Microsoft Edge: Autolaunch opt-in experience for managed devices

🚨 The Signal: Microsoft Edge on managed devices now offers an opt-in for autolaunch at Windows startup. This change provides administrators with a new policy to control Edge's startup behavior, impacting device performance and user experience.

The Impact

Managed device users and administrators are affected, with a low security risk related to application startup behavior and potential resource consumption.

  • End Users: May experience slightly faster startup if Edge is not autolaunched.
  • Administrators: Gain granular control over Edge's startup behavior.
  • Security Teams: Need to review policy to ensure consistent device posture.

The Action

  1. Review the 'LaunchEdgeOnWindowsStartupEnabled' policy documentation.
  2. Deploy the policy via Microsoft Intune or Group Policy to set desired behavior (opt-in, opt-out, or user-choice).

Domain: M365-Apps · Impact: low · Workload: M365 Apps · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860