Skip to content

Commit

Permalink
win: fix incorrect Edge privacy configs #455
Browse files Browse the repository at this point in the history
This commit resolves issues with the Edge browser scripts:

- Fix `BlockThirdPartyCookies` being disabled instead of enabled
- Fix `ConfigureDoNotTrack` being disabled instead of enabled
- Improve documentation readability by adding "Technical Details"
  section headers for better organization.
  • Loading branch information
undergroundwires committed Dec 2, 2024
1 parent c3f8c09 commit b8530d0
Showing 1 changed file with 13 additions and 9 deletions.
22 changes: 13 additions & 9 deletions src/application/collections/windows.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10230,21 +10230,23 @@ actions:
Authorities like The Center for Internet Security (CIS) [1]
recommend this script for enhanced security.

This script configures the `BlockThirdPartyCookies` Edge policy [1] [2].
Running this script does not require a browser restart for the changes to take effect [1].

> **Caution**:
> - This will display the message "Your browser is managed by your organization" on the settings page.
> - This locks settings and prevents them from being changed on the settings page.
> - Some websites may not function properly without third-party cookies.

### Technical Details

This script configures the `BlockThirdPartyCookies` Edge policy [1] [2].
Running this script does not require a browser restart for the changes to take effect [1].

[1]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#blockthirdpartycookies "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com"
[2]: https://web.archive.org/web/20240625064922/https://paper.bobylive.com/Security/CIS/CIS_Microsoft_Edge_Benchmark_v1_0_0.pdf "CIS Microsoft Edge Benchmark v1.0.0 | paper.bobylive.com"
call:
function: SetEdgePolicyViaRegistry
parameters:
valueName: BlockThirdPartyCookies # Edge ≥ 77
dwordData: '0'
dwordData: '1'
-
name: Enable Do Not Track requests
recommend: standard # refactor-with-variables: • Chromium Policy Caution
Expand All @@ -10260,21 +10262,23 @@ actions:
Additionally, Microsoft endorses this script as it helps create a cleaner browser interface by reducing
unsolicited suggestions [2] and improves privacy by better controlling data connections [3].

This script configures the `ConfigureDoNotTrack` Edge policy [1] [2].
Running this script does not require a browser restart for the changes to take effect [1].

> **Caution**:
> - This will display the message "Your browser is managed by your organization" on the settings page.
> - This locks settings and prevents them from being changed on the settings page.

### Technical Details

This script configures the `ConfigureDoNotTrack` Edge policy [1] [2].
Running this script does not require a browser restart for the changes to take effect [1].

[1]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#configuredonottrack "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com"
[2]: https://web.archive.org/web/20240618221222/https://learn.microsoft.com/en-us/mem/intune/industry/education/tutorial-school-deployment/common-config-settings-catalog-edge
[3]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#132-microsoft-edge-enterprise
call:
function: SetEdgePolicyViaRegistry
parameters:
valueName: ConfigureDoNotTrack # Edge ≥ 77
dwordData: '0'
dwordData: '1'
-
name: Disable Edge search and site suggestions
recommend: strict
Expand Down Expand Up @@ -27707,7 +27711,7 @@ actions:
It is recommended to regularly check for and install updates manually to maintain system security.

> **Caution:**
> Disabling Automatic Updates may leave the system unprotected against known vulnerabilities.
> Disabling Automatic Updates may leave the system unprotected against known vulnerabilities.
> Consider manually checking and installing updates to ensure security.

### Technical Details
Expand Down

0 comments on commit b8530d0

Please sign in to comment.