Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
  • Bypassing Microsoft Defender SmartScreen prompts for sites must be disabled.

    &lt;VulnDiscussion&gt;This policy setting allows a decision to be made on whether users can override the Microsoft Defender SmartScreen warnings ab...
    Rule Medium Severity
  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
  • Bypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled.

    &lt;VulnDiscussion&gt;This policy setting allows a decision to be made on whether users can override Microsoft Defender SmartScreen warnings about ...
    Rule Medium Severity
  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
  • The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used.

    &lt;VulnDiscussion&gt;Configure the list of Microsoft Defender SmartScreen trusted domains. This means Microsoft Defender SmartScreen will not chec...
    Rule Low Severity
  • SRG-APP-000080

    <GroupDescription></GroupDescription>
    Group
  • InPrivate mode must be disabled.

    &lt;VulnDiscussion&gt;This setting specifies whether the user can open pages in InPrivate mode in Microsoft Edge. If this policy is not configured...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Background processing must be disabled.

    &lt;VulnDiscussion&gt;Background processing allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window i...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • The ability of sites to show pop-ups must be disabled.

    &lt;VulnDiscussion&gt;Set whether websites can show pop-up windows. Pop-ups can be allowed on all websites ("AllowPopups") or blocked on all sites ...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • The default search provider must be set to use an encrypted connection.

    &lt;VulnDiscussion&gt;Allows a list of list of up to 10 search engines to be configured, one of which must be marked as the default search engine. ...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Data Synchronization must be disabled.

    &lt;VulnDiscussion&gt;Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing. If this p...
    Rule Low Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Network prediction must be disabled.

    &lt;VulnDiscussion&gt;Enables network prediction and prevents users from changing this setting. This controls DNS prefetching, TCP and SSL pre-con...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Search suggestions must be disabled.

    &lt;VulnDiscussion&gt;Enables web search suggestions in the Microsoft Edge Address Bar and Auto-Suggest List, and prevents users from changing this...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules