Microsoft has set a July 2026 general availability target for a change in how Microsoft Edge handles file downloads on devices managed with Intune Mobile Application Management (MAM). When the update lands, any file downloaded from Edge that is protected by an Intune MAM policy will be saved directly to the user’s OneDrive for Business storage, routed into a specific folder within their Documents directory, rather than landing in the local Downloads folder. The shift is designed to keep corporate data secure and accessible across devices without requiring full device enrollment.

What’s changing in Edge for managed work files

Today, when a user signs into Edge with a work or school account protected by an Intune app protection policy, the browser can separate work and personal browsing data. Downloads of work files—say, a PDF from SharePoint or a spreadsheet from a web app—are typically stored in a local download folder that the organization can manage to some extent, but that still leaves copies on the endpoint.

The July 2026 update will redirect those downloads to OneDrive for Business by default. Specifically, the files will appear under the user’s OneDrive Documents folder, which syncs across all devices where the user is signed in. This means the downloaded file is immediately available in the cloud and on other managed devices, not tied to the local machine.

Microsoft calls this capability “Intune MAM protected downloads,” and it applies to Edge on Windows, macOS, and mobile where MAM policies are enforced. The change does not affect personal profiles in Edge or downloads made from a personal account—only work data inside the managed browser context.

What it means for you

The impact depends on your role.

For everyday business users, the change should be largely invisible. You click download in Edge on your work profile, and the file appears in your OneDrive, accessible from the same folder structure you already use for documents. You won’t have to hunt through a separate Downloads folder or worry about losing the file if your PC is wiped. The one thing to remember: if you’re offline and the file hasn’t synced, you might not see it immediately, but OneDrive’s Files On-Demand can make it available once you reconnect.

For IT administrators and security teams, this is a significant update that strengthens data protection without adding friction. Here’s why it matters:

  • No more stranded corporate data on unmanaged endpoints. Because downloads go straight to OneDrive, the local Downloads folder no longer becomes a dumping ground for sensitive files that might be forgotten or exposed.
  • Better compliance and eDiscovery. Files in OneDrive are covered by Microsoft 365 compliance controls, including retention policies, legal hold, and audit logs. Downloaded files become as manageable as any other document.
  • Simplified remote wipe. If an employee leaves or a device is compromised, revoking access to OneDrive effectively cuts off the downloaded files. Previously, IT had limited ability to delete locally stored downloads without full device management.
  • Reduced reliance on full mobile device management (MDM). This aligns with the “MAM without enrollment” strategy, where you protect corporate data inside specific apps without controlling the entire device. Edge becomes a stronger vessel for that data because downloads never leak to unmanaged locations.

Home users who also use a work account in Edge should see no change in their personal browsing. The feature only kicks in for work profiles governed by MAM policies. If you’re not using Intune MAM, nothing changes.

How we got here

Microsoft has been steadily tightening the integration between Edge, Intune, and OneDrive as part of its larger Zero Trust security framework. The pivot away from local storage for managed content has been years in the making.

  • 2018–2020: Microsoft introduced app protection policies for mobile Office apps, allowing IT to restrict copy/paste and “save as” to personal locations. OneDrive became the sanctioned cloud location for work files.
  • 2021: Edge for Business arrived, enabling automatic profile switching and separation of work and personal data in the browser. MAM policies could then be applied to Edge on mobile platforms.
  • 2023: Microsoft extended MAM to Windows via Edge, meaning a work profile in Edge on an unenrolled Windows PC could be managed and protected without enrolling the device in Intune. Downloads, however, still went to the local disk by default.
  • 2024–2025: The company began previewing “protected downloads” in Edge, testing the redirection of MAM-protected downloads to OneDrive. Feedback from early adopters shaped the feature now headed for general availability.

The July 2026 GA date gives organizations a long runway. Microsoft typically rolls such changes out gradually—first to tenants that opt in, then as an opt-out, and finally as a default with no off switch. The exact timeline for those stages isn’t yet public, but past patterns suggest a preview period throughout 2025 and early 2026, with the default taking effect at GA.

What you should do now

There are steps both admins and users can take to prepare, even though the deadline is more than a year away.

For IT administrators:

  1. Review your MAM policies. In the Microsoft Intune admin center, check the app protection policies scoped to Edge. Look for any settings related to download locations. If a preview or configuration option becomes available, test it with a pilot group.
  2. Assess OneDrive readiness. Ensure that all users covered by MAM policies have OneDrive for Business provisioned and that the Documents folder is being synced. Users should be signed into OneDrive on their devices for the seamless experience. Deploy the latest OneDrive sync client via your standard update mechanism.
  3. Communicate the change early. Let your organization know that starting in mid-2026, work downloads from Edge will appear in OneDrive instead of the local Downloads folder. Create a simple help article explaining how to find and use those files. Walk through a common scenario: opening a protected PDF from a web app and then locating it in OneDrive.
  4. Plan for licensing. MAM for Windows and the protected downloads feature likely require Microsoft 365 E3 or E5, or the Enterprise Mobility + Security suite. Verify your licensing before the feature becomes mandatory. If you’re on lower-tier plans, you might need to upgrade.
  5. Monitor the Microsoft 365 roadmap. The official roadmap ID (if any) will provide updates on feature rollout phases, and the message center in the admin portal will announce when it’s available for your tenant. Bookmark the Microsoft Edge release notes for build-specific details.
  6. Consider testing with Conditional Access. You can enforce that only managed Edge browsers with compliant policies can download work files, layering additional protection even before the OneDrive reroute takes effect.

For end users:

  • No immediate action is required, but getting comfortable with OneDrive now will make the transition smoother. If you rarely use OneDrive for file storage, start saving documents there occasionally so you know where things are.
  • Remember that after the change, if you can’t find a downloaded work file, check OneDrive > Documents instead of the Downloads folder. The experience will be similar to opening an email attachment in Outlook on a mobile device—it lands in your cloud storage, not a local temporary folder.

Outlook

The move to cloud-first downloads in Edge is a natural extension of Microsoft’s broader strategy to eliminate the “data at rest on the endpoint” problem. Expect to see similar behavior in other MAM-protected applications over time—Outlook, Teams, and Office mobile apps already nudge users toward OneDrive for attachments and saved files. Edge was the last major holdout for local downloads.

In the nearer term, watch for the first public preview of this feature, likely arriving in a Microsoft Edge beta build later this year or early 2026. At that point, you’ll be able to see exactly how the folder mapping works and whether any administrative controls are available, such as designating a specific OneDrive folder or opting out for certain users.

For now, the July 2026 general availability target gives every organization ample time to get comfortable with the idea that the browser’s download folder is moving to the cloud. The end result should be a smoother, more secure experience for everyone handling corporate data on the go.