BaselineWatch
25 requirements
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Microsoft Security Baselines (SCT) 2026-10-08

25 requirements · published 2026-10-08
Changes in this version
RefTitleText
ApplicationBoundEncryptionEnabled HKLM\Software\Policies\Microsoft\Edge\ApplicationBoundEncryptionEnabled REG_DWORD = 1
AuthSchemes HKLM\Software\Policies\Microsoft\Edge\AuthSchemes REG_SZ = ntlm,negotiate
BasicAuthOverHttpEnabled HKLM\Software\Policies\Microsoft\Edge\BasicAuthOverHttpEnabled REG_DWORD = 0
BrowserCodeIntegritySetting HKLM\Software\Policies\Microsoft\Edge\BrowserCodeIntegritySetting REG_DWORD = 2
BrowserLegacyExtensionPointsBlockingEnabled HKLM\Software\Policies\Microsoft\Edge\BrowserLegacyExtensionPointsBlockingEnabled REG_DWORD = 1
DynamicCodeSettings HKLM\Software\Policies\Microsoft\Edge\DynamicCodeSettings REG_DWORD = 1
EnableUnsafeSwiftShader HKLM\Software\Policies\Microsoft\Edge\EnableUnsafeSwiftShader REG_DWORD = 0
EnhanceSecurityMode HKLM\Software\Policies\Microsoft\Edge\EnhanceSecurityMode REG_DWORD = 1
**delvals. HKLM\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist\**delvals. REG_SZ =
1 HKLM\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 REG_SZ = *
InternetExplorerIntegrationReloadInIEModeAllowed HKLM\Software\Policies\Microsoft\Edge\InternetExplorerIntegrationReloadInIEModeAllowed REG_DWORD = 0
InternetExplorerIntegrationZoneIdentifierMhtFileAllowed HKLM\Software\Policies\Microsoft\Edge\InternetExplorerIntegrationZoneIdentifierMhtFileAllowed REG_DWORD = 0
InternetExplorerModeToolbarButtonEnabled HKLM\Software\Policies\Microsoft\Edge\InternetExplorerModeToolbarButtonEnabled REG_DWORD = 0
NativeMessagingUserLevelHosts HKLM\Software\Policies\Microsoft\Edge\NativeMessagingUserLevelHosts REG_DWORD = 0
NetworkServiceSandboxEnabled HKLM\Software\Policies\Microsoft\Edge\NetworkServiceSandboxEnabled REG_DWORD = 1
PreventSmartScreenPromptOverride HKLM\Software\Policies\Microsoft\Edge\PreventSmartScreenPromptOverride REG_DWORD = 1
PreventSmartScreenPromptOverrideForFiles HKLM\Software\Policies\Microsoft\Edge\PreventSmartScreenPromptOverrideForFiles REG_DWORD = 1
ProcessIsolationEnabled HKLM\Software\Policies\Microsoft\Edge\ProcessIsolationEnabled REG_DWORD = 1
RendererAppContainerEnabled HKLM\Software\Policies\Microsoft\Edge\RendererAppContainerEnabled REG_DWORD = 1
SharedArrayBufferUnrestrictedAccessAllowed HKLM\Software\Policies\Microsoft\Edge\SharedArrayBufferUnrestrictedAccessAllowed REG_DWORD = 0
SitePerProcess HKLM\Software\Policies\Microsoft\Edge\SitePerProcess REG_DWORD = 1
SmartScreenEnabled HKLM\Software\Policies\Microsoft\Edge\SmartScreenEnabled REG_DWORD = 1
SmartScreenPuaEnabled HKLM\Software\Policies\Microsoft\Edge\SmartScreenPuaEnabled REG_DWORD = 1
SSLErrorOverrideAllowed HKLM\Software\Policies\Microsoft\Edge\SSLErrorOverrideAllowed REG_DWORD = 0
TyposquattingCheckerEnabled HKLM\Software\Policies\Microsoft\Edge\TyposquattingCheckerEnabled REG_DWORD = 1

25 of 25.