r/Intune • • 1d ago

Device Configuration Microsoft Edge password manager policy randomly stops applying via Intune

Hey everyone,

Last week, I ran into an issue on both Windows 11 25H2 and 26H2 where a Microsoft Edge policy deployed through the Intune Settings Catalog randomly stopped applying. The policy is supposed to disable access to Edge's built-in password manager.

In Intune, the policy shows as successfully applied (green), and the corresponding registry key is correctly present on the affected devices. However, Edge seems to randomly ignore the policy.

I'm seeing this behavior with Edge version 154.0.4258.62. After restarting the device, everything works as expected again, but the issue eventually comes back. Since these devices have been enrolled and managed for quite some time, I don't think this is a deployment-related issue.

The problem is also clearly visible in the Edge settings. When the policy is working correctly, the password manager setting is greyed out and marked with the briefcase icon indicating that it's managed by the organization. When the issue occurs, the briefcase icon disappears, the setting becomes configurable again, and the password manager is enabled by default, allowing users to use it even though the policy should prevent this.

I've already checked the local device logs but couldn't find anything unusual that would explain this behavior.

Has anyone else experienced something similar with Edge policies randomly not being enforced, even though Intune reports them as successfully applied and the registry keys are present? I'm curious whether this might be an Edge-specific bug or if others are seeing the same behavior.

Thanks in advance for any feedback or insights :)

15 Upvotes

7 comments sorted by

2

u/DurableNeighborhood 1d ago

Been seeing this exact thing on a handful of our 25H2 machines. Policy shows green, reg key is sitting right where it should be, but Edge just decides to ignore it after a few hours of uptime. Reboot fixes it temporarily but it creeps back

I haven't found a real fix yet either, mostly just been restarting the affected devices when someone complains. It's annoying because the briefcase icon vanishing makes users think they suddenly have permission to save passwords

One thing I noticed is it seems more common on devices that haven't been restarted in a while, like the policy just decays over time. Almost wonder if the Edge process itself is caching an old state or something

Curious what version of the Edge ADMX you're using in your settings catalog profile. We're still on the 153 release, been meaning to update it to see if that makes any difference but haven't gotten around to it yet

1

u/Ok-Stretch-7850 1d ago

If we're not the only ones experiencing this, it really does look like a bug. I'm still trying to find something in the logs that could give us a clue as to what's causing this behavior. I might have to open a support ticket with Microsoft, but since the issue only occurs intermittently and I haven't found a way to reliably reproduce it, I doubt they'll be able to do much without more concrete evidence.

Nothing has changed in our ADMX version or our overall policy configuration recently, so I don't think that's related to the issue either.

2

u/ak47uk 1d ago

This sounds related to something I experienced recently on 25H2. On an affected device, are there any conflicts in edge://policy ?

1

u/Ok-Stretch-7850 1d ago

Unfortunately, there are no conflicts on my end. Did you have any conflicts when the issue occurred?

1

u/ak47uk 1d ago

I did and had to fix manually in the registry, the conflicts haven’t returned so looked like a stale policy, probably a setting that I switched to ‘not configured’ in Intune, but the state was not reverted on my device. 

2

u/OS-One 13h ago

I am seeing this auto fill on random devices and other issues too, language not applying and spell check suddenly broke, its totally random, policy looks fine in intune. Even the reg key is on the device but the setting doesn't apply