Welcome to the Windows Hardening Interface

Search a list
Endpoint Server
ReferenceMicrosoft Security Baseline
Date03/04/2021
VersionFinal
Typemachine
Number of policies14
Source techcommunity.microsoft.com
Search a policy
checked : 0
# Apply Mode Name Severity UIX impact Default Value Recommended Value
Filter

Microsoft Edge
1000 Allow users to proceed from the HTTPS warning page Low Not defined 1 0

Allow users to proceed from the HTTPS warning page

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
SSLErrorOverrideAllowed

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SSLErrorOverrideAllowed'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SSLErrorOverrideAllowed' -value 0


More Informations
1001 Enable site isolation for every site Low Not defined 0 1

Enable site isolation for every site

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
SitePerProcess

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SitePerProcess'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SitePerProcess' -value 1


More Informations
1002 Minimum TLS version enabled Medium Not defined 0 tls1.2

Minimum TLS version enabled

Introduction

Read more >

Relevance indicator

0

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
SSLVersionMin

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SSLVersionMin'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SSLVersionMin' -value tls1.2


More Informations
1003 Default Adobe Flash setting (obsolete) Low Not defined 0 2

Default Adobe Flash setting (obsolete)

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
DefaultPluginsSetting

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'DefaultPluginsSetting'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'DefaultPluginsSetting' -value 2


More Informations
1004 Control which extensions cannot be installed Low Not defined 0 *

Control which extensions cannot be installed

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist
RegistryItem :
1

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist' -name '1'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist' -name '1' -value *


More Informations
1005 Supported authentication schemes Low Not defined 0 ntlm,
negotiate

Supported authentication schemes

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
AuthSchemes

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'AuthSchemes'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'AuthSchemes' -value ntlm,negotiate


More Informations
1006 Allow user-level native messaging hosts (installed without admin permissions) Low Not defined 1 0

Allow user-level native messaging hosts (installed without admin permissions)

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
NativeMessagingUserLevelHosts

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'NativeMessagingUserLevelHosts'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'NativeMessagingUserLevelHosts' -value 0


More Informations
1007 Enable saving passwords to the password manager Low Not defined 1 0

Enable saving passwords to the password manager

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
PasswordManagerEnabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'PasswordManagerEnabled'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'PasswordManagerEnabled' -value 0


More Informations
1008 Configure Microsoft Defender SmartScreen Low Not defined 0 1

Configure Microsoft Defender SmartScreen

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
SmartScreenEnabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SmartScreenEnabled'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SmartScreenEnabled' -value 1


More Informations
1009 Configure Microsoft Defender SmartScreen to block potentially unwanted apps Low Not defined 0 1

Configure Microsoft Defender SmartScreen to block potentially unwanted apps

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
SmartScreenPuaEnabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SmartScreenPuaEnabled'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'SmartScreenPuaEnabled' -value 1


More Informations
1010 Prevent bypassing Microsoft Defender SmartScreen prompts for sites Low Not defined 1

Prevent bypassing Microsoft Defender SmartScreen prompts for sites

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter
RegistryItem :
PreventOverride

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter' -name 'PreventOverride'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter' -name 'PreventOverride' -value 1


More Informations
1011 Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads Low Not defined 0 1

Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
PreventSmartScreenPromptOverrideForFiles

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'PreventSmartScreenPromptOverrideForFiles'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'PreventSmartScreenPromptOverrideForFiles' -value 1


More Informations
1012 Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated) Low Not defined 0 0

Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
EnableSha1ForLocalAnchors

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'EnableSha1ForLocalAnchors'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'EnableSha1ForLocalAnchors' -value 0


More Informations
1012 Allow Basic authentication for HTTP Low Not defined 0

Allow Basic authentication for HTTP

Introduction

Read more >

Relevance indicator

-25

Table of settings

UIX

Not defined :

Method

Method :
Registry

Registry

RegistryPath :
HKLM:\Software\Policies\Microsoft\Edge
RegistryItem :
BasicAuthOverHttpEnabled

Values

Type :
Possible Values :

Powershell Command

Get Value :
Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'BasicAuthOverHttpEnabled'
Set Value :
Set-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Edge' -name 'BasicAuthOverHttpEnabled' -value 0


More Informations