge version 89 now available

Security baseline for Microsoft Edge version 87 available

Security baseline for Microsoft Edge version 86 available

Security baseline released for Microsoft Edge version 85

Security baseline news for Microsoft Edge version 81

Security baseline released for Microsoft Edge version 80

Security baseline (FINAL) for Chromium-based Microsoft Edge, version 7

Security baseline (DRAFT) for Chromium based Microsoft Edge version 78