Security baseline for Microsoft Edge version 110

[Rick_Munck]

We are pleased to announce the security review for Microsoft Edge, version 110!

We have reviewed the new settings in Microsoft Edge version 110 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 107 security baseline continues to be our recommended configuration which can be downloaded from the Microsoft Security Compliance Toolkit.

Microsoft Edge version 110 introduced 13 new computer settings and 13 new user settings. We have included a spreadsheet listing the new settings in the release to make it easier for you to find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baselines Discussion site or this post.

[Greg_C_Gilbert]

I'm trying to migrate our Edge security baseline GPO to Configuration Profiles in Intune. 

"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context" which has been part of the security baseline since version 92 doesn't appear to be available in the Settings Catalog. Is it there with a different name, or is it not available? I know I can import the ADMX now and set it that way, but I'd rather not have this one setting separate from all the rest.

[Jörgen Nilsson]

You are correct, that setting does not currently exists in the Settings Catalog. I tried to import the .admx files for Edge to solve it but that did not work either. Ended up with a PowerShell script to set it.. 
Configuring MS Edge Security Baseline v107 using Settings Catalog - CCMEXEC.COM - Enterprise Mobilit...

[Rick_Munck]

Adding @Julia_Idaewor from Intune for visibility and comment on the Microsoft Edge setting.

[MZONDERLAND]

When will the "Edge Security Baseline" in Microsoft Intune (Endpoint Security) updated, last version is from 2020?

[Julia_Idaewor]

Hi @MZONDERLAND @Jörgen Nilsson @Greg_C_Gilbert ,

Unfortunately, the intended launch date for the updated Intune Edge security baseline has been pushed back due to an internal dependency outside of our team's control. However, the good news is a fix has been identified and is currently in progress. Provided there are no more major blockers, we are targeting the new version of the Intune Edge security baseline to be released in Q2 '23. We truly apologize for the delay and any inconveniences associated with it. 

[Joshua Bines]

Can anyone comment of the PAW deployment and recommendations for adopting the security baselines with these updates? 

The scripts and config seem a little out of date in the scripts that are suggested. A PAW and Specialized Intune baseline would be awesome and help keep PAWs well protected. On the roadmap? 

https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-deployme...

https://github.com/Azure/securedworkstation