October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Redmond desk4 min

How to Update the Microsoft Edge Security Baseline in Intune

Intune creates a side-by-side profile when you update newer-format Edge baselines. Older profiles require a one-time rebuild, and both paths call for a careful settings review.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To update an existing Microsoft Edge security baseline in Intune, open Endpoint security > Security baselines, select the Edge baseline profile, and start its version update. For profiles created in May 2023 or later, Intune creates a side-by-side profile based on the latest available baseline; you then choose whether to keep or discard the old profile’s customizations. Profiles created before May 2023 require a one-time rebuild in the newer format.

As of October 7, 2026, Microsoft lists the Edge v139 baseline (April 2026) as the latest available in Intune. That is the baseline template version, not the Edge browser release number: Microsoft’s Stable release notes list browser version 154.0.4258.62 on October 5, 2026. Check Intune’s baseline list when you do the work, since Microsoft may publish a newer template. Microsoft’s baseline overview and Edge Stable release notes track those separate versions.

As an Amazon Associate I earn from qualifying purchases.

Which update path applies to your Edge baseline profile?

Intune does not automatically upgrade an existing security baseline profile when Microsoft releases a newer version. The right update path depends on when the profile was created:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Profile format Update path How customizations are handled
Created in May 2023 or later Use Intune’s version update to create a side-by-side instance based on the latest available version. Choose to keep the original profile’s setting customizations or discard them in the new instance.
Created before May 2023 Create a new profile in the current format and configure its settings from the old profile; it cannot be directly upgraded into the newer format. Document and manually rebuild required deviations from the old profile.

Microsoft notes that settings configuration in older profiles becomes read-only after a newer baseline is released, while profile metadata and assignments remain editable. See Manage security baseline profiles in Microsoft Intune.

Update a profile created in May 2023 or later

  1. In the Microsoft Intune admin center, go to Endpoint security > Security baselines.
  2. Select the Microsoft Edge baseline type, then choose the profile you want to update.
  3. Start the version update. Intune creates a separate, side-by-side profile based on the latest version available for that baseline type; it does not silently replace the original.
  4. Choose whether to keep customizations or discard customizations. Keeping them applies the original profile’s setting customizations to the new template. Discarding them creates a new default instance without automatically applying those customizations.
  5. Give the new instance a name. Review its settings and assignments before treating it as ready for broad deployment.

Choose the customization option deliberately

Keeping customizations can preserve intentional settings deviations, but it does not remove the need to review the resulting profile against the new baseline. Discarding customizations starts from the new template’s defaults, so settings that were intentionally changed in the old profile will not automatically carry over. Record the rationale for important deviations and check the new instance before assigning it widely.

Validate before expanding deployment

Compare the new instance with the current configuration, assign it to a pilot group, and check the effect on representative devices before expanding assignment through your change-control process. Microsoft does not prescribe a universal pilot size or duration; set those to fit your environment and risk tolerance. Intune’s portal labels can change, so follow the current labels if they differ from the navigation above.

Rebuild a profile created before May 2023

The baseline format changed in May 2023. A profile created before that change cannot be directly upgraded to the newer format. Create a new profile using the current format, then configure its settings based on the old profile.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Document the old profile’s settings and identify customizations that must remain in place.
  2. Create a new Microsoft Edge baseline profile in the current format.
  3. Reapply the required settings and deviations from the old profile, checking each against the current baseline.
  4. Review the new profile and assignment, then validate it on a pilot group before broader deployment.

Treat this as a one-time recreation, not as a direct version update. The profile-management guidance is in Microsoft’s Intune baseline management article.

Review what changed in the latest baseline

Microsoft describes the Edge v139 baseline as including new settings, changed defaults, and retired settings. Review the versioned settings reference before moving profiles, particularly when the old profile contains customizations. The following are examples listed in the Microsoft Edge security baseline settings reference, not a complete change list:

  • Allow users to proceed from the HTTPS warning page: Disabled.
  • Enable Application Bound Encryption: Enabled.
  • Enable site isolation for every site: Enabled.
  • Enable browser legacy extension point blocking: Enabled.
  • Dynamic Code Settings: Enabled, with the device setting preventing the browser process from creating dynamic code.

Compare the actual settings in your environment with the versioned reference rather than relying on examples alone. Microsoft also points administrators to the Security Compliance Toolkit for current baseline settings, including versions that may not be offered in Intune. Intune’s What’s new page identifies baseline availability and recommends reviewing new baselines before moving profiles.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Check Windows support separately from Intune eligibility

Microsoft’s Intune baseline guidance lists Windows 11 and Windows 10 version 1809 and later as in scope for security baselines. That feature eligibility is not the same as current Windows servicing support: Windows 10 reached end of support on October 14, 2025. For current deployments, prioritize supported operating systems and consult Microsoft’s lifecycle guidance for the Windows edition and servicing channel in use.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.