How to Completely Disable ‘Browser Sign-in’ via Group Policy in Microsoft Edge

Browser Sign-in is a foundational feature in Microsoft Edge that allows users to link their web browser to a Microsoft Account (MSA) or a Microsoft Entra ID (formerly Azure AD) work or school account. When signed in, Edge automatically syncs the user’s browsing history, passwords, bookmarks, and extensions to Microsoft’s cloud servers. While highly convenient for users moving between multiple personal devices, allowing arbitrary account sign-ins on corporate workstations can lead to severe data leakage. Employees might accidentally sync sensitive intranet URLs, corporate passwords, or proprietary web extensions to their unmanaged personal Microsoft accounts.

This guide explains how to completely disable Browser Sign-in system-wide in Microsoft Edge using Group Policy, ensuring the browser remains entirely unlinked from any cloud identity.

Disable Browser Sign-in via Group Policy

To enforce a strict block that prevents users from signing into Edge and locks the configuration profile to a purely local state, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, strictly follow this exact path:

   Computer Configuration > Administrative Templates > Microsoft Edge

5. In the right-hand pane, locate the policy named Browser sign-in settings.
6. Double-click the policy to open its configuration window.
7. Select the radio button next to Enabled.
8. In the “Options” pane in the lower-left, click the dropdown menu and select Disable browser sign-in.
9. Click Apply, then click OK.

Verify the Configuration Lockdown

Group Policy changes require the browser to read the registry upon its next launch. Close all active instances of Microsoft Edge.

To verify the restriction is active, open Microsoft Edge and navigate to the browser settings (edge://settings/profiles). The button that typically reads “Sign in to sync data” will be completely greyed out or removed entirely. Furthermore, a briefcase icon accompanied by a message stating “Managed by your organization” will be prominently displayed at the top of the profile page. The browser is now permanently locked into a local-only configuration, mitigating the risk of cloud-based data exfiltration via Edge Sync.