Blocking InPrivate/Incognito windows on Windows computers

Because, among other things, it is not possible to centrally install a plugin in InPrivate / Incognito windows, we strongly recommend blocking this freedom at school. On Windows laptops this is fairly easy to do.

In the Intune admin centre, choose:

For Platform, select Windows 10 and later. For Profile type, select Settings catalog and click Create at the bottom.

Give the new profile a name, e.g. "Block private windows", and click Next at the bottom.

Click + Add settings
Type "inprivate" in the search box and click Search.
In the categories found, click Microsoft Edge. Four results appear; tick the first two:
✅ Configure InPrivate mode availability
✅ Configure InPrivate mode availability (User)

Now type "incognito" in the search box and click Search.
Select the category GoogleGoogle Chrome and tick both results:
✅ Incognito mode availability
✅ Incognito mode availability (User)

Now click the cross at the top right of the Search button.

In the Google Chrome section, set both toggles to Enabled and then choose Incognito mode disabled in both drop-down boxes

In the Microsoft Edge section, set both toggles to Enabled and then choose InPrivate mode disabled in both drop-down boxes

Click Next at the bottom, and click Next again at Scope tags.

Under "Included groups", click Add groups and select the student group(s).

Click Next, check the settings and click Create

Intune will now roll out this setting to the student accounts. From now on, private browsing can no longer be used with those accounts.

Updated on: 03/11/2026