CloudManagementEnrollmentToken

The enrollment token of cloud policy

Supported versions

  • Windows: ≥ 157
  • macOS: Not supported
  • Android: Not supported
  • iOS: Not supported

Description

This policy lets you specify the enrollment token that Microsoft Edge uses to register with the Microsoft Edge management service and download the policies associated with that enrollment.

Microsoft Edge management service in the Microsoft 365 admin center provides a cloud-based management experience for configuring and deploying Microsoft Edge policies to managed users and devices.

If you enable this policy, Microsoft Edge attempts to use the specified enrollment token to register with the Microsoft Edge management service and download the published policies. The registration is performed for the device, so the downloaded policies apply to the browser without requiring a user to sign in.

If you disable or don't configure this policy, Microsoft Edge doesn't register with the Microsoft Edge management service. This prevents new registrations only. Browsers that already registered stay enrolled and continue to download policies, because the credential issued during registration takes precedence over the enrollment token.

To stop managing a browser that's already enrolled, remove or reset its device record in the Microsoft Edge management service. If the device record is removed, the browser stops downloading policies and doesn't register again on its own. If the device record is reset, the browser registers again the next time it starts, as long as this policy is still set to a valid enrollment token.

Changes to this policy take effect only after Microsoft Edge is restarted.

This policy can only be set as a platform policy.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • String

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: CloudManagementEnrollmentToken
  • GP name: The enrollment token of cloud policy
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

AQIDBAUGBwgJCgsMDQ4PEBESExQVFhcYGRobHB0eHyAh

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: CloudManagementEnrollmentToken
  • Value type: REG_SZ

Example registry value

AQIDBAUGBwgJCgsMDQ4PEBESExQVFhcYGRobHB0eHyAh

See also