Guest Mode in Microsoft Edge allows users to open a completely isolated browsing session that does not have access to the primary profile’s history, cookies, or saved passwords. Once the guest window is closed, all browsing data from that session is instantly deleted. While this is incredibly useful for allowing a friend to quickly check their email on your personal laptop, it is a significant security liability in a corporate environment. Employees can use Guest Mode to bypass local browsing history audits, circumvent profile-specific restrictions, or anonymously interact with external services without leaving a local trace.
This guide explains how to completely disable Guest Mode system-wide in Microsoft Edge using Group Policy, forcing all web traffic to occur within an audited, managed user profile.
Disable Guest Mode via Group Policy
To enforce a strict block that removes the “Browse as guest” option from the profile menu and prevents the browser from launching into guest mode via command-line arguments, we must deploy an administrative template. Note that this requires Windows 11 Pro, Enterprise, or Education editions.
- Log into Windows 11 with an Administrator account.
- Press the Windows Key + R to open the Run dialogue box.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - In the left-hand navigation pane, navigate precisely to this path:
Computer Configuration > Administrative Templates > Microsoft Edge - In the right-hand pane, locate the policy named Enable guest mode.
- Double-click the policy to open its configuration window.
- Select the radio button next to Disabled.
- Click Apply, then click OK.
Verify the Security Lockdown
Group Policy changes require the browser to read the registry upon its next launch. Close all active instances of Microsoft Edge.
To verify the restriction is active, reopen Microsoft Edge and click on your profile picture in the top right corner of the toolbar. The “Browse as guest” button, which normally appears below the list of available profiles, will be completely missing. Furthermore, if a user attempts to launch the browser from a shortcut containing the --guest command-line flag, the browser will ignore the flag and launch into the default, auditable user profile. You have successfully eliminated anonymous, stateless browsing on the endpoint.