Configuring the Microsoft Edge browser for the Profile autologin with current user login name?

Question

Configuring the Microsoft Edge browser for the Profile autologin with current user login name?

EnterpriseArchitect 6,041

I need help automating the Microsoft Edge Browser auto login using the Group Policy with Edge Administrative Template.

The problem in every login in all of the servers and Windows desktop using the Edge Browser:

User's image

This is the GPO I configured so far:

User's image

I appreciate any help you can provide.

Anonymous

2024-10-11T03:30:39.7766667+00:00

Hi @EnterpriseArchitect,

Could you please check if the "Restrict which accounts can be used to sign in to Microsoft Edge" value matches your target account?

Also, make sure you are AAD-joined/hybrid-joined, i.e., signed into your Microsoft Entra account in Windows.
EnterpriseArchitect 6,041 Reputation points

2024-10-11T03:38:24.8033333+00:00
Hi @Anonymous ,
Yes, the RegEx has been tested to only accept the UPN of my users.

The above screenshot auto-login profile issue was taken from the Windows Server OS.

AAD-joined/hybrid-joined status:

Windows Server OS Computer AD Account: No, only OnPremise AD Joined.

Workstation OS Computer AD Account: Yes, Hybrid Azure AD joined and AD DS joined.
Anonymous

2024-10-11T05:28:56.95+00:00

Hi @EnterpriseArchitect,

Does this issue occur on Workstation computers? For Windows Server computers, is it that you want to automatically sign into OnPrem accounts?
EnterpriseArchitect 6,041 Reputation points

2024-10-11T05:59:21.8233333+00:00

@Anonymous ,

Does this issue occur on Workstation computers?

Yes, occurs on the Workstation OS as well.

For Windows Server computers, is it that you want to automatically sign into OnPrem accounts?

Yes, automatically sign in since the account is also hybrid synched to Azure AD / Entra ID from the OnPremise AD DS.
Anonymous

2024-10-18T09:01:57.5233333+00:00

Hi @EnterpriseArchitect,

May I know if the issue has been resolved?

1 answer

Your answer

Anonymous

2024-10-11T03:30:39.7766667+00:00

Hi @EnterpriseArchitect,

Could you please check if the "Restrict which accounts can be used to sign in to Microsoft Edge" value matches your target account?

Also, make sure you are AAD-joined/hybrid-joined, i.e., signed into your Microsoft Entra account in Windows.
EnterpriseArchitect 6,041 Reputation points

2024-10-11T03:38:24.8033333+00:00

Hi @Anonymous ,
Yes, the RegEx has been tested to only accept the UPN of my users.

The above screenshot auto-login profile issue was taken from the Windows Server OS.

AAD-joined/hybrid-joined status:

Windows Server OS Computer AD Account: No, only OnPremise AD Joined.

Workstation OS Computer AD Account: Yes, Hybrid Azure AD joined and AD DS joined.
Anonymous

2024-10-11T05:28:56.95+00:00

Hi @EnterpriseArchitect,

Does this issue occur on Workstation computers? For Windows Server computers, is it that you want to automatically sign into OnPrem accounts?
EnterpriseArchitect 6,041 Reputation points

2024-10-11T05:59:21.8233333+00:00

@Anonymous ,

Does this issue occur on Workstation computers?

Yes, occurs on the Workstation OS as well.

For Windows Server computers, is it that you want to automatically sign into OnPrem accounts?

Yes, automatically sign in since the account is also hybrid synched to Azure AD / Entra ID from the OnPremise AD DS.
Anonymous

2024-10-18T09:01:57.5233333+00:00

Hi @EnterpriseArchitect,

May I know if the issue has been resolved?

Answer 1

Anonymous

Hi @EnterpriseArchitect,

For Windows Server computers, please also enable ConfigureOnPremisesAccountAutoSignIn policy and set it to 'SignInAndMakeDomainAccountNonRemovable' since you are using OnPrem accounts. Microsoft Edge will automatically sign in users that are on domain joined machines using their Active Directory accounts in this way.

For Workstation computers, normally the user gets automatically signed in with their Microsoft Entra account if they are AAD-joined/hybrid-joined. You may consider enabling NonRemovableProfileEnabled as well.

