422502 – Microsoft Edge: v.136 – Authorized Group Setting in Microsoft Edge for Business

Product:

Microsoft Edge, Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

Details:

The authorized group setting ensures that Edge respects the settings for "Printer groups," "Removable USB device groups," and "Network share groups" in the Microsoft Purview compliance portal. This change will prevent users from bypassing Data Loss Prevention (DLP) protections by using Edge, thereby enhancing security and compliance.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2024-10-17

updated:
2025-05-02

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Edge v.136 introduces a feature that enforces compliance settings for printer groups, USB devices, and network shares, ensuring Data Loss Prevention (DLP) measures are upheld by integrating with Microsoft Purview compliance portal rules.

Direct effects for Operations**

Data Loss Prevention Compliance
Without proper preparation, users may experience disruptions in their ability to print or use removable USB devices, leading to frustration and decreased productivity.
   - roles: End Users, IT Support Staff
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-edge-v-136-authorized-group-setting-in-microsoft-edge/ba-p/3851230

User Experience
Changes may lead to confusion among users who are accustomed to previous settings, resulting in a negative impact on their workflow and efficiency.
   - roles: End Users, Training Coordinators
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-edge-v-136-authorized-group-setting-in-microsoft-edge/ba-p/3851230

Operational Stability
If the change is implemented without adequate communication and training, it may lead to increased support tickets and operational disruptions as users struggle to adapt.
   - roles: IT Support Staff, Operations Managers
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-edge-v-136-authorized-group-setting-in-microsoft-edge/ba-p/3851230

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Loss Prevention (DLP) Compliance
Implementing the authorized group setting in Microsoft Edge will strengthen DLP by ensuring that browser usage adheres to established security protocols. This reduces the risk of data breaches and enhances overall compliance with data protection regulations.
   - next-steps: Conduct a risk assessment to identify potential data loss scenarios and configure Edge settings to align with DLP policies. Train users on compliance expectations.
   - roles: Compliance Officer, IT Security Manager, Data Protection Officer
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity-blog/what-s-new-in-microsoft-edge-for-business/ba-p/3620734, https://www.microsoft.com/en-us/security/business/solutions/data-loss-prevention

Streamlined IT Administrative Tasks
With the integration of authorized group settings, IT administrators can more easily manage and enforce compliance settings across the organization, reducing the time spent on manual oversight and audits.
   - next-steps: Review current administrative workflows and identify areas for automation or improvement. Utilize Microsoft Purview to streamline compliance reporting.
   - roles: IT Administrator, Compliance Officer, System Administrator
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity-blog/streamlining-compliance-with-microsoft-purview/ba-p/3640531, https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention

Improved User Experience with Compliance Awareness
By ensuring that Edge complies with DLP settings, users will have a clearer understanding of acceptable use policies, reducing the likelihood of accidental violations and enhancing their overall experience with IT resources.
   - next-steps: Develop and distribute user-friendly guides on compliance policies and how they relate to browser usage. Gather user feedback to improve future training sessions.
   - roles: End Users, Training Coordinator, Compliance Officer
   - references: https://www.microsoft.com/en-us/microsoft-365/compliance/overview, https://techcommunity.microsoft.com/t5/security-compliance-identity-blog/educating-users-on-data-loss-prevention/ba-p/3620740

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only