Details

OBSOLETE: This policy is obsolete and doesn’t work after Microsoft Edge 87.This policy doesn’t work because Flash is no longer supported by Microsoft Edge.’PluginsAllowedForUrls’ (Allow the Adobe Flash plug-in on specific sites) and ‘PluginsBlockedForUrls’ (Block the Adobe Flash plug-in on specific sites) are checked first then this policy. The options are ‘ClickToPlay’ and ‘BlockPlugins’. If you set this policy to ‘BlockPlugins’ this plugin is denied for all websites. ‘ClickToPlay’ lets the Flash plugin run but users click the placeholder to start it.

If you don’t configure this policy the user can change this setting manually.

Note: Automatic playback is only for domains explicitly listed in the ‘PluginsAllowedForUrls’ policy. To turn automatic playback on for all sites add http://* and https://* to the allowed list of URLs.

Policy options mapping:* BlockPlugins (2) = Block the Adobe Flash plugin* ClickToPlay (3) = Click to playUse the preceding information when configuring this policy.

Solution

Policy Path: Microsoft EdgeContent settings
Policy Setting Name: Default Adobe Flash setting (obsolete)

Supportive Information

The following resource is also helpful.

• https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-version-89/ba-p/2186265

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7(4)

Source

• Tenable.com/audits