メインコンテンツへスキップ

030: Managed Edge Browser

Implementation Effort: Medium
User Impact: Medium

Overview​

Modern Zero Trust device guidance should focus on Microsoft Edge as the browser that can be configured and protected through Microsoft Intune, not on older "managed browser" terminology. Edge can participate in app protection scenarios, managed app configuration, and managed-device policy baselines depending on platform and enrollment state.

The main goal is to ensure that users open corporate links and web resources in a browser experience that supports organizational controls.

Implementation Guidance​

  1. Update terminology in workshop materials to Microsoft Edge and, where relevant, Edge for Business capabilities.
  2. Decide which scenarios you are enabling:
    • Mobile BYOD with app protection
    • Enrolled mobile devices with app configuration
    • Managed Windows/macOS browser policy through Intune settings catalogs or administrative templates
  3. On mobile, combine Edge deployment with:
    • App protection policies
    • App configuration policies
    • Conditional Access requirements for approved apps or protected app access where appropriate
  4. Configure Edge-specific settings that matter for Zero Trust, such as allowed account behavior, homepage/start experience, managed favorites, and web access boundaries.
  5. Test app handoff from Outlook, Teams, and other Microsoft 365 apps to confirm corporate links open in the intended browser.
  6. For managed desktop scenarios, align browser policy with identity controls such as phishing-resistant authentication, session controls, and device compliance.
  7. Document fallback behavior for unmanaged browsers so support teams know how access will be blocked or redirected.

A page on this topic should make it clear that the browser is part of the data-protection path, not just an app deployment step.

Reference​