Block Personal Account Office.com from Edg Browser

Question

Is there a way to prevent users signing with their Personal account in www.office.com on a corporate device using Edge browser on a managed device (Hybrid Azure AD Joined) ?

Answer 1

Hi @VinodProsk ,

I investigated but unfortunately, from Edge side, there's no such setting or group policy which can prevent users signing with personal accounts in office site.

If you want to get other suggestions from other sides, you can also ask the question on Microsoft 365 and Office forum.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Regards,

Yu Zhou

Answer 2

Yes, you can prevent users from signing in with their personal account in www.office.com by configuring Conditional Access in Azure Active Directory. Here are the steps to do it: Go to the Azure Portal and navigate to Azure Active Directory. Click on "Conditional Access" under the "Security" tab. Click on "New policy" to create a new Conditional Access policy. Enter a name and description for the policy. Under the "Users and groups" section, select the users or groups that you want to apply this policy to. Under the "Cloud apps" section, select "Office 365". Under the "Conditions" section, click on "Client apps". In the "Client apps" window, select "Browser" and then select "Microsoft Edge". Under the "Access controls" section, select "Grant" and then select "Block access". In the "Block access" window, select "Sign-in" as the session control and "All trusted IPs" as the location. Click on "Select users and groups" and then select "All users" to apply this policy to all users. Click on "Create" to create the policy. This policy will block users from signing in with their personal account in www.office.com on a corporate device using Edge browser on a managed device (Hybrid Azure AD Joined). Users will still be able to sign in with their work or school account.