Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Configure whether a user always has a default profile automatically signed in with their work or school account
Supported versions
- Windows: ≥ 78
- macOS: Not supported
- Android: Not supported
- iOS: Not supported
Description
This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user's work or school account.
If you enable this policy, a nonremovable profile is created with the user's work or school account on Windows. This profile can't be signed out or removed. The profile is nonremovable only if profile is signed-in with either on-premises account or Azure AD account that matches OS sign-in account.
If you disable or don't configure this policy, the profile automatically signs in with a user's work or school account on Windows can be signed out or removed by the user.
If you want to configure browser sign in, use the BrowserSignin policy.
This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro, or Enterprise instances that enrolled for device management.
From Microsoft Edge version 89 onward, if there is an existing on-premises profile with sync disabled and machine is hybrid joined, it will auto-upgrade the on-premises profile to Azure AD profile and make it non-removable instead of creating a new non-removable Azure AD profile.
From Microsoft Edge version 93 onward, if policy ImplicitSignInEnabled is disabled, this policy doesn't take any effect.
Supported features
- Can be mandatory: Yes
- Can be recommended: No
- Dynamic Policy Refresh: Yes
- Per Profile: No
- Applies to a profile that is signed in with a Microsoft account: Yes
Data type
- Boolean
Windows information and settings
Group Policy (ADMX) info
- GP unique name: NonRemovableProfileEnabled
- GP name: Configure whether a user always has a default profile automatically signed in with their work or school account
- GP path (Mandatory): Administrative Templates/Microsoft Edge
- GP path (Recommended): N/A
- GP ADMX file name: MSEdge.admx
Example value
Enabled
Registry settings
- Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended): N/A
- Value name: NonRemovableProfileEnabled
- Value type: REG_DWORD
Example registry value
0x00000001