This article is about deploying Google Chrome extensions using Group Policy. This works great for individual users, but what if you want to deploy an extension to a large number of users in your organization?
The solution is to deploy the extension via Group Policy. These two values have to be entered as one string, but separated by a semicolon. The first thing to do, is to manually install the extension directly from the Chrome Web Store on your test system. The extension ID can be retrieved by opening the extensions tab in Chrome. Copy this ID somewhere for example in Notepad ; you will need this information in the next step. The extension ID is equal to the name of the folder.
Open the subdirectory representing the version of the extension. In the root of this directory you should find the file manifest. Open this file in your favorite text editor e. Here you will find the update URL:. Now you have the values you need. Copy them together in one string and make sure to separate them using a semicolon as shown in the beginning of this paragraph :.
To force-install extensions, open your Group Policy Management console dsa.
Now the policy setting is configured. On the next Group Policy refresh the user will automatically receive the required extension. To summarize, this policy will automatically install one or more extensions for all users to whom the Group Policy applies. The installation is executed silently and without user interaction. Future updates of the extension are automatically installed through the update URL specified in the manifest file.
Unfortunately I was not able to come up with a solution concerning the centralized management of Chrome extension settings. Some extensions, for example The Great Suspendercome with additional options for the user to configure. As said, I was not able to find a way how to manage or configure these centrally. I only have:. I checked under all 53 nodes and not see the settings for Chrome Extensions.
All 53 nodes have the same three settings listed above. I see what the difference is. Nice to see you visiting my blog!As an administrator, you can automatically install Chrome apps and extensions on users' computers.
You can also control which apps or extensions users can install. You set the default policies for all apps and extensions. Then, if you want to customize policies for specific apps or extensions, you can override your defaults. Skip this step if you're not going to customize policies for specific apps or extensions. To apply policies and settings to a specific Chrome app or extension, you need to identify it.
So, if a user installs a specific app or extension on multiple devices, it has the same ID on all devices. Each ID is 32 characters long. You can control whether an app or extension is blocked, allowed, or automatically installed on devices.
How To Prevent Google Chrome Extensions in Group Policy
This overrides the ExtensionInstallForcelist policy. Download an example JSON file here. You can edit it using a text editor. If you automatically install an extension on devices, you need to specify where Chrome should download it. If your policy blocks users from installing certain apps or extensions, you can specify a custom message to display on devices if users try to install them.
For example, you can tell users how to contact their IT department or why a particular extension is unavailable. For example, you can block extensions that connect to USB devices or access cookies. For a list of available permissions, see Chrome app and extension permissions.
Deploying Google Chrome extensions using Group Policy
Set your desired app and extension policies details below. Find and select the app or extension you want. Look at the URL. For example, nckgahadagoaajjgafhacjanaoiihapd is the ID for Google Hangouts.
For each implementation sample code below : Set a default policy that applies for all apps and extensions. Optional Customize the policy for individual apps or extensions.I have the configure force-installed apps and extensions setup and have tested it and it works. What do I put into the GPO to allow only certain extensions? I have tried the unique IDs but that does not work.
The description test gives the 6 types that are allowed. Perhaps you should be looking at the option just above that one, for extension whitelisting. I've left a couple of questions there recently and got an answer back within a day or two. It may be more effective to use group policy to restrict installation of Chrome extensions assuming that these are Windows machines.
This will block all extensions. Whenever people go to install apps that are not allowed, it will pop up a little window alerting them. To allow specific extensions for installation, enable "configure extension installation whitelist" and put the unique identifiers which are found in the chrome store url which is at the end of the url.
This will allow users to install the specific extensions, but not force install them. To force install extensions, you need to enable and enter the extension IDs into "Configure the list of force-installed apps and extensions". Edit: The comment above is assuming that you're a G Suite domain and have access to the Admin console. I just looked around on an unmanaged device as a supervised user and cannot find a way to restrict extension installation. I would check the AMDX. Yes, I have the ADMX files and the screenshot is exactly what I am looking at but I can not figure out what to put as the value and that's what my question is.
