Forum Discussion
Blocking chrome extensions but whitelist specific ones
Hi all, Im having issues white listing specific extensions and also blocking others too! Iv added the Chrome ADMX and have force deploy on specific apps which is working but below are the conf...
- You could try to download this admx file (just uploaded it)
https://github.com/Call4cloud/Enrollment/blob/main/DU/ADMX/chromeadmx.xml
And try to ingest that one... to see what happens?
The provider id could be different.. there has to be some information about chrome init..
AB21805 For our extension management in Edge (and Chrome) we use the "Configure extension management settings" option containing a JSON with the all extensions blocked and then the individual ones we want available listed with either "force_installed" for those we want installed and not touchable by the user, "allowed" for those that user can go and install from the Edge store (and/or Chrome store) and "normal_installed" for those that we pre-install but the user can enable/disable as needed. We've found this handles extensions overall better than using the separate settings entries.
Below is our JSON as an example and here's the documentation link (and this is also included in Intune): https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#configure-extension-management-settings
{"*":{"installation_mode":"blocked","blocked_install_message":"Installation of Edge extensions requires approval"},"jmfbfggikgbdccejjilikgnfdjnpmlfe":{"installation_mode":"normal_installed","update_url":"https://clients2.google.com/service/update2/crx"},"lfmcehohgifnaodaogknapedjiaoebgo":{"installation_mode":"allowed"},"ekhagklcjbdpajgpjgmbionohlpdbjgc":{"installation_mode":"allowed"},"pjjladfifbaokjdckiedipnkaemnjffa":{"installation_mode":"allowed"},"oiigbmnaadbkfbmpbfijlflahbdbdgdf":{"installation_mode":"allowed"},"mooikfkahbdckldjjndioackbalphokd":{"installation_mode":"allowed"},"ddaloccgjfibfpkalenodgehlhkgoahe":{"installation_mode":"allowed"},"jbbplnpkjmmeebjpijfedlgcdilocofh":{"installation_mode":"allowed"},"fjgncogppolhfdpijihbpfmeohpaadpc":{"installation_mode":"allowed"},"glnpjglilkicbckjpbgcfkogebgllemb":{"installation_mode":"allowed"},"dpncpimghfponcpjkgihfikppbbhchil":{"installation_mode":"allowed"},"dkgencfabioofgdmhhjljpkbbchbikbh":{"installation_mode":"allowed"},"bomfdkbfpdhijjbeoicnfhjbdhncfhig":{"installation_mode":"allowed"},"ikdddppdhmjcdfgilpnbkdeggoiicjgo":{"installation_mode":"normal_installed","update_url":"https://edge.microsoft.com/extensionwebstorebase/v1/crx"},"nffeahffadlikbdfgngjocbcicdbikpa":{"installation_mode":"normal_installed","update_url":"https://clients2.google.com/service/update2/crx"},"pbnfcaobikkbealhienfilklacghhgoi":{"installation_mode":"allowed"},"hdgegmlancchhhlkkddoiedlklgocffm":{"installation_mode":"allowed"},"lhdoppojpmngadmnindnejefpokejbdd":{"installation_mode":"allowed"},"inahogkhlkbkjkkaleonemeijihmfagi":{"installation_mode":"allowed"},"elgalmkoelokbchhkhacckoklkejnhcd":{"installation_mode":"allowed"},"pbjjkligggfmakdaogkfomddhfmpjeni":{"installation_mode":"allowed"},"hbfacnnpimgddoojjaonnnbeljegicfl":{"installation_mode":"normal_installed","update_url":"https://edge.microsoft.com/extensionwebstorebase/v1/crx"},"maafgiompdekodanheihhgilkjchcakm":{"installation_mode":"normal_installed","update_url":"https://outlook.office.com/owa/SmimeCrxUpdate.ashx"},"mbcgpelmjnpfbdnkbebdlfjmeckpnhha":{"installation_mode":"allowed"},"llnckjibglpbknibkglkapgkcioabomp":{"installation_mode":"allowed"},"jaleebmaoohbjjohjlfmihkkopgfibne":{"installation_mode":"allowed"},"cdgjgpahklmdkojkkdgmckgmbnheolnl":{"installation_mode":"allowed"},"mbopgmdnpcbohhpnfglgohlbhfongabi":{"installation_mode":"allowed"},"ghbhpcookfemncgoinjblecnilppimih":{"installation_mode":"allowed"},"jalhapcnkijacfbnbcicimhafnllongh":{"installation_mode":"allowed"},"gpphkfbcpidddadnkolkpfckpihlkkil":{"installation_mode":"allowed"},"nnkgneoiohoecpdiaponcejilbhhikei":{"installation_mode":"allowed"},"gjpfobpafnhjhbajcjgccbbdofdckggg":{"installation_mode":"allowed"},"ggknodeapenofhidkfgfncfoeclcfoom":{"installation_mode":"allowed"},"ifoakfbpdcdoeenechcleahebpibofpc":{"installation_mode":"allowed"},"ndaciljfdnekbnmcpjidoebejglcjidc":{"installation_mode":"allowed"},"ogcgkffhplmphkaahpmffcafajaocjbd":{"installation_mode":"allowed"},"pmapbmihblakhgodloklimjbaoohkiop":{"installation_mode":"allowed"},"gmhjclgpamdccpomoomknemhmmialaae":{"installation_mode":"allowed"},"lajjpilliikppcbaghjehndpfdiiphbe":{"installation_mode":"allowed"},"pjocddipjlkokifpnnbmjemienmelhak":{"installation_mode":"allowed"},"feolagkacappiaieohahjkeaikhjjcfa":{"installation_mode":"allowed"},"ildbfpaelempeokjfldpclbfggjkhdhl":{"installation_mode":"allowed"},"nhdogjmejiglipccpnnnanhbledajbpd":{"installation_mode":"allowed"},"hicljaeiiajaecppcpfphnibmddpehlk":{"installation_mode":"allowed"},"kpjldaeddnfokhmgdlmpdlecmobaonnj":{"installation_mode":"allowed"},"banejkelfpdmmmfobepfdnbmbbnecnol":{"installation_mode":"allowed"}} - Ahh. its indeed missing the "knowhow" /settings.
Did you create a separate policy/csp for it or did you add it to the existing csp?- What happens when you create a separate policy/csp for it?
