ExtensionInstallForcelist - Multiple GPOs

Question

Hi,&nbsp;I'm trying to utilize the&nbsp;ExtensionInstallForcelist GPO to install extensions silently for our users.&nbsp;We want to be able to distribute some extensions globally to all customers (using a global GPO) and then specific extensions to a sub-set of customers (using a local specific GPO).&nbsp;Currently you appear to get a conflict message when trying to do this. It appears multiple extensions need to be defined in one GPO only, which isn't ideal for scenario above. Is it possible to get round this issue?

jbrunsden · Answer

ashishpoddar&nbsp;Hi,&nbsp;&nbsp;Unfortunately that just isn't possible with a current scenario, we enforce a Cyber GPO that pushes the ATP extension among other things, so this will always be above any user policies.&nbsp;I think the issue here would ultimately be resolved if the&nbsp; ExtensionInstallForcelist could just be populated with values from multiple GPOs, even in two separate&nbsp;Device GPOs one has to take precedence&nbsp;of the other and we cannot implement the way you described because of the reason above.It looks like Chrome has GPOs that could work around this:https://cloud.google.com/docs/chrome-enterprise/policies/?policy=PolicyDictionaryMultipleSourceMergeListhttps://cloud.google.com/docs/chrome-enterprise/policies/?policy=PolicyListMultipleSourceMergeList&nbsp;This presumably allows for separate values to be merged, so something like this could work in Edge?&nbsp;For now we will probably have to look at putting all our extensions in one policy, but as initially stated, this isn't really flexible in an Enterprise environment for certain use cases.&nbsp;Thanks&nbsp;

rdoloto · Answer

We looking at something along these lines is PolicyListMultipleSourceMergeListEvery being ported from chrome ?

kelly_y · Answer

JBrunsden&nbsp;Hi!&nbsp; I'm checking with our Extension Team about your question.&nbsp; We'll keep you updated if they have any suggestions.&nbsp; Thanks!&nbsp;
&nbsp;
-Kelly

ashishpoddar · Answer

Hi&nbsp;JBrunsden
&nbsp;
Could you share the conflict error you are seeing?
&nbsp;
Thanks
Ashish.&nbsp;&nbsp;

jbrunsden · Answer

Hi&nbsp;ashishpoddar,&nbsp;Below is the screenshot from the edge://policy/ screen.&nbsp;I did initially set this up with both exceptions defined in separate GPOs under Computer Config but same error as above even when one is defined in Computer and another in User (still separate GPOs).&nbsp;Thanks,&nbsp;John&nbsp;&nbsp;

Forum Discussion

ExtensionInstallForcelist - Multiple GPOs

Share

Resources