edge active directory auto-sign in

Question

edge active directory auto-sign in

John Curtiss 66

edge 94; i have two win10 1909 computers both getting the same GPOs. specifically, computer/admin templates/microsoft edge/configure automatic sign in with active directory domain account when there is no azure AD account/ is set to "sign in and make domain account non-removable," and "browser sign in settings" is set to enable browser sign in. they are domain-joined machines, the local AD is azure-free.

when userx signs into machine1, edge signs him in with his local domain\userx account.
when userx signs into machine2, edge does not sign him in with his local domain\userx account.

both machines have previously had secondary azure "work or school" accounts added to them, and machine1 still has a secondary edge profile for that azure account, and i can switch back and forth. the azure account has been removed completely from machine2, but the AD auto-login is still not happening after a reboot. is this the expected behavior just because it had an azure account on it once? do i have to blow away the whole OS user profile to get the AD auto-login back?

Anonymous

2021-10-06T07:46:52.807+00:00

Hi @JohnpCurtiss

Is machine2 hybrid joined? From the doc, it says Enable the use of Active Directory accounts for automatic sign in if your users' machines are Domain Joined and your environment is not hybrid joined.

So please make sure machine2 is not hybrid joined. Please also make sure ImplicitSignInEnabled is not disabled as From Microsoft Edge 93 onwards, if policy ImplicitSignInEnabled is disabled, this policy will not take any effect. Besides, please check if all the policies are applied successfully in machine2.

The doc also says On every launch, Microsoft Edge will try to sign-in using this policy, as long as the first profile being launched isn't signed-in or an auto sign-in hasn't happened before. So I think if machine2 had an azure account and used it to auto sign-in before, it may cause issue when applying this policy.

1 answer

Your answer

Anonymous

2021-10-06T07:46:52.807+00:00

Hi @JohnpCurtiss

Is machine2 hybrid joined? From the doc, it says Enable the use of Active Directory accounts for automatic sign in if your users' machines are Domain Joined and your environment is not hybrid joined.

So please make sure machine2 is not hybrid joined. Please also make sure ImplicitSignInEnabled is not disabled as From Microsoft Edge 93 onwards, if policy ImplicitSignInEnabled is disabled, this policy will not take any effect. Besides, please check if all the policies are applied successfully in machine2.

The doc also says On every launch, Microsoft Edge will try to sign-in using this policy, as long as the first profile being launched isn't signed-in or an auto sign-in hasn't happened before. So I think if machine2 had an azure account and used it to auto sign-in before, it may cause issue when applying this policy.

Answer 1

John Curtiss 66

"Please also make sure ImplicitSignInEnabled is not disabled" i did not have this setting available, because i had version 84 of the edge ADMX. but i just got version 94 of the admx, applied this policy setting as 'enabled,' and gpupdated/rebooted machine2, and the behavior persists.

"an auto sign-in hasn't happened before" - this may be the case, or at least i manually logged in to edge with the azure AD account. but right now, if i go into the settings app on machine2, and go to 'access work or school,' only my local AD is in there. under 'email & accounts," only my local AD is there. if i go into edge, there is one profile, and it is not connected to any account.

so how can i reset edge on machine2 so that it obeys the group policy telling it to log in with the local AD credentials? yes, the policy is being applied, per rsop and per the registry on machine2.

Anonymous

2021-10-07T08:58:30.34+00:00
Hi @JohnpCurtiss

You can try to reset Edge following the steps below:

Open Edge and open the about://version page.

Find the Profile path location like this: C:\Users\username\AppData\Local\Microsoft\Edge\User Data\Default.

Open the profile path location in File Explorer.

Close all instances of Edge and delete the profile folder.

After the steps above, the next time you open Edge you'll see the first start screen which means Edge is reset.

If it still can't solve the issue, I suggest that you compare the environment between machine1 and machine2 after all it works on machine1. If there's any differences between the two machines, they might be the cause of the issue.

Share via

edge active directory auto-sign in

1 answer

Your answer