Is it possible to disable search location in file explorer voa intune

ABill1 This should do all folders in c:\users:

foreach ($folder in Get-ChildItem -Path c:\users -Directory) {
	$folderPath = "C:\Users\$($folder.Name)\appdata\Local\Microsoft\Edge\User Data\Default\Extensions\dlcaglefdlidioooijnigjhfcndlncfp"

	# Define the account for which you want to deny permissions
	$account = "AzureAD\A SPECIFIC USERNAME"

	# Get the current ACL
	$acl = Get-Acl -Path $folderPath

	# Create a rule to deny deletion and deletion of subfolders
	$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($account, "Delete, DeleteSubdirectoriesAndFiles", "Deny")

	# Add the rule to the ACL
	$acl.AddAccessRule($rule)

	# Apply the modified ACL to the folder
	Set-Acl -Path $folderPath -AclObject $acl
}

(No checks if the folder exists and not tested)

But... Like I asked before, a few comments back... Why do you NEED the plugin for secure internet access, and why can people browse the internet without it?! Could they use another browser, too? You have to setup your firewall so the content blocking is done there... That would be better.

Hi Harm_Veenstra 

So it failed! Any ideas why. 

I found the SID

<groupmembership>
<accessgroup desc = "Users">
<member name = "Liam C" />
<member name = "I entered my sid here" />
</accessgroup>
</groupmembership>

Users Is the local group

Liam C is the azure ad security group 

I have added the users I need this to affect into the liam c security group 

I then set this policy to deploy to the device where the user who is in the liam c group logs on too.

Is this correct? How do I identify why this isnt working

Replace $account = "AzureAD\Username" with the SID of the group. Here's a blog that explains you how to get it: https://www.inthecloud247.com/add-an-azure-ad-group-to-the-local-administrators-group-with-microsoft-intune/. So, that would be $account = "AzureAD\S-1-12-1-2934938113-1096209395-2588194479-17890638" for example.