Title

Relaunch notification must be required. (Cat II impact)

Discussion

Users must be required to restart the browser to finish installation of pending updates and prevent users from continually using an old/vulnerable browser version.

Check Content

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Notify a user that a browser restart is recommended or required for pending updates" must be set to "Enabled" with the option value set to "Required". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge If the value for "RelaunchNotification" is not set to "REG_DWORD = 2", this is a finding.

Fix Text

Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Notify a user that a browser restart is recommended or required for pending updates" web-browsing activity to "Required".

Additional Identifiers

Rule ID: SV-235773r960993_rule

Vulnerability ID: V-235773

Group Title: SRG-APP-000156

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.