Passwords not saving automatically on websites in Edge

[NickoTheSicko]

Hello All,

 

This could be a tricky one but any help will be appreciated! We want to implement a way in which passwords wont save on certain websites automatically. We use a website called MyConcern which is used to hold sensitive information about incidents and reports within the school. We do not want passwords to store for that specific website and are looking into to ways to prevent this. Anyone know of or know how to block certain websites from saving passwords in Edge?

 

Cheers

[LeMarchand]

Hello All,

 

This could be a tricky one but any help will be appreciated! We want to implement a way in which passwords wont save on certain websites automatically. We use a website called MyConcern which is used to hold sensitive information about incidents and reports within the school. We do not want passwords to store for that specific website and are looking into to ways to prevent this. Anyone know of or know how to block certain websites from saving passwords in Edge?

 

Cheers

Not entirely sure about this, but I think inPrivate doesn't save passwords. If correct, create a URL shortcut with the -private parameter and that should do it.

[NickoTheSicko]

Not entirely sure about this, but I think inPrivate doesn't save passwords. If correct, create a URL shortcut with the -private parameter and that should do it.

 

Have thought about this and thinking it might not work as if staff or other users use the link in their favorites or whatever then it would by pass this.

[LeMarchand]

Have thought about this and thinking it might not work as if staff or other users use the link in their favorites or whatever then it would by pass this.

 

SMT-enforced policy that they can only access the site via the shortcut? You may be able to delete existing links via Group Policy.

[NickoTheSicko]

SMT-enforced policy that they can only access the site via the shortcut? You may be able to delete existing links via Group Policy.

 

Thank you for the idea, we are looking into this!

[chazzy2501]

Doesn't Edge store web credentials in the credential manager? How configurable is the credential manager?

[Arthur]

It might be possible using Windows Defender Application Guard to open the MyConcern website in a separate isolated version of the Edge browser.

 

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview

 

Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted.

 

If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container, which is separate from the host operating system. This container isolation means that if the untrusted site turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials.

 

The isolated version of Edge shouldn't have access to any saved credentials.

[NickoTheSicko]

It might be possible using Windows Defender Application Guard to open the MyConcern website in a separate isolated version of the Edge browser.

 

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview

 

 

The only issue i have with this is that this is a very big unnecessary thing to do, it would mean using a VM on every machine within the school and would be a mammoth task for some of the systems to even run this is type of system, thank you for the idea tho