Import-Module GroupPolicy
$gpo = 'CSC - Nurse Station Kiosk'
# BrowserSignin=2 forces Edge to sign in with the OS account (PRT -> SSO)
# Keep SyncDisabled=1 + ClearBrowsingDataOnExit=1 so no data persists
Set-GPRegistryValue -Name $gpo -Key 'HKCU\Software\Policies\Microsoft\Edge' -ValueName 'BrowserSignin' -Type DWord -Value 2 | Out-Null
# Also enable SSO for work sites via the OS primary account
Set-GPRegistryValue -Name $gpo -Key 'HKCU\Software\Policies\Microsoft\Edge' -ValueName 'RoamingProfileSupportEnabled' -Type DWord -Value 0 | Out-Null
Write-Output 'Updated: BrowserSignin=2 (force OS account), RoamingProfileSupportEnabled=0'
Get-GPRegistryValue -Name $gpo -Key 'HKCU\Software\Policies\Microsoft\Edge' | ForEach-Object { Write-Output "$($_.ValueName)=$($_.Value)" }
