Download Microsoft Edge 99 Security Baseline

With the release of Microsoft Edge 99 on March 4th, 2022, Microsoft has now released its security baseline….

Microsoft Edge Security Baseline Generic

With the release of Microsoft Edge 99 on March 4th, 2022, Microsoft has now released its security baseline. Security baselines are Microsoft-recommended configuration settings that add an additional layer of security to your environment.

This release does not introduce any new features to Edge. However, this update includes 17 new computer settings and 12 new user settings, which are discussed further down this post. That said, the security baseline for Edge 98 is still Microsoft’s recommended version.

This baseline is not only effective for network and sysadmins, but also for regular users. Continue to read through this post and learn how to install it.

What is a Security Baseline

Microsoft describes security baselines as follows:

A security baseline is a group of Microsoft-recommended configuration settings that explains their security impact.

Microsoft

Security baselines are a set of additional configurations which give IT professionals more control over their current environment. These new controls are policies that they can configure according to their business and network requirements.

Edge security baselines give granular control of various security aspects to the experts to mold their policies as they want to. Since each individual or organization has different security requirements, these additional policies are configurable accordingly.

Who Needs to Install a Security Baseline

Not everyone who owns a Windows computer needs to install these baselines. If you are on a home computer and use it to play games, browse websites online and perform no work activities, you probably do not need to install this Edge security baseline.

However, if you put in your financial or Personal Identification Information (PII), or perform confidential tasks online, you can use the security baselines to make your system and your information more secure.

Online threats are constantly evolving, and the stock security policies in Windows can take a lot of time to learn and configure. Therefore, security baselines can be installed to protect your devices from potential threats and maintain your system’s integrity.

If you believe you fit the description of a person who could use these security baselines, read on further to learn the details of this release.

New in Edge 99 Security Baseline

Since there are no new features to discuss in this release, the table below contains the details of the new security settings included:

