# Manage Microsoft Edge for Business Securely with Intune App Management > Secure Microsoft Edge for Business with Intune without enrolling the device: app protection and configuration policies, Conditional Access and BYOD. - URL: https://benjamintestart.fr/en/manage-microsoft-edge-intune-business/ - Author: Benjamin Testart (Devices Practice Leader & Microsoft Intune consultant) - Published: 2026-01-22 - Updated: 2026-10-05 - Category: Microsoft Intune - Language: en - Tags: Intune, Microsoft Edge for Business, MAM, Entra ID, BYOD - Version française: https://benjamintestart.fr/fr/gerer-microsoft-edge-business-intune/ ## TL;DR Microsoft Intune can secure Microsoft Edge for Business without enrolling the device, using mobile application management (MAM). You combine Microsoft Entra Conditional Access, app protection policies and app configuration policies to protect corporate data inside the browser, including on personal (BYOD) or contractor devices. Microsoft Intune lets you apply security policies to Microsoft Edge for Business without enrolling the device, thanks to app management (MAM) combined with Microsoft Entra Conditional Access. Corporate data is protected directly in the browser, including on personal or unmanaged devices. ## What Is It About? Microsoft has expanded the capabilities of Microsoft Intune by introducing policy management support for Microsoft Edge for Business as a secure enterprise browser (a feature announced in public preview in late 2025). It empowers IT administrators to enforce security and compliance policies directly at the browser level, and facilitates a seamless transition from traditional Windows desktop environments to secure, browser-based workflows without the need for device enrollment. ## Why Does This Update Matter? As organizations increasingly adopt cloud-first and hybrid work models, the need for secure, flexible access to corporate resources grows. Traditional device-centric management approaches can be cumbersome and limit agility, especially for contractors, remote workers, or bring-your-own-device (BYOD) scenarios. By enabling policy management for Microsoft Edge for Business through Intune, Microsoft offers a streamlined solution that: - Enhances security by controlling browser behavior and access to corporate data. - Reduces dependency on full device enrollment and management. - Supports Zero Trust principles by focusing on application-level controls. - Simplifies IT administration with centralized policy enforcement. ## What Are the Key Features of Edge for Business Managed by Intune? ### 1. Policy Enforcement Without Device Enrollment One of the most significant advantages is the ability to apply security policies to Microsoft Edge for Business without requiring the device itself to be enrolled in Intune. Users can access corporate resources securely through the browser on personal or unmanaged devices, reducing friction and expanding secure access options. ### 2. Comprehensive Policy Management Admins can configure a wide range of policies to tailor the browser experience and security posture, including: - Access control to corporate websites and resources. - Data protection settings such as preventing data leakage. - Authentication and single sign-on (SSO) configurations. - Extension management and browser feature restrictions. Microsoft organizes these settings into three protection levels (basic, enhanced, high), to be applied according to the sensitivity of the data each user population handles. ### 3. Enhanced Data Protection By managing Microsoft Edge for Business policies, organizations can better safeguard sensitive corporate information. App protection policies can restrict copy-paste, printing or downloads, and check device health before allowing access to data. ### 4. Seamless User Experience Users benefit from a familiar browsing experience powered by Microsoft Edge, with automatic separation between personal and work browsing and added security layers applied transparently. This reduces training overhead and supports productivity while maintaining compliance. ## How Do You Get Started with Edge for Business and Intune? ### Prerequisites - Microsoft Intune licenses for the targeted users. - Microsoft Entra ID P1 for Conditional Access. - Microsoft Edge for Business installed on devices, signed in with the Microsoft Entra ID work account. ### Steps to Enable Policy Management 1. **Access the admin center:** sign in to the Microsoft Intune admin center (intune.microsoft.com). 2. **Create app protection policies:** in **Apps**, create a protection policy targeting Microsoft Edge for each platform (Windows, iOS/iPadOS, Android). 3. **Create configuration policies:** for unenrolled devices, use app configuration policies; for enrolled devices, use the settings catalog. Never deploy both to the same client. 4. **Require the protected browser:** in Microsoft Entra, create a Conditional Access policy that requires an app protection policy to access resources from the browser. 5. **Deploy to users:** assign the policies to user groups according to the chosen protection level. Detailed guidance and policy options are available in the official Microsoft documentation on securing corporate data with Microsoft Edge for Business in Intune. ## When Should You Use It? ### Remote and Hybrid Workforce Enable secure access to corporate applications and data for remote employees without the complexity of enrolling personal devices. ### Contractors and Temporary Staff Provide controlled browsing environments that protect corporate assets while maintaining user privacy. ### BYOD Environments Allow employees to use their own devices securely by managing only the browser, minimizing IT overhead. ## What Are the Benefits for IT Administrators? - **Simplified management:** centralized policy deployment reduces administrative complexity. - **Improved security posture:** application-level controls complement existing endpoint security. - **Flexibility:** supports diverse device ecosystems and user scenarios. - **Efficiency:** less need for full device management for populations that do not require it. ## Conclusion Microsoft Edge for Business policy management within Microsoft Intune marks a significant advancement in enterprise browser security. By enabling secure, policy-driven browser access without device enrollment, organizations can embrace modern workstyles while maintaining robust protection of corporate data. I recommend that IT administrators test these scenarios with a pilot group before a broader rollout. For more detailed information and step-by-step instructions, visit the [Secure your corporate data in Intune with Microsoft Edge for Business](https://learn.microsoft.com/en-us/intune/solutions/edge-data-security/overview) documentation. ## Key takeaways - Edge for Business can be protected by Intune without device enrollment (MAM), including on Windows. - The foundation is Microsoft Entra Conditional Access, app protection policies and app configuration policies. - Use app configuration policies on unenrolled devices and the settings catalog on enrolled devices — never both for the same target. - Microsoft provides a three-level framework (basic, enhanced, high) to scale protection to each user population. ## Frequently asked questions ### Can you manage Microsoft Edge with Intune without enrolling the device? Yes. With Intune mobile application management (MAM), you apply protection and configuration policies to Edge for Business on unenrolled devices, including Windows, and Entra Conditional Access enforces use of the protected browser. ### What is the difference between an app configuration policy and the settings catalog for Edge? App configuration policies target Edge on unenrolled devices, while the settings catalog configures Edge on enrolled Windows and macOS devices. Microsoft recommends never deploying both to the same client to avoid conflicts. ### Which licenses are required to secure Edge for Business with Intune? You need a Microsoft Intune license for app protection policies and Microsoft Entra ID P1 for Conditional Access. Both are included in Microsoft 365 E3, E5 and Business Premium. ### Is Edge for Business a new browser? No. Edge for Business is the work experience of Microsoft Edge, enabled when the user signs in with a Microsoft Entra ID account, with automatic separation between personal and work browsing. ## Sources and documentation - [Secure your corporate data in Intune with Microsoft Edge for Business](https://learn.microsoft.com/en-us/intune/solutions/edge-data-security/overview) - [Enable app management on Windows (MAM)](https://learn.microsoft.com/en-us/intune/app-management/protection/enable-mam-windows) - [App protection policies overview](https://learn.microsoft.com/en-us/intune/app-management/protection/overview)