Configure Microsoft Edge enterprise sync (original) (raw)
This article explains how admins can configure Microsoft Edge to sync user favorites, passwords, and other browser data across all signed-in devices.
Note
Applies to Microsoft Edge on Chromium, version 77 or later unless otherwise noted.
Introduction
Microsoft Edge sync enables users to access their browsing data across all their signed-in devices. Users can sync the following data:
- Favorites
- Passwords
- Addresses and more (form-fill)
- Collections
- Settings
- Extensions
- Open tabs (available in Microsoft Edge version 88 or later)
- History (available in Microsoft Edge version 88 or later)
- Feature usage data (available in Microsoft Edge version 133 or later)
Note
Additional device connectivity and configuration data (such as device name, device make, and device model) are uploaded to support sync functionality.
Sync functionality and user sync configuration
After sync is configured, sync functionality is enabled via user consent. Users can turn sync on or off for each of the supported data types. For more information, see Sign in to sync Microsoft Edge across devices.
Note
If a user is experiencing a sync issue, they might need to resync in Settings > Profiles > Sync > Reset sync. If sync problems persist after a resync, select "Still having sync problems? Try another option" to see more steps and then select "Reset sync". See Reset Microsoft Edge data in the cloud | Microsoft Learn for more details.
Prerequisites
The following prerequisites apply to Microsoft Edge enterprise sync:
- A Microsoft Edge version that supports the desired sync functions.
- An active subscription to a cloud service in a supported environment.
- An Enterprise Mobility + Security service plan, specifically A3, A5, E3, E5, G3, or G5.
Note that Department of Defense (DoD) and Government Community Cloud (GCC) High subscriptions aren't supported at this time. For more information, see Microsoft Edge enterprise sync FAQ.
Supported environments
Microsoft Edge sync for Microsoft Entra accounts is available for any of the following subscriptions:
- Microsoft Entra ID (P1 or P2)
Note
Customers that only have Microsoft Entra ID P1 or P2 must enable Microsoft Entra Enterprise State Roaming (ESR). Microsoft Edge sync isn't part of ESR, but ESR is required to provide the Microsoft Purview functionality that's needed for the P1 and P2 configurations. To learn more, see the Enabled Enterprise State Roaming in Microsoft Entra ID article. - Microsoft 365 Business Premium, Business Standard, or Business Basic
Known limitations with Business Basic and Business Standard
While Microsoft 365 Business Basic and Business Standard licenses are not listed in the core supported environments table, they can support Microsoft Edge sync if Microsoft Purview Rights Management (RMS) is enabled.
Tenants created before 2021 may not have RMS enabled by default. Without it, sync features such as passwords, favorites, and settings may fail silently—leading to confusion even when the license appears valid.
Supported Microsoft 365 subscriptions that include RMS
The following subscription types include Azure Information Protection (AIP), which enables RMS and supports Microsoft Edge sync:
- Office 365 E1 and above
- All EDU subscriptions, including:
- Microsoft Apps for Students or Faculty
- Exchange Online for Students or Faculty
- O365 A1 or above
- Microsoft 365 A1 or above
- Azure Information Protection P1 or P2 for Students or Faculty
Sync group policies
Admins can use the following group policies to configure and manage Microsoft Edge sync:
- SyncDisabled: Disables data synchronization. This policy disables cloud synchronization only and has no effect on the RoamingProfileSupportEnabled policy.
- SavingBrowserHistoryDisabled: Disables saving browsing history and sync and open tabs sync.
- AllowDeletingBrowserHistory: When this policy is set to disabled, history sync will also be disabled.
- SyncTypesListDisabled: Configure the list of data types that are excluded from synchronization. Use this policy to limit the type of data uploaded to the Microsoft Edge synchronization service.
- RoamingProfileSupportEnabled: Allow Active Directory (AD) profiles to use on-premises storage. The settings stored in Microsoft Edge profiles (favorites and preferences) are also saved to a file stored in the Roaming user profile folder (or the location specified by the administrator.) For more information, see On-premises sync for Active Directory (AD) users.
- ForceSync: Force synchronization of browser data and don't show the sync consent prompt. Users can't disable this policy.
Use Microsoft Purview Information Protection to configure Microsoft Edge sync
Configuration options for Microsoft Edge sync are available through the Rights Management Service (RMS). When the service is enabled for a tenant, all users can sync Microsoft Edge data, regardless of licensing. The protection service might be activated automatically, by using PowerShell, or by using the Azure portal. For more information and instructions on how to enable AIP, see Activating the protection service from Azure Information Protection (AIP).
Caution
Activating Azure Information Protection allows other applications, such as Microsoft Word or Microsoft Outlook, to protect content with AIP. Any onboarding control policy that's used to restrict Microsoft Edge sync will also restrict other applications from protecting content using AIP.
Control user onboarding for a phased deployment
You can use the Set-AipServiceOnboardingControlPolicy cmdlet to set the policy that controls user on-boarding for the Rights Management Service (RMS). If sync still isn't available after all the specified users are onboarded, ensure that the IPCv3Service is enabled using the Get-AIPServiceIPCv3 PowerShell cmdlet. For more information, see Configuring onboarding controls for a phased deployment.
Microsoft Edge and Enterprise State Roaming (ESR)
Microsoft Edge is a cross-platform application with an expanded scope for syncing user data across all their devices and is no longer a part of Microsoft Entra Enterprise State Roaming. However, Microsoft Edge fulfills the data protection promises of ESR, such as the ability to bring your own key. For more information, see Microsoft Edge and Enterprise State Roaming.