Enterprise Browser (Chrome/Edge) Profile Controls
Source Reddit Cybersecurity
Discussion
This report discusses the availability and limitations of the Enterprise Browser profile sign-in controls for Microsoft Edge and Google Chrome. Specifically, Microsoft Edge's policy to restrict sign-in to allowed accounts (EdgeAllowedAccountOnly) is currently supported only on iOS and Android platforms, but not on Windows or macOS workstations. Google Chrome offers a similar control via Google Admin in Chrome Enterprise Core. The lack of this control on Windows workstations means users can sign in with personal profiles, potentially bypassing enterprise extension/plugin controls.
r/cybersecurity (opens in a new tab)u/Fine-Rip-96190 points0 comments
Working for a mid size enterprise windows shop. We’ve been able to wrap our hands around browser extension/plugin controls, but noticed that if users log in to personal Chrome or Edge profiles, these plugins often install automatically.
Microsoft documentation has a configuration for this, but only available on iOS and Android, not Windows OS workstations. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/edgeallowedaccountonly
Google’s documentation indicates this configuration is only available through Google Admin in Chrome Enterprise Core. https://support.google.com/chrome/a/answer/7572556?hl=en
Have folks come across this before? How have you handled this? Awareness and policy help, monitoring/alerting is possible, but a control would be most helpful.
Surprised this is not addressed in a broader scale.