Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Use Microsoft Edge’s CookiesSessionOnlyForUrls policy to let selected websites use cookies during an Edge session while removing those cookies when the session ends. Deploy it from an Intune Settings catalog profile. This is targeted cookie retention control—not a cookie blocker, complete browsing-data wipe, or guaranteed server-side logout.
What the policy does
The Edge policy named CookiesSessionOnlyForUrls changes cookies created by matching URL patterns into session-only cookies. The site can authenticate and function while Edge is running, but Edge is expected to remove those cookies when the browser session ends. It does not affect every website and does not prevent a matching site from creating cookies.
Microsoft documents support beginning with Edge 77 on Windows and macOS and Edge 30 on Android; iOS is not supported. The policy is per-profile, dynamically refreshable, mandatory (not recommended), and accepts a list of strings. See the Microsoft policy reference.
| Item | Value |
|---|---|
| Intune setting | Limit cookies from specific websites to the current session |
| Edge policy | CookiesSessionOnlyForUrls |
| Data type | List of strings |
| Windows administrative path | Administrative Templates/Microsoft Edge/Content settings |
| Windows registry path | SOFTWAREPoliciesMicrosoftEdgeCookiesSessionOnlyForUrls |
| Registry value format | Numbered REG_SZ values such as 1, 2, and 3 |
When it is useful
- Shared, contractor, kiosk, laboratory, or training devices.
- Sensitive applications that need cookies during work but should not retain browser login state.
- Task-based workstations where targeted retention is preferable to blocking the site.
What it does not replace
Cookies are only one kind of browser state. Local storage, IndexedDB, cache, service-worker data, saved credentials, identity-provider tokens, and server-side sessions may remain. Use InPrivate or ephemeral profiles, clear-browsing-data policies, identity-provider sign-out, or broader endpoint controls when those are the actual requirement.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 13.56" (344.5 mm), Height: 8.49" (215.6 mm), Diagonal: 16" (406 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Understand when the session ends
Microsoft describes the session as ending when the Edge window closes, but that wording needs operational care. Closing one tab does not end a session. Closing one window does not end it if another Edge window remains. Background applications, extensions, or Edge background mode can keep browser processes alive after the last visible window closes. A crash, forced termination, sleep, or restart also needs separate testing.
For predictable testing, determine whether BackgroundModeEnabled or background applications are keeping Edge alive. Disabling background activity can improve predictability, but it is not a complete security guarantee.
Check prerequisites and policy interactions
- Confirm the Windows device is enrolled and receiving Intune configuration profiles.
- Identify the exact application hosts, redirects, authentication domains, and embedded dependencies that need session-only cookies.
- Inventory existing Edge cookie profiles and overlapping Intune, Group Policy, registry, or other management channels.
- Review startup policies before deployment.
Startup restoration can override the result
Microsoft states that if RestoreOnStartup restores URLs from previous sessions, CookiesSessionOnlyForUrls is ignored and cookies for those sites are stored permanently. Review Action to take on startup, previous-session restoration, and Sites to open when the browser starts. RestoreOnStartupURLs is used only when RestoreOnStartup is set to open a list of URLs; see Microsoft’s RestoreOnStartupURLs reference.
Rank #2
- Confirm Your Screen Size: width: 11 14/16" (30.2 cm), height: 7 6/16" (18.8 cm), diagonal length: 14" (35.56 cm), do not use the diagonal measurement only; This size laptop privacy screen is suitable for laptop screens with 14-inch 16:10 computer brands such as HP, Dell, Acer, Asus, Samsung, and ThinkPad; please note that this product is NOT COMPATIBLE with SURFACE and MACBOOK series computers
- 4-Way 360 Privacy Protection: Compared to the 180-degree computer screen privacy shield that only protects privacy in the horizontal direction, our ZOEGAA computer privacy screen offers 360-degree protection in all four directions (up, down, left, and right), providing you with comprehensive privacy protection
- Glossy And Matte Finishes Available For Selection: The glossy surface of ZOEGAA privacy screen is the shiny side, while the other side is matte. The glossy surface offers better privacy protection, while the matte surface can prevent glare
- Block Harmful Light And Say Goodbye To Eye Fatigue: Our ZOEGAA privacy screen for laptop can block the blue light and ultraviolet rays emitted by the computer screen, and also prevent the screen from reflecting dazzling glare. Make the eyes no longer so tired as they used to be
- 2 Installation Ways: Our ZOEGAA privacy screen can be applied to your laptop screen in two ways: 1. Insert installation method. Just follow the installation video to attach the slide mount tabs around the screen border, then insert the 14 inch laptop privacy screen. 2. Double-sided adhesive installation: Our privacy screen for computer will come with double-sided adhesive stickers. You can stick the double-sided adhesive at the four corners of the privacy film, and then attach it to the computer screen. If you think the stickers are not firmly attached, you can apply more double-sided adhesive tapes to ensure a stable attachment
Do not create conflicting cookie lists
| Policy | Effect |
|---|---|
CookiesSessionOnlyForUrls |
Matching sites may create cookies, but those cookies are removed at session end. |
CookiesAllowedForUrls |
Matching sites are allowed to set cookies. |
CookiesBlockedForUrls |
Matching sites are prevented from setting cookies. |
Microsoft warns against conflicting URL patterns between these policies. Do not place the same site in both blocked and session-only lists. Avoid overlapping allowed and session-only entries unless the intended behavior has been deliberately tested. Nonmatching sites follow DefaultCookiesSetting, if configured, or the user’s Edge cookie settings. References: CookiesAllowedForUrls and CookiesBlockedForUrls.
Create the Intune Settings Catalog profile
- Open the Microsoft Intune admin center.
- Go to Devices, then Windows > Manage devices > Configuration. Some tenants show this as Devices > Configuration.
