STIGUI
V-251694CAT III — Low severitySV-251694r960963_rule

The list of domains media autoplay allows must be allowlisted if used.

Rule version EDGE-00-000064 · STIG v2 · 2026-02-25

Discussion

Define a list of sites, based on URL patterns, that are allowed to autoplay media.

If this policy is not configured, the global default value from the AutoplayAllowed policy (if set) or the user's personal configuration is used for all sites.

EDGE-00-000024 disables the AutoplayAllowed policy.

Check

If this machine is on SIPRNet, this is Not Applicable.

This requirement for "AutoplayAllowlist" is not required; this is optional.

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Allow media autoplay on specific sites" may be set to "allow" for allowlisted domains.

Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge

AutoplayAllowlist may be set as follows: HKLM\SOFTWARE\Policies\Microsoft\Edge\AutoplayAllowlist\1 = mydomain.com HKLM\SOFTWARE\Policies\Microsoft\Edge\AutoplayAllowlist\2 = myagency.mil

If configured, the list of domains for which autoplay is allowed may be allowlisted.

Fix

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Allow media autoplay on specific sites" may be set to "allow" for allowlisted domains.

Identifiers

Group ID
V-251694
Group title
SRG-APP-000141
Rule ID
SV-251694r960963_rule
Check ID
C-55131r863220_chk
Fix ID
F-55085r808527_fix