Delete saved passwords in edge using group policy

Question

I have a GPO to disable password saving. I need a way to Delete all saved passwords in Edge for all the computers on my domain.

Answer 1

I built the answer using a batch file. You can then attach this to Group Policy.

taskkill /f /im msedge.exe

timeout /t 10 /nobreak

for /f "delims=|" %%f in ('dir /B /A:D-H-R c:\users') do (rmdir "C:\Users\%%f\AppData\Local\Microsoft\Edge\User Data\Default\Login Data" /s/q || del "C:\Users\%%f\AppData\Local\Microsoft\Edge\User Data\Default\Login Data" /s/q)
if not errorlevel 1 (
echo "Finished with errors"
) else (
echo "Finished without errors"
)
)

Here's a good guide to attach the Batch file.

https://learn.microsoft.com/en-us/answers/questions/15333/distribute-a-bat-by-group-policy-management.html

Answer 2

Hi @Scott Baker

Have a look at deploying a VaultCMD script as seen on https://serverfault.com/questions/770996/where-does-credential-manager-store-credentials-on-the-file-system

As far as I know there is no GPO to delete passwords, only the one to disable saving passwords going forward.

---------------------------------------------

If this is helpful please accept answer.

Answer 3

Yes, I've seen this example before. It doesn't work.

Thanks for trying.

If anybody figures this out please let me know.

Answer 4

Hi @Scott Baker

I totally understand that you want to delete the saved password in Edge but unfortunately there's no such policy now. I suggest that you can provide feedback about this feature to Edge team by pressing Alt+Shift+I in Edge. They'll check the feedbacks and improve the product continuously. Thanks for your understading.

Besides, I made research and found that Edge store the passwords edge://settings/passwords in C:\Users\<username>\AppData\Local\Microsoft\Edge\User Data\<Profile>\Login Data. As a workaround, you can delete Login Data file to delete the saved passwords. For the <Profile> name you could navigate to edge://version and check your profile name, like this:

Please note that you need to disable sync to make sure the deletion work as the passwords are stored in cloud, if you don't disable sync, it will pull again from the cloud. Group policy for disabling sync if you need.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Regards,
Yu Zhou