Forum Discussion
ExtensionInstallForcelist - Multiple GPOs
Hi ashishpoddar Kelly_Y any update on this?
MicrosoftHi JBrunsden
The suggestion here is to always apply the device policies after the user policies, so device will always win when there is a conflict between them.
Could you try this approach and confirm if this works?
Thanks
Ashish.
ashishpoddar Hi,
Unfortunately that just isn't possible with a current scenario, we enforce a Cyber GPO that pushes the ATP extension among other things, so this will always be above any user policies.
I think the issue here would ultimately be resolved if the ExtensionInstallForcelist could just be populated with values from multiple GPOs, even in two separate Device GPOs one has to take precedence of the other and we cannot implement the way you described because of the reason above.
It looks like Chrome has GPOs that could work around this:https://cloud.google.com/docs/chrome-enterprise/policies/?policy=PolicyListMultipleSourceMergeList
This presumably allows for separate values to be merged, so something like this could work in Edge?
For now we will probably have to look at putting all our extensions in one policy, but as initially stated, this isn't really flexible in an Enterprise environment for certain use cases.
Thanks
- We looking at something along these lines is PolicyListMultipleSourceMergeList
Every being ported from chrome ?- ashishpoddar
Could you tell us the use case or the issue that you are facing for which you are suggesting this policy?
Thanks
Ashish