I have tried the unique ID for the extension but that did not work. I moved over an extension meta4launcher to white list over 24 hours ago, and after a few forced GP updates Still have not gone through. I checked my computer's registry and also don't see the extension in the white listed folder So the change has definitely not gone through. To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks.
Allow or block apps and extensions
Moikerz This person is a verified professional. Verify your account to enable IT peers to see that you are a professional.Apps and extensions add features to Chrome. Plug-ins work with page scripts and programs on a computer to access elements on the web.
For example, the Flash plug-in must be enabled for Chrome to process Flash content. An extension such as Wikibuyon the other hand, analyzes and reapplies data found through the web. Here's how to disable extensions and plug-ins that you don't want to use with Chrome.
Select More Tools and choose Extensions. The Extensions page lists the extensions installed on Chrome, and a blue or gray toggle switch indicates whether or not the extension is enabled. To disable an extension, click the blue slider button so that it turns to gray. To enable an extension, click the gray button so that it turns blue. In the list of plug-ins and site permissions, select the plug-in, such as Flash, that you want to disable.
Browsers Chrome Safari Firefox Microsoft. Tweet Share Email. The easiest way to access the extensions settings is through the menu. Select the three-dotted menu located on the upper-right side of Chrome. Open the Chrome plug-in settings through the Settings menu. Open Chrome and select the three-dotted icon. Select Settings.
Scroll to the bottom of the page and select Advanced. Select Site Settings. Select the toggle switch to enable or disable the plug-in. More from Lifewire.Follow the steps below in order to configure a GPO that will install and enable the Impero Education Pro chrome extension for web filtering and history logging.
To download the new version of MS Edge if you haven't already you can find the Enterprise version here which will come as a. Once uploaded, expand to the following path may vary depending on your OS on the left of the Group policy management editor:.
You may wish to disable or block Edge notifications completely or from specific sites. To do this you can use the following policies. Users affected by this GPO should now see the Edge extensions installed and enabled automatically once the GPO has updated on their machine. Did you find it helpful? Yes No. Enter your search term here Enter your 6-digit code. Home Knowledge base Education Pro Getting started. Open Group Policy Management 3. Create a new GPO for the policy or add to an existing policy 4.
You may wish to disable the ability for users to end processes in the Browser Task Manager As this will stop logging and blocking. To do this you can navigate to the following location. Related Articles. Yes No Send feedback Sorry we couldn't be helpful.
Help us improve this article with your feedback. Share Article.As a Chrome Enterprise admin, you can control which apps or extensions users can install on managed Chrome Browsers or Chrome devices. This article gives a high-level overview of how to set policies for all users or customize settings for different groups.
Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply. These steps assume you're familiar with making Chrome settings in your Admin console.
Allow or block apps and extensions For administrators who manage Chrome policies from the Google Admin console. Before you begin To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.
To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Browser management for the organizational unit that they belong to. See Turn on Chrome Browser management. Set policies in the Admin console Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. Allow all apps but those you want to block These steps assume you're familiar with making Chrome settings in your Admin console.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
You can do this with a GPO. Look for a folder named Allowed extensions. This will prevent users from installing plugins. I was going to add this as a comment to Lucas Kauffman's answer, but I don't have the rep to leave comments yet. I've seen the reference to use a group policy. I'm not familiar with that and didn't find the instructions clear to follow, so I've settled for configuring a Folder Action Script to just delete the extension's folder whenever it's created:.
In my experience, this is enough.
The folder is not deleted immediately, but with a delay of few seconds. Chrome's attempts to restore the folder each time you start it aren't successful. You can hear Finder's 'file deleted' sound. This changes the permissions on the Extensions folder to read only and stops new extensions from being installed.
If you don't use extensions change the name of the extension folder. Extensions can not be downloaded when the folder does not exist. Sign up to join this community. The best answers are voted up and rise to the top. Home Questions Tags Users Unanswered. How to prevent installation of Google Chrome extensions Ask Question. Asked 5 years, 7 months ago. Active 4 months ago.