🎯 Purpose
✅ Make sure Microsoft Edge updates are applied within 48 hours, meeting Essential Eight – Patch Applications (Maturity Level 3).
➡️ Edge downloads updates automatically. This policy forces the browser restart that installs them.
👥 Who is affected
✅ Devices: All Windows devices (Maturity Level 3 tenants)
🚫 Exclusions: None
☁️ What is protected
✅ Application: Microsoft Edge
✅ Type: Settings catalog (Microsoft Edge ADMX)
🔐 How updates are enforced
Setting | Value |
Notify a user that a browser restart is recommended or required for pending updates | Enabled – Restart required (recurring prompt) |
Set the time period for update notifications | Enabled – 172800000 ms (48 hours) |
➡️ Edge is forced to restart within 48 hours of an update being downloaded.
⚙️ What this policy does NOT enforce
🚫 Edge Update auto‑update policy overrides (Edge updates through Windows Autopatch and Edge Update defaults)
🚫 Edge hardening settings (see E8‑User Application Hardening – Edge Hardening)
🟢 Policy status
✅ Enabled
✅ Assigned to all devices
📘 Essential Eight Alignment
✅ Patches for web browsers are applied within 48 hours when a working exploit exists (ISM‑1692)
ℹ️ Applies to Maturity Level 3
📘 Practical Interpretation (Executive‑Friendly)
This policy ensures that:
✅ Users cannot leave Edge running on an unpatched version for more than two days
This closes the gap between an update being downloaded and it actually protecting the user.