I'm looking for advice on managing the use of personal and corporate accounts by our employees who use the same browser. We've had some issues where they accidentally upload company data to their personal accounts. Is there a way to automatically enforce a separation between these two types of accounts to prevent this from happening?
5 Answers
You might want to explore enforcing Chrome profile separation through Google Workspace or a mobile device management (MDM) system.
You can set up group policies to restrict personal account logins. For instance, browsers can be configured to redirect to the corporate login when someone attempts to access Gmail.
I recommend not allowing personal accounts on company devices at all. This could prevent a lot of issues from arising in the first place.
From my experience managing IT in a small family-owned company, I’ve advised not mixing personal accounts on company devices. While it’s not formal policy, most folks keep it that way. For our leads, we’ve found a simple solution: they use one browser (like Edge) for business purposes and another (like Chrome or Firefox) for personal use, which has helped quite a bit, even if it's not perfect.
That's what I do too—Edge for work, Chrome for personal. It keeps things nicely separated.
A great way to enforce this is by using browser profiles, like in Chrome. Each profile stays isolated, making it hard for employees to mix up work and personal data. Plus, a password manager could help them manage different credentials in a more secure way.
That's a solid idea, but often it doesn’t solve the problem completely. Group policies can sometimes interfere with legitimate needs in hybrid environments where personal access is necessary. A better approach would be to combine conditional access policies with Chrome's profile separation and educate users about the setup.