Microsoft Edge includes a feature called “Drop” (often branded as Edge Drop), which functions as a cross-platform file and note-sharing utility built directly into the browser’s sidebar. It utilizes the user’s OneDrive account to sync text snippets, images, and documents between any device signed into the same Microsoft account. While convenient for personal use, this feature acts as an unsanctioned, unmonitored data exfiltration channel in enterprise or strictly regulated environments. It allows users to easily drag and drop sensitive corporate data into the browser and instantly sync it to personal or external devices, bypassing traditional Data Loss Prevention (DLP) gateways.
This guide explains how to completely disable the Drop feature via Group Policy in Microsoft Edge, ensuring that this file-sharing sidebar cannot be accessed or utilized for data exfiltration.
Disable Edge Drop via Group Policy
To enforce a strict block that removes the Drop icon from the sidebar, prevents it from being added back, and disables the underlying synchronization service, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions, and utilizes the Edge ADMX templates.
- Log into Windows 11 with an Administrator account.
- Press the Windows Key + R to open the Run dialogue box.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - In the left-hand navigation pane, strictly follow this exact path:
Computer Configuration > Administrative Templates > Microsoft Edge - In the right-hand pane, locate the policy named Enable Drop feature in Microsoft Edge (or simply Enable Drop, depending on your ADMX version).
- Double-click the policy to open its configuration window.
- Select the radio button next to Disabled.
- Click Apply, then click OK.
Verify the Configuration Lockdown
Group Policy changes require the browser to read the registry upon its next launch. Close all active instances of Microsoft Edge.
To verify the restriction is active, open Microsoft Edge and look at the right-hand sidebar. The paper airplane icon representing the Drop feature will be entirely absent. If you click the “+” icon to customize the sidebar, the option to add “Drop” back to the UI will no longer exist. Furthermore, if you navigate to the browser settings (edge://settings/appearance), the toggle to show the Drop button will be disabled, greyed out, and flagged with a briefcase icon indicating it is “Managed by your organization.” The data exfiltration vector is completely severed.