Security Setting ForDetailsLocation
MachineAllow Microsoft Edge to block navigations to external protocols in a sandboxed iframeHKLM\Software\Policies\Microsoft\Edge!SandboxExternalProtocolBlocked
MachineAllow users to access the games menuHKLM\Software\Policies\Microsoft\Edge!AllowGamesMenu
MachineConfigure Related Matches in Find on PageHKLM\Software\Policies\Microsoft\Edge!RelatedMatchesCloudServiceEnabled
MachineConfigure reporting of IE Mode user list entries to the M365 Admin Center Site Lists appHKLM\Software\Policies\Microsoft\Edge!InternetExplorerIntegrationCloudUserSitesReporting
MachineConfigure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists appHKLM\Software\Policies\Microsoft\Edge!InternetExplorerIntegrationCloudNeutralSitesReporting
MachineDefine a list of protocols that can not be silently blocked by anti-flood protectionHKLM\Software\Policies\Microsoft\Edge!DoNotSilentlyBlockProtocolsFromOrigins
MachineEnable or disable freezing the User-Agent string at major version 99HKLM\Software\Policies\Microsoft\Edge!ForceMajorVersionToMinorPositionInUserAgent
MachineEnable or disable the User-Agent ReductionHKLM\Software\Policies\Microsoft\Edge!UserAgentReduction
MachineShow Hubs SidebarHKLM\Software\Policies\Microsoft\Edge!HubsSidebarEnabled
MachineShow Hubs SidebarHKLM\Software\Policies\Microsoft\Edge\Recommended!HubsSidebarEnabled
MachineEnable sign in click-to-action dialogHKLM\Software\Policies\Microsoft\Edge\Recommended!SignInCtaOnNtpEnabled
MachineRemove Desktop Shortcuts upon updating defaultHKLM\Software\Policies\Microsoft\EdgeUpdate!RemoveDesktopShortcutDefault; HKLM\Software\Policies\Microsoft\EdgeUpdate!UpdateDefault
MachineRemove Desktop Shortcuts upon updateHKLM\Software\Policies\Microsoft\EdgeUpdate!RemoveDesktopShortcut{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
HKLM\Software\Policies\Microsoft\EdgeUpdate!UpdateDefault
MachineRemove Desktop Shortcuts upon updateHKLM\Software\Policies\Microsoft\EdgeUpdate!RemoveDesktopShortcut{2CD8A007-E189-409D-A2C8-9AF4EF3C72AA}
HKLM\Software\Policies\Microsoft\EdgeUpdate!UpdateDefault
MachineRemove Desktop Shortcuts upon updateHKLM\Software\Policies\Microsoft\EdgeUpdate!RemoveDesktopShortcut{65C35B14-6C1D-4122-AC46-7148CC9D6497}
HKLM\Software\Policies\Microsoft\EdgeUpdate!UpdateDefault
MachineRemove Desktop Shortcuts upon updateHKLM\Software\Policies\Microsoft\EdgeUpdate!RemoveDesktopShortcut{0D50BFEC-CD6A-4F9A-964C-C7416E3ACB10}
HKLM\Software\Policies\Microsoft\EdgeUpdate!UpdateDefault
MachineConfigure the list of domains for which the password manager UI (Save and Fill) will be disabledHKLM\Software\Policies\Microsoft\Edge\PasswordManagerBlocklist
UserAllow Microsoft Edge to block navigations to external protocols in a sandboxed iframeHKCU\Software\Policies\Microsoft\Edge!SandboxExternalProtocolBlocked
UserAllow users to access the games menuHKCU\Software\Policies\Microsoft\Edge!AllowGamesMenu
UserConfigure Related Matches in Find on PageHKCU\Software\Policies\Microsoft\Edge!RelatedMatchesCloudServiceEnabled
UserConfigure reporting of IE Mode user list entries to the M365 Admin Center Site Lists appHKCU\Software\Policies\Microsoft\Edge!InternetExplorerIntegrationCloudUserSitesReporting
UserConfigure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists appHKCU\Software\Policies\Microsoft\Edge!InternetExplorerIntegrationCloudNeutralSitesReporting
UserDefine a list of protocols that can not be silently blocked by anti-flood protectionHKCU\Software\Policies\Microsoft\Edge!DoNotSilentlyBlockProtocolsFromOrigins
UserEnable or disable freezing the User-Agent string at major version 99HKCU\Software\Policies\Microsoft\Edge!ForceMajorVersionToMinorPositionInUserAgent
UserEnable or disable the User-Agent ReductionHKCU\Software\Policies\Microsoft\Edge!UserAgentReduction
UserShow Hubs SidebarHKCU\Software\Policies\Microsoft\Edge!HubsSidebarEnabled
UserShow Hubs SidebarHKCU\Software\Policies\Microsoft\Edge\Recommended!HubsSidebarEnabled
UserEnable sign in click-to-action dialogHKCU\Software\Policies\Microsoft\Edge\Recommended!SignInCtaOnNtpEnabled
UserConfigure the list of domains for which the password manager UI (Save and Fill) will be disabledHKCU\Software\Policies\Microsoft\Edge\PasswordManagerBlocklist
New security settings in Security Baseline for Edge 99

Let us now show you how to get this security baseline.

Download and Install Security Baseline for Microsoft Edge v99

Use the guide below to download and install the new Security Baseline for Microsoft Edge. You can also select all the features in the Microsoft Security Compliance Toolkit as per your requirement.

  1. Open the page for Microsoft Security Compliance Toolkit 1.0. Scroll down and then click Download.
    download 1
  2. Check the box next to Microsoft Edge v88 Baseline.zip (and any other baselines you may require) and then click Next.
    next 3
  3. Your download should now begin. When downloaded, extract the files.
  4. When extracted, navigate to the following location within the extracted folder:
    Microsoft Edge v98 Security Baseline >> Scripts
  5. Now right-click Baseline-LocalInstall and click on Run with PowerShell from the context menu.
    run with pwshIf you want to run the baseline for Active Directory, then you should run Baseline-ADImport script.
  6. The script will now run automatically. Wait for the PowerShell window to close on its own.

You have now successfully installed the latest security baseline for Microsoft Edge 99.

Closing Words

Although this release of the security baseline does not introduce any new features, it still adds a layer of security to protect you and your device while browsing online. Therefore, we recommend you install it using the given guide above to secure your machine and your network.

If you have not updated Edge to version 99 yet, learn how.

Also see:

Subhan Zafar is an established IT professional with interests in Windows and Server infrastructure testing and research, and is currently working with Itechtics as a research consultant. He has studied Electrical Engineering and is also certified by Huawei (HCNA & HCNP Routing and Switching).

Leave a Reply

You have to agree to the comment policy.