Details

Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.

A blocklist value of ‘*’ means all extensions are blocked unless they are explicitly listed in the allowlist.

If this policy isn’t set the user can install any extension in Microsoft Edge.

Example value:extension_id1extension_id2

Solution

Policy Path: Microsoft EdgeExtensions
Policy Setting Name: Control which extensions cannot be installed

Supportive Information

The following resource is also helpful.

• https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v99/ba-p/3249241

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7(4)

Source

• Tenable.com/audits