Details

List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won’t be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.

Use ‘*’ to block all extensions that aren’t explicitly listed in the allow list.

If you don’t configure this policy, users can install any extension in Microsoft Edge.

Example value:

extension_id1

extension_id2

Solution

Policy Path: Microsoft EdgeExtensions
Policy Setting Name: Control which extensions cannot be installed

Supportive Information

The following resource is also helpful.

• https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v81/ba-p/1303621

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7(4)

Source

• Tenable.com/audits