494516 – Microsoft Edge: Policies to manage Shadow IT

Product:

Copilot, Microsoft Edge

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

M365 Commercial customers can use Edge polices (WebContentFilteringBlockedCategories) to block non-secure LLMs in Edge and block other browsers to redirect users to a more secure alternative like Copilot Chat.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-05-23

updated:
2025-05-23

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft Edge offers businesses tools to manage "Shadow IT" risks by implementing policies like WebContentFilteringBlockedCategories to block access to non-secure large language models and redirect users to secure alternatives, ensuring software compliance and security.

Direct effects for Operations**

Blocking Non-Secure LLMs
Implementing policies to block non-secure LLMs may lead to users being unable to access certain AI tools they rely on for productivity, resulting in decreased efficiency and frustration.
   - roles: End Users, IT Support
   - references: https://techcommunity.microsoft.com/t5/microsoft-edge-blog/microsoft-edge-policies-to-manage-shadow-it/ba-p/3851230

Redirecting Users to Copilot Chat
Redirecting users to Copilot Chat may disrupt their workflow if they are accustomed to using other tools, leading to a learning curve and potential resistance to change.
   - roles: End Users, Training Coordinators
   - references: https://techcommunity.microsoft.com/t5/microsoft-edge-blog/microsoft-edge-policies-to-manage-shadow-it/ba-p/3851230

Blocking Other Browsers
Blocking other browsers could limit users' access to necessary web applications that are not compatible with Edge, causing delays in task completion and user dissatisfaction.
   - roles: End Users, IT Support
   - references: https://techcommunity.microsoft.com/t5/microsoft-edge-blog/microsoft-edge-policies-to-manage-shadow-it/ba-p/3851230

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Security Management
Implementing Edge policies to block non-secure LLMs will significantly reduce the risk of data breaches and enhance overall security posture. This can prevent unauthorized access to sensitive information and mitigate potential cyber threats.
   - next-steps: Conduct a security assessment to identify which LLMs are currently being used and develop a policy framework for blocking these. Train IT staff on policy enforcement and monitor compliance.
   - roles: IT Security Manager, Compliance Officer, System Administrator
   - references: https://techcommunity.microsoft.com/t5/education-blogs/microsoft-edge-policies-to-manage-shadow-it/ba-p/3711235, https://www.microsoft.com/en-us/security/blog/2023/01/10/understanding-shadow-it-and-how-to-manage-it/

Improved User Experience
Redirecting users to a secure alternative like Copilot Chat enhances user experience by providing a reliable and secure platform for collaboration and information retrieval, thus increasing productivity.
   - next-steps: Gather user feedback on current browser experiences, set up the necessary redirects in Edge, and provide training on using Copilot Chat effectively.
   - roles: Productivity Manager, End Users, IT Support Specialist
   - references: https://www.microsoft.com/en-us/microsoft-365/blog/2023/05/15/introducing-copilot-your-personal-ai-assistant/, https://www.forbes.com/sites/bernardmarr/2023/06/12/the-future-of-work-how-ai-is-transforming-our-workplaces/

Streamlined IT Administration
Utilizing Edge policies to manage browser usage can simplify IT administrative tasks by reducing the number of browsers that need to be supported and maintained, leading to lower overhead and improved efficiency.
   - next-steps: Review current browser usage across the organization, consolidate browser management under Edge, and update IT support documentation accordingly.
   - roles: IT Manager, System Administrator, Help Desk Technician
   - references: https://www.zdnet.com/article/how-to-manage-your-enterprise-browsers-with-microsoft-edge/, https://www.cio.com/article/331247/how-to-manage-shadow-it-in-your-organization.html

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only