Windows 10 or later Configuration Policy - Block Password Saving In Microsoft Edge
Configuration policy for blocking password saving in Microsoft Edge
Settings this baseline controls
| Setting | What it does |
|---|---|
| Sync disabled | Controls whether Edge sync is disabled. Learn more |
| Password manager enabled | Controls whether passwords can be saved using the password manager. Learn more |
Configure it
Add this to a tenant whose Windows fleet uses Microsoft Edge, so the browser stops acting as a password store, and stops syncing any passwords it already holds to a personal account.
-
Add the baseline to the tenant directly (Adding a baseline), or include it in a scheme you deploy to every tenant whose devices run Edge (Deploying a scheme).
-
Leave Password manager enabled switched off, so Edge stops offering to save or automatically fill in sign-in passwords.
-
Leave Sync disabled switched on. This stops Edge syncing browser data, including any passwords already saved, to a personal Microsoft account signed in on the same profile.
-
Save. Turn on Auto-remediation if you want Octiga to recreate the policy in Intune whenever it’s changed or removed.
Check it worked
This baseline shows Passing once the configuration profile exists in Intune with both settings above and a Windows device has reported them applied. To check progress, go to Devices → Manage devices → Configuration in the Microsoft Intune admin centre, open the profile (its Profile type reads “Settings catalog”), and use its device status and per-setting status views. Users notice Edge no longer offers to remember a password, and that Edge sync (favourites and history as well as passwords) is unavailable on the device.
Standards this addresses
Doing this for every tenant?
Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time.