How to Completely Disable ‘Sync’ (Account Synchronization) via Group Policy in Microsoft Edge

Account Synchronization (Sync) is a core feature of Microsoft Edge that allows users to seamlessly roam their browsing data—including favorites, passwords, history, open tabs, and extensions—across multiple devices by logging in with a Microsoft Account (MSA) or an Entra ID (formerly Azure AD) account. While this provides a cohesive experience for personal users, it presents a significant data loss prevention (DLP) risk in enterprise environments. If a user logs into Edge with their personal Microsoft Account on a corporate workstation, sensitive internal intranet URLs, bookmarks, and potentially corporate passwords could be synchronized to their personal, unmanaged devices at home. To maintain strict data boundaries, administrators must assert control over browser synchronization capabilities.

This guide explains how to completely disable the Sync feature system-wide in Microsoft Edge using Group Policy, ensuring that browsing data remains strictly localized to the corporate workstation.

Disable Sync via Group Policy

To enforce a strict block that severs the browser’s connection to the Microsoft Sync backend and removes the user’s ability to toggle it back on, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, strictly follow this exact path:

   Computer Configuration > Administrative Templates > Microsoft Edge

5. In the right-hand pane, locate the policy named Disable synchronization of data using Microsoft sync services.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Enabled. (Note: You must enable this policy to enforce the “disable” restriction).
8. Click Apply, then click OK.

Verify the Configuration Lockdown

Group Policy changes require the browser to read the registry upon its next launch. Close all active instances of Microsoft Edge.

To verify the restriction is active, reopen Microsoft Edge and navigate to edge://settings/profiles/sync. The entire synchronization dashboard will be disabled. A prominent message will state, “Sync is disabled by your administrator.” The user will be entirely unable to toggle synchronization for passwords, favorites, or history, guaranteeing that all corporate browsing artifacts remain securely sandboxed on the local machine.