EDIT:

For Windows Server computers,

If you need to use Edge as a published application, the only option is to continue using OneAuth as usual (no specific configuration is required) and instruct the impacted users that they need to complete sign in when launching Edge.
If you are able to use Edge with a full desktop application, then enabling WAM support in Edge for Windows Server 2016 (if you are using it) is the best way to go. This is enabled by the policy WAMAuthBelowWin10RS3Enabled.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Best Regards,

Shijie Li

EnterpriseArchitect 6,041 Reputation points

2024-10-14T01:01:36.2333333+00:00

Thank you @Anonymous ,
Can I configure and combine a single GPO for both Server OS and Workstation OS with the two settings you've suggested?
Anonymous

2024-10-14T01:49:50.17+00:00

Hi @EnterpriseArchitect,

Yes, you can. It should work as expected.
EnterpriseArchitect 6,041 Reputation points

2024-10-14T04:34:28.6066667+00:00

@Anonymous ,
After multiple reboot, my Windows Server user is still stuck in this:

Is that expected for the Windows Server Edge users ?
Because the WIndows Server is only AD DS domain joined, not even hybrid, thus Azure AD /Entra ID do not have the computer object.
Anonymous

2024-10-14T06:13:04.7866667+00:00

Hi @EnterpriseArchitect,

May I ask for the Windows Server version? This problem rings a bell but I would like to check the OS version first. Also, is Microsoft Edge used as a published application or full desktop app?
Anonymous

2024-10-15T02:04:10.37+00:00

Hi @EnterpriseArchitect,

I have edited my answer. Please have a check.
EnterpriseArchitect 6,041 Reputation points

2024-10-24T00:18:48.8633333+00:00

Hi @Anonymous ,
The Edge Browser is still asking for the manual login for the server instance, and this is the error where I am stuck:
EnterpriseArchitect 6,041 Reputation points

2024-10-24T01:46:40.7866667+00:00

This is the configured policy after I signed in manually and disabling the Internet Explorer Enhanced Security Configuration (ESC) from Server Manager.
Anonymous

2024-10-24T02:26:58.94+00:00

Hi @EnterpriseArchitect,

Could you please show me the OS for the non-working machines? Do they use published applications from 3rd party vendors, like Citrix?
EnterpriseArchitect 6,041 Reputation points

2024-10-24T03:08:35.49+00:00

Hi @Anonymous ,
No it is all manually installed Edge browser (Server 2016-2019) or the builtin Edge browser for Server 2022.
Anonymous

2024-10-24T05:34:09.8533333+00:00

Hi @EnterpriseArchitect,

So after you disabled the Internet Explorer Enhanced Security Configuration (ESC), the error does not show up, but the auto-login still fails, right? If so, I'm afraid you may consider creating a support ticket (Support for business) for more information, as it may involve further log analysis.
EnterpriseArchitect 6,041 Reputation points

2024-10-24T05:38:20.1+00:00

Yeah, after manually disabling the ESC from the Server Manager, I am still forced to manually log in on the Edge Browser in all of the Windows Server.

@Anonymous ,
Cna you see if anything that I may have missed in the screenshot above?
EnterpriseArchitect 6,041 Reputation points

2024-10-24T05:41:32.33+00:00

I was redirected to this forum by the support team:
Anonymous

2024-10-24T06:14:09.5233333+00:00

Hi @EnterpriseArchitect,

No problem as I can see. The only thing I may have concern of is the RestrictSigninToPattern policy value. Did you just blur the value or simply no value there? By "I was redirected to this forum by the support team", do you mean that you have created the support ticket but they simply sent you to the forum? Any useful information from them?
Anonymous

2024-10-24T06:15:04.8266667+00:00

From the latest screenshot, it seems that you need to add a support plan.
EnterpriseArchitect 6,041 Reputation points

2024-10-25T00:20:07.9566667+00:00

@Anonymous ,
Yes, that is why I ask in this forum as I do not have the support plan.

The value for the https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#restrictsignintopattern entry is hidden/redacted only to my valid UPNs.
Anonymous

2024-10-25T07:04:45.3733333+00:00

Hi @EnterpriseArchitect,

Shall we have a check if OneAuthAuthenticationEnforced is unconfigured? This problem is usually related to OneAuth.

Share via

Configuring the Microsoft Edge browser for the Profile autologin with current user login name?

1 answer

Your answer