Feature updates
- Customize organizational branding using the Microsoft Edge management service. Admins can customize their organization’s branding assets onto Edge for Business through the Microsoft Edge management service. This branding can help users signed in with an Entra ID (formerly known as Azure Active Directory) more easily differentiate between multiple profiles and browser windows through visual cues on the profile pill, profile flyout, and Edge for Business taskbar icon.
This Microsoft Edge management service feature will give admins an enhanced experience to configure, preview, and customize how Edge for Business shows the following organization brand assets:
- Organization name
- Accent color
- Organization logo
- Edge for Business taskbar icon overlay
Note: This experience is in public preview and can be accessed by opting in to targeted release in the M365 admin center. For more information, see Microsoft Edge for Business.
- Automatic profile switching controls for Microsoft Edge for Business in the Microsoft Edge management service. The Microsoft Edge management service will provide admins with the ability to configure settings for automatic profile switching in the Microsoft Edge browser. This can help enforce context separation between their end users’ work and personal browsing. Note: This experience is in public preview and can be accessed by opting in to targeted release in the M365 admin center.
New policies
- AccessControlAllowMethodsInCORSPreflightSpecConformant – Make Access-Control-Allow-Methods matching in CORS preflight spec conformant
- AdditionalSearchBoxEnabled – Enable additional search box in browser
- AllowBackForwardCacheForCacheControlNoStorePageEnabled – Allow pages with Cache-Control: no-store header to enter back/forward cache
- AllowWebAuthnWithBrokenTlsCerts – Allow Web Authentication requests on sites with broken TLS certificates.
- BlockTruncatedCookies – Block truncated cookies
- DefaultWindowManagementSetting – Default Window Management permission setting
- ExtensionInstallTypeBlocklist – Blocklist for extension install types
- ExtensionManifestV2Availability – Control Manifest v2 extension availability
- FileOrDirectoryPickerWithoutGestureAllowedForOrigins – Allow file or directory picker APIs to be called without prior user gesture
- HttpAllowlist – HTTP Allowlist
- NewBaseUrlInheritanceBehaviorAllowed – Allows enabling the feature NewBaseUrlInheritanceBehavior
- RequireOnlineRevocationChecksForLocalAnchors – Specify if online OCSP/CRL checks are required for local trust anchors
- RSAKeyUsageForLocalAnchorsEnabled – Check RSA key usage for server certificates issued by local trust anchors
- ScreenCaptureWithoutGestureAllowedForOrigins – Allow screen capture without prior user gesture
- WindowManagementAllowedForUrls – Allow Window Management permission on specified sites
- WindowManagementBlockedForUrls – Block Window Management permission on specified sites