- Select Create or Create policy.
- Set Platform to Windows 10 and later and Profile type to Settings catalog.
- Name the profile, for example
Edge - Session-only cookies - Sensitive sites. Describe its purpose, URL patterns, assignment group, and related cookie or startup policies. - Select Add settings and search for Limit cookies from specific websites to the current session. You can also search for
CookiesSessionOnlyForUrls. - Select the Microsoft Edge setting, enable it, and add one list entry for each URL pattern.
- Select Next, assign the profile first to a pilot user or device group, review the configuration, and select Create.
Current Intune documentation may show the setting under Microsoft Edge > Additional; some tenants and older walkthroughs show Microsoft Edge > Content settings. Search by the complete setting name rather than relying on the category. Microsoft’s deployment guidance is in Settings Catalog for Microsoft Edge for Business.
Enter valid URL patterns
Use the narrowest pattern that covers the application. Each pattern is a separate list value.
Rank #3
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 12 3/16" (310 mm), Height: 6 7/8" (175 mm), Diagonal: 14" (355.6 mm) - There are two different 14 inch screen sizes, please select the correct one. SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
| Pattern | Scope |
|---|---|
https://portal.example.com |
Targets that host and scheme; safer when one application is involved. |
[*.]example.org |
Targets the domain and its subdomains using Edge URL-pattern syntax. |
https://login.example.net |
Targets a specific authentication host. |
The wildcard-only value * is not accepted for this policy. Broad domain patterns can affect redirects, embedded content, authentication, and subdomains, so map those dependencies before selecting a domain-wide entry.
Monitor deployment in Intune
- Open the profile in Intune.
- Review device and user assignment status.
- Confirm the pilot device reports Succeeded or the tenant’s equivalent successful state.
- Investigate Pending, Conflict, Not applicable, and Error results, along with assignment filters, enrollment, licensing, group membership, and scope permissions.
Keep one documented source of truth for Edge cookie lists where possible. Multiple configuration channels can overwrite or conflict with one another.
Verify the policy on an Edge client
Inspect the effective policy
- Open Microsoft Edge on the target device.
- Navigate to
edge://policy. - Select Reload policies if needed.
- Search for
CookiesSessionOnlyForUrls. - Confirm the expected patterns, the management source, and the absence of a conflict or error.
Check Windows MDM processing
For diagnostic evidence, open Event Viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin. Event IDs 813 and 814 can help show policy processing; Event 814 commonly contains policy details. These events confirm MDM activity, not that the browser behavior has been functionally proven.
Rank #4
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Run a functional test
- Use a dedicated test Edge profile on a pilot device.
- Open the matching site and sign in or perform an action that creates a cookie.
- Confirm the site works during the current session.
- Close all Edge windows and account for any background process.
- Reopen Edge and visit the site again.
- Check whether the expected authentication or site state was removed.
- Test a nonmatching control site.
- Repeat after removing the policy to confirm rollback behavior.
Do not infer cookie deletion solely from a sign-out screen. The application may use server-side sessions, local storage, IndexedDB, or tokens that are independent of the cookie being tested.
Troubleshoot common failures
The setting is missing
- Confirm the profile is Windows 10 and later > Settings catalog.
- Search the full setting name and
CookiesSessionOnlyForUrls. - Check both Microsoft Edge > Additional and the older or tenant-specific Content settings presentation.
The policy is successful but behavior is unchanged
- Check
edge://policyand the Edge profile being tested. - Verify the pattern matches the actual host, scheme, redirects, and authentication domains.
- Review allowed, blocked, default-cookie, startup-restoration, and background-mode policies.
- Determine whether the observed state is local storage or another data type rather than a cookie.
Cookies remain after closing Edge
- Close every Edge window and determine whether background mode or an extension keeps Edge running.
- Check for
RestoreOnStartuprestoration. - Confirm the cookie belongs to a matching domain and that the policy is applied to the tested profile.
- Consider whether the site recreates the cookie immediately after startup.
The site stops working
- Narrow an overly broad pattern.
- Map required first-party and third-party authentication or payment hosts.
- Check overlap with
CookiesAllowedForUrls,CookiesBlockedForUrls, and global cookie settings. - Test whether the site requires a persistent cookie for normal operation.
Only some users or devices receive the policy
- Compare user versus device assignments and group membership.
- Review assignment filters, scope tags, enrollment, and administrative permissions.
- Check for multiple Edge profiles and competing configuration profiles.
Choose a different control when appropriate
| Requirement | Better fit |
|---|---|
| Allow a site to work but avoid persistent cookies | CookiesSessionOnlyForUrls |
| Prevent a site from setting cookies | CookiesBlockedForUrls |
| Explicitly permit cookies for selected sites | CookiesAllowedForUrls |
| Remove broader browser data | Clear-browsing-data controls or a managed profile strategy |
| Strong isolation on shared devices | InPrivate, ephemeral profiles, kiosk configuration, and identity-provider controls |
Microsoft Intune is the native deployment mechanism for this Edge setting on enrolled devices. A separate cookie-management product is generally unnecessary for this narrowly defined requirement; broader cross-browser governance or non-Microsoft device management may justify a different platform.
Quick Recap
Deployment checklist
- Use the exact setting Limit cookies from specific websites to the current session.
- Record the Edge policy identifier
CookiesSessionOnlyForUrls. - Use separate, valid URL-pattern entries and never use the wildcard-only
*. - Review allowed, blocked, default-cookie, startup, and background policies for conflicts.
- Deploy to a pilot group before broad assignment.
- Confirm Intune status and the effective policy at
edge://policy. - Complete a close-and-reopen functional test with a nonmatching control site.
- Document that cookie removal does not guarantee logout or deletion of other browser storage.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
