Update Intune Edge Security Baseline Without Losing Settings

Updating a Microsoft Edge security baseline in Intune normally resets any custom settings you’ve applied, because the baseline overwrites the policy with its default values. This guide shows you how to update the baseline version while preserving your custom configurations, so you get the latest security recommendations without redoing all your work.

What You’ll Need

• Access to the Microsoft Intune admin center (endpoint.microsoft.com) with an account that has the Policy and Profile Manager role or equivalent permissions.
• The Edge security baseline you want to update must already be assigned to at least one group.
• Your custom settings should be documented (or you can export them) so you can reapply them after the update.

Step-by-Step

1. Open the Intune admin center and go to Endpoint security > Security baselines.
2. In the list of baselines, find the Microsoft Edge baseline you’re using. It will show the current version (e.g., “Edge Baseline v1.0”). Click on it to open its overview page.
3. On the overview page, click Properties and then Settings to view the current configuration. Take a screenshot or export the settings (you can copy the JSON via the “Export” button if available) so you have a record of your custom values.
4. Go back to the Security baselines list. Look for a new version of the Edge baseline (e.g., “Edge Baseline v2.0”). If it exists, you’ll see an “Update available” badge or a note. If not, you’ll need to wait until Microsoft releases a new version.
5. Click on the new version to open its overview. This is a fresh baseline; it does not contain your previous custom settings.
6. Click Create (or Create profile) to start a new baseline instance. You’ll be asked to assign a name and description. Use the same name as your old baseline but add “- Updated” or a version suffix to distinguish it.
7. In the Configuration settings tab, you’ll see all the settings with default values. Apply your custom settings from the screenshot or export you took in step 3. Be careful to match the exact values and toggles.
8. Click Next to go to the Scope tags tab. Select the same scope tags as your original baseline (or as needed).
9. Click Next to go to the Assignments tab. Assign this new baseline to the same groups that the old baseline was assigned to. You can also add or remove groups as needed.
10. Click Next and then Create to save the new baseline.
11. Once the new baseline is created and assigned, go back to the Security baselines list and find your old baseline. Click on it, then click Properties > Assignments and remove all assignments. This will stop the old baseline from applying.
12. Optionally, you can delete the old baseline profile after confirming the new one is applied successfully. To delete, go to the old baseline’s overview, click Delete, and confirm.

Common Mistakes

• Not documenting custom settings before updating – If you skip step 3, you’ll lose your custom values and have to remember them from memory.
• Assigning the new baseline before removing the old one – If both are assigned to the same group, the settings may conflict, and the outcome is unpredictable. Always remove the old assignment first (or use exclusion groups).
• Forgetting to reapply custom settings – The new baseline starts with defaults; you must manually set your custom values again.
• Using the same name for both baselines – This can cause confusion in the admin center. Use a version suffix to tell them apart.

Tips

• Before updating, test the new baseline on a small pilot group (e.g., IT staff) to ensure it doesn’t break any critical Edge features.
• Use the Export feature in the baseline settings to get a JSON file of your configuration. This is more accurate than screenshots for complex settings.
• After applying the new baseline, check the Device status in the baseline overview to confirm that devices are receiving the updated policy.
• If you have multiple Edge baselines (e.g., for different user groups), update them one at a time to minimize disruption.

Troubleshooting

• New baseline doesn’t apply to devices – Verify that the assignment is correct and that the devices are in the assigned group. Also check that the new baseline is not blocked by a higher-priority policy (e.g., a custom policy). In Intune, the last applied policy wins, but conflicts can occur; use the Settings catalog to see which policy is winning.
• Custom settings don’t take effect – Double-check that you applied the custom values correctly. Some settings are case-sensitive or require specific formats (e.g., URLs). Compare with your export.
• Devices show “Error” after update – Check the device’s Managed apps or Compliance report for error details. Often it’s a conflict between the old and new baseline; ensure the old one is unassigned.
• Cannot delete the old baseline – If the old baseline is still assigned, you cannot delete it. Remove assignments first, then delete.
• New baseline version not visible – Security baselines are updated by Microsoft periodically. If you don’t see a new version, it may not be released yet. Check the Microsoft 365 roadmap or wait for a notification in the admin center.

Frequently Asked Questions

Will updating the baseline automatically preserve my custom settings?

No. When you create a new baseline from a new version, it starts with default values. You must manually reapply your custom settings.

Can I edit an existing baseline to update it?

You can edit the settings of an existing baseline, but that does not update the baseline version. To get the new version’s default settings, you need to create a new baseline from the new version.

What happens to devices that were using the old baseline?

Once you unassign the old baseline and assign the new one, devices will receive the new policy on their next check-in (usually within 8 hours, but you can force a sync). Until then, they may still have the old settings.

Can I have two Edge baselines assigned to the same group?

Technically yes, but it’s not recommended because settings may conflict. The last applied policy wins, but you may see unpredictable results. It’s better to have only one baseline per group.

Is there a way to import custom settings from the old baseline?

Yes, you can export the old baseline’s settings as a JSON file, then import that file into the new baseline (if the new version supports the same settings). In the new baseline’s configuration settings, look for an Import button.

How often are Edge security baselines updated?

Microsoft releases new baseline versions when significant security changes are made to Edge. There’s no fixed schedule; it could be every few months.

Related

• Why Concord Can’t Get Players: Key Reasons
• VPS DDoS Protection: How It Works & 4 Hosts Compared
• Palworld Server Ports: Which Ports to Open