Description: Enable the use of Active Directory accounts for automatic sign in if your users' machines are Domain Joined and your environment is not hybrid joined. If you want users automatically signed in with their Azure Active Directory accounts instead, please Azure AD join. If you have configured the 'BrowserSignin' (Browser sign-in settings) policy to disabled, this policy will not take any effect. If you enable this policy and set it to "Sign in and make domain account non-removable", Microsoft Edge will automatically sign in users that are on domain joined machines using their Active Directory accounts. If you set this policy to "Disabled" or don't set it, Microsoft Edge will not automatically sign in users that are on domain joined machines with Active Directory accounts. * 0 = Disabled * 1 = Sign in and make domain account non-removable.

Why It's Important: This setting makes it easier and more secure for users in traditional enterprise environments to access Microsoft Edge. It automatically signs them in using their work account, so they don’t have to enter credentials manually. SHIELD uses this policy to streamline access and reduce friction for users, while also ensuring that their work profile stays connected and protected. It’s like having your office badge automatically unlock your computer—secure, fast, and hassle-free.

Learn More

Description: [coming soon]

Why It's Important: [coming soon]

Learn More

Description: Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off. If you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off. For this policy to work as intended, 'BrowserSignin' (Browser sign-in settings) policy must not be configured, or must be set to enabled. If 'ForceSync' (Force synchronization of browser data and do not show the sync consent prompt) is set to disabled, then 'BrowserSignin' will not take affect. 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) must not be configured or must be set to False. If this is set to True, 'ForceSync' will not take affect. 0 = Do not automatically start sync and show the sync consent (default) 1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt.

Why It's Important: This setting makes sure users’ browser data—like bookmarks, passwords, and settings—is automatically backed up and synced across devices without asking them to approve it. SHIELD enables this policy to simplify the user experience and ensure important data is always available and protected. It’s like having your workspace follow you wherever you go—ready and secure, without needing to set it up each time.

Learn More

Description: Specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including: additions, deletions, modifications, and ordering.

Why It's Important: This policy is like keeping two sets of bookmarks in sync so users don’t lose their place when switching between browsers. By enabling this setting, SHIELD ensures a consistent user experience across legacy and modern browsers, especially in environments where both Internet Explorer and Edge are still in use. It helps reduce user friction, supports smoother transitions to modern platforms, and simplifies browser management for IT teams.

Learn More

Description: Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off. If you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off. For this policy to work as intended, 'BrowserSignin' (Browser sign-in settings) policy must not be configured, or must be set to enabled. If 'ForceSync' (Force synchronization of browser data and do not show the sync consent prompt) is set to disabled, then 'BrowserSignin' will not take affect. 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) must not be configured or must be set to False. If this is set to True, 'ForceSync' will not take affect. 0 = Do not automatically start sync and show the sync consent (default) 1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt.

Why It's Important: This policy forces synchronization of Microsoft Edge data, such as bookmarks and settings, without prompting for user consent. It ensures consistent configuration and seamless access to organizational data across devices while keeping sync under enterprise control.

Learn More

Description: This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user's work or school account. If you enable this policy, a non-removable profile will be created with the user's work or school account on Windows. This profile can't be signed out or removed. If you disable or don't configure this policy, the profile automatically signed in with a user's work or school account on Windows can be signed out or removed by the user. If you want to configure browser sign in, use the 'BrowserSignin' (Browser sign-in settings) policy.

Why It's Important: [coming soon]

Learn More

Description: Allows users to create new profiles, using the Add profile option. If you enable this policy or don't configure it, Microsoft Edge allows users to use Add profile on the Identity flyout menu or the Settings page to create new profiles. If you disable this policy, users cannot add new profiles from the Identity flyout menu or the Settings page.

Why It's Important: This policy disables the ability for users to create new, unmanaged profiles in Microsoft Edge. It ensures that only approved, organization-controlled profiles are used, preventing users from bypassing enterprise controls or syncing data with personal accounts.

Learn More