Best Guide to Install Google Chrome Extensions using Intune Policy

In this article, I will explain how to Install Google Chrome Extensions using the Microsoft Intune Policy. Google Chrome extensions are small software programs that add functionality to the Chrome browser. They are designed to enhance your browsing experience by providing additional features, improving productivity, and integrating with other web services.

Extensions can modify and extend the browser’s capability, providing a customized browsing experience. Here’s an overview of what they are, how they work, and how to use them.

Definition: Chrome extensions are add-ons that extend the capabilities of the Chrome browser. They can change the browser’s user interface, manage tabs, automate tasks, and interact with web pages.

Types of Extensions: Extensions can range from simple tools like ad blockers and password managers to complex applications that integrate with online services such as Grammarly, Google Drive, Evernote, or social media platforms.

Patch My PC

Extensions are typically installed from the Chrome Web Store. Users can browse and search for extensions and install them. Here, we are going to use Intune to install them.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 1
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 1

Key Features of Google Chrome Extensions

Google Chrome Extensions offer various features that enhance the browser’s functionality and provide users with a more customized and efficient browsing experience. Here are the key features of Google Chrome Extensions.

CategoryFeatures
CustomizationExtensions allow users to modify and personalize their browsing experience. For example, you can change the browser’s appearance, manage tabs efficiently, or add new functionalities.
ProductivityTools like ad blockers, password managers, and note-taking apps help streamline online activities, making users more efficient.
Enhanced FunctionalityExtensions can add new features to Chrome that are not available in the standard version. This includes integrations with other apps and services, language translators, and enhanced developer tools.
Security and PrivacySecurity extensions help protect against phishing, malware, and other online threats. Privacy extensions can block trackers and ensure secure browsing.
Best Guide to Install Google Chrome Extensions using Intune Policy. Table. 1

Create a Configuration Profile to Install Google Chrome Extensions with Intune

Follow the steps below to create a configuration profile for Installing Google Chrome Extensions with Intune. Then, sign in to the Microsoft Intune Admin Center using your administrator credentials.

  • Navigate to Devices  Windows > Configuration Profiles
  • Click on +Create +New Policy
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 2
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 2

In the next step, we can begin a new Configuration Policy to Install Google Chrome Extensions from scratch by entering the following values from the drop-down and then clicking on Create.

Adaptiva
  • Platform: Windows 10 and later
  • Profile type: Settings catalog
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 3
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 3

We can give the Configuration profile name “Install Google Chrome Extensions” on the Basics page and click Next.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 4
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 4

We can now add the required settings to the Configuration Settings pane. To do so, click on +Add settings in the bottom left corner of the page.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 5
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 5

Search for “apps and extensions” as a keyword. This will help you find the correct policy based on our current needs. Now you can see the “Google Google Chrome Extensions” under the Browse by category. Click on that and pick the settings below.

  • Configure the list of force-installed apps and extensions
  • Extension/App IDs and update URLs to be silently installed (Device)

Important Tips

Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can’t uninstall or turn off. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren’t available to apps and extensions that aren’t force-installed.) Leaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Google Chrome.

This policy supersedes the ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Google Chrome automatically uninstalls it. On Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.

On macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM or joined to a domain via MCX. Users may alter an extension’s source code through developer tools, potentially rendering it dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy. Each policy list item is a string containing an extension ID and, optionally, an “update” URL separated by a semicolon (;).

The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the “update” URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). By default, the Chrome Web Store’s update URL is used. The “update” URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension’s manifest.

Note! This policy doesn’t apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ). Example value: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx abcdefghijklmnopabcdefghijklmnop

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 6
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 6

The next option is to choose the “Extension/App IDs and update URLs to be silently installed (Device)“. This is our Extension App ID which we are trying to install now as a Google Chrome Extension. In this example, we are going to install Grammarly as an Extension. For that, go to the Google Chrome Web Store URL: https://chromewebstore.google.com/

When you search for Grammarly in “Search extensions and themes,” you will get Grammarly: AI Writing and Grammar Checker App, the URL with the App ID in the last.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 7
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 7

Close the Settings picker window and toggle the “Configure the list of force-installed apps and extensions” option as Enabled. (kbfnbcaeplbcioakkpcpgfkobkghlhen) Copy that add it under Extension/App IDs and update URLs to be silently installed (Device) as shown below and click on Next

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 7
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 7

On the next page, Leave the Scope tags as Default. If you have any custom scope tags available, you can also select that for this deployment.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 8
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 8

Click on Next and assign the configured policy to HTMD – Test Computers. In the Included Groups option, click on Add groups and select the required device group.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 9
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 9

Please take a moment to carefully review all the settings you’ve defined for the “Install Google Chrome Extensions” policy on the “Review + Create” page. When you’re ready, select “Create” to implement the changes.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 10
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 10

Monitor the Install Google Chrome Extensions in Intune

The Install Google Chrome Extension policy has been deployed to the Microsoft Entra ID group (HTMD – Test Computers). The policy will take effect as soon as possible once the device is synced.

  • To monitor the policy deployment status from the Intune Portal, follow the below-mentioned steps.
  • Navigate to Devices > Windows > Configuration Profiles > Search for the “Install Google Chrome Extensions” policy.
  • Under the Device and user check-in status, you can see the deployment status for the same
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 11
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 11

End User Experience – Install Google Chrome Extensions Policy

Now, we have to check whether the Install Google Chrome Extensions policy is working fine or not. Log in to one of the policy-targeted devices. Open the Google Chrome browser, click on the 3 dots in the top right corner, then navigate to Extensions > Manage Extensions; you can see the Grammarly Extension was successfully installed via Intune Policy.

Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 12
Best Guide to Install Google Chrome Extensions using Intune Policy. Fig. 12

I appreciate you taking the time to read my article. I’m excited to see you in the upcoming post. Continue to support the HTMD Community.

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Vaishnav K has over 10+ years of experience in SCCM, Device Management, and Automation Solutions. He writes and imparts his knowledge about Microsoft Intune, Azure, PowerShell scripting, and automation. Check out his profile on LinkedIn.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.