Forum Discussion

techieg4's avatar
techieg4
Brass Contributor
Feb 23, 2023

Unable to Disable the "Add Profile" Feature in Edge on Windows 365

Hello,

 

In our cloud-only environment (solely AAD), we've set the following in Intune to "Disabled":

Setting: Enable profile creation from the Identity flyout menu or the Settings page.

Description: Allows users to create new profiles, using the "Add profile" option. If you enable this policy or don't configure it, Microsoft Edge allows users to use **Add profile** on the Identity flyout menu or the Settings page to create new profiles. If you disable this policy, users cannot add new profiles from the Identity flyout menu or the Settings page.

 

...but it doesn't take effect to add BrowserAddProfileEnabled DWORD with a value of "0" to Windows 365 cloud PCs to disable the ability for users to add (unapproved) profiles to Edge, which is a critical issue of insider threat for data exfiltration using non-work profiles on work cloud PCs. A scalable Intune solution is needed asap.

 

Thanks,

 

Jimmy

Resources