This page outlines the latest updates to your Microsoft 365 tenant, delivered as a managed service by OneOffice
Please reach out to your designated consultant at OneOffice for inquiries related to the updates.
All updates have been tested and verified by trained personnel.
Profiles, apps, groups or settings in Microsoft 365 bearing the [OO Baseline] and [OO Baseline SS] identifiers are exclusively maintained and managed by OneOffice. They must not be altered under any circumstances.
Identifiers containing [OO Baseline SS] indirectly or directly affect your Secure Score and denote elements specifically related to security enhancements.
Updates to our baseline are implemented on a quarterly basis by the end of March, June, September and December, allowing for consistent improvement and adherence to evolving security best practices.
Date for implementation: before April 1st 2026.
<aside> ❌ This profile has been removed from baseline
</aside>
| What does this do? | Attempts to sign the user into Outlook silently in the background at first use |
|---|---|
| Why should you use this? | Skips having the user to click Connect |
| What is the end-user impact? | No impact |
| Learn more | This policy and its settings are outdated, and also configures cache settings in Outlook Classic that does more harm than good, as it locks down a user’s option to adjust cache to the users liking |
| Release date | March 2026 |
<aside> ⚠️ This profile has been modified in baseline
</aside>
| What does this do? | Sets Google as the default search engine in Edge instead of Bing |
|---|---|
| Why should you use this? | Google is the search engine most OneOffice customers prefer |
| What is the end-user impact? | Google becomes the default search engine in Edge. Users can still change this in Edge settings if they prefer something else |
| Learn more | This policy has been migrated from legacy “Administrative Templates” to “Settings Catalog” to comply with Microsoft’s recommendation |
| Release date | March 2026 |
<aside> ⚠️ This profile has been modified in baseline
</aside>
| What does this do? | Prevents Edge from using native messaging hosts installed at the user level. Only system-level (admin-installed) hosts are allowed |
|---|---|
| Why should you use this? | Reduces risk of malicious extensions communicating with unauthorised local applications by requiring admin approval for native messaging hosts |
| What is the end-user impact? | Extensions that rely on user-installed native messaging hosts will not work. Only extensions using admin-deployed hosts are supported |
| Learn more | This policy has been migrated from legacy “Administrative Templates” to “Settings Catalog” to comply with Microsoft’s recommendation |
| Release date | March 2026 |
<aside> ⚠️ This profile has been modified in baseline
</aside>
| What does this do? | Prevents users from accessing Family safety and Kids Mode settings in Edge |
|---|---|
| Why should you use this? | These are consumer features for parental controls, not relevant for business devices. Web filtering should be managed centrally through Intune or Defender |
| What is the end-user impact? | Users will not see Family safety or Kids Mode options in Edge settings. No impact on normal business use |
| Learn more | This policy has been migrated from legacy “Administrative Templates” to “Settings Catalog” to comply with Microsoft’s recommendation |
| Release date | March 2026 |
<aside> ⚠️ This profile has been modified in baseline
</aside>
| --- | --- |
| --- | --- |
| --- | --- |
| --- | --- |
| --- | --- |
| --- | --- |
| --- | --- |