We are migrating our users to a new 3rd-party Password Manager solution (Keeper Security).
As part of their documentation package, they included instructions for disabling the built-in Browser password manager. We successfully created a Configuration profile in MEM that disables autofill and new password saving.
Our concern is that we'd also like to be able to delete any existing stored passwords, both locally and in the cloud.
From reading this thread ... https://learn.microsoft.com/en-us/answers/questions/1051573/delete-saved-passwords-in-edge-using-group-policy
...we learned that Microsoft stores the saved passwords in an encrypted SQLite database stored in appdata. When we delete the file, it regenerates after re-opening the browser.
The only way we were able to fully remove the passwords from the browser, was to perform a "Reset Sync" locally. This removed the passwords from edge://settings/passwords.
Questions:
- Is there a Group Policy we can apply that would run the "Reset Sync" on all devices in a group?
- Is there a way to know that stored passwords have been deleted from the cloud?
- IS there a way to know that locally-saved passwords were deleted from the LoginData.sqlite file?
Here're answers to your questions:
For reference, you can read this official document.