Details
This policy setting controls if the user is prompted with an ‘Always open’ check box when an external protocol prompt is show.
The recommended state for this setting is: Disabled.
Rationale:
Allowing a protocol to automatically always open for webpages could allow a malicious website to open programs on a device leaving it open to attacks.
Impact:
The end user will be prompted each time they click a link that opens an external protocol, even if they have utilized it before.
Solution
To establish the recommended configuration via GP, set the following UI path to Disabled
Computer ConfigurationPoliciesAdministrative TemplatesMicrosoft EdgeShow an ‘Always open’ checkbox in external protocol dialog
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.
Default Value:
Enabled. (v84 or greater)
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.