Forum Discussion
Unable to Disable the "Add Profile" Feature in Edge on Windows 365
Hello, In our cloud-only environment (solely AAD), we've set the following in Intune to "Disabled": Setting: Enable profile creation from the Identity flyout menu or the Settings page. Descript...
Hi,
Think you have to combine with the setting to enforce work-profile logon in Edge... so there is at least one profile...
The you can further restrict what to sync to this profile...
Don't know what other settings you are using, which might conflict... like maybe Enterprise State roaming...
Think you should be using the following, in addition to "BrowserAddProfileEnabled"...
But has been long time since I configured this myself and played around with this...
Windows information and settings
Group Policy (ADMX) info
- GP unique name: EdgeDefaultProfileEnabled
- GP name: Default Profile Setting Enabled
- GP path (Mandatory): Administrative Templates/Microsoft Edge/Identity and sign-in
- GP path (Recommended): N/A
- GP ADMX file name: MSEdge.admx
Windows Registry Settings
- Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
- Path (Recommended): N/A
- Value Name: EdgeDefaultProfileEnabled
- Value Type: REG_SZ
- Hello Mathias,
Thanks for the response but I'm unsure how these apply because as I pointed out, this is a cloud-only environment, so no Group Policy ADMX anywhere, only AAD.- Intune can use ADMX files,
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-import-custom
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows
or if you use the Intune "native" configuration profiles, the Intune management extensions sets reg keys as well...
You don't need Group Policy ADMX files perse...
https://learn.microsoft.com/en-us/windows/client-management/understanding-admx-backed-policies
