[Feature] - Add Edge Default Notification Settting

[itkama]

Is your feature request related to a problem? Please describe.
Malicious websites can prompt users to allow notification access. Most users just click yes and continue. Those permissions can be used to display fullscreen notifications scaring the user into believing the device might be hacked.

Describe the solution you'd like
Add a setting to "Win - OIB - SC - Microsoft Edge - D - Security - v3.7", to be precise:

Default notification setting (Device) - Enabled
Default notification setting (Device) - Don't allow any site to show desktop notifications

Describe alternatives you've considered
Adding a supplemental policy myself, but I think it is worth considering adding it to the baseline itself.

[incedIT]

I agree, there is limited upside to allowing notifications but far greater downside. There is also a policy for "Allow notifications on specific sites" so if this is mentioned in the notes then admins can whitelist sites if there is a case for notifications.

[SkipToTheEndpoint]

Hey @itkama

Heh, funnily enough, I've already added this from a conversation I had over in WinAdmins Discord and I was documenting it the other day. I've actually added it into Win - OIB - SC - Microsoft Edge - U - User Experience though rather than Security.

Currently looks like this, turning desktop notifications off but still allowing them through from any microsoft.com or cloud.microsoft addresses:

[itkama]

Well, I have no stakes on which of the policies it is included on - and yours already is even better with allowing atleast some notifications. Happily awaiting windows-v3.8 now 🫡