Edge - Extensions - Developer and other store toggle

%3CLINGO-SUB%20id%3D%22lingo-sub-1165860%22%20slang%3D%22en-US%22%3EEdge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1165860%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20set%20the%20following%20policy%3A%3C%2FP%3E%3CP%3EMicrosoft%20Edge%5CExtensions%5CControl%20which%20extensions%20cannot%20be%20installed%20-%20Enabled%20-%20*%3C%2FP%3E%3CP%3EThis%20to%20block%20all%20extensions%20which%20we%20do%20not%20whitelist.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENext%20to%20that%20we%20set%20the%20following%20setting%3A%3C%2FP%3E%3CP%3EMicrosoft%20Edge%5CExtensions%5CAllow%20specific%20extensions%20to%20be%20installed%20-%20enabled%20-%20%7BGUID%7D%3C%2FP%3E%3CP%3ETo%20whitelist%20all%20the%20guids%20we%20want%20to%20whitelist.%20This%20also%20includes%20guids%20from%20the%20Google%20Chrome%20webstore.%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20works%20perfectly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20what%20I%20didn't%20find%2C%20is%20a%20policy%20to%20control%20the%20following%20settings%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Annotation%202020-02-11%20083435.png%22%20style%3D%22width%3A%20472px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F170259i4A535A91E557CFC6%2Fimage-dimensions%2F472x536%3Fv%3D1.0%22%20width%3D%22472%22%20height%3D%22536%22%20title%3D%22Annotation%202020-02-11%20083435.png%22%20alt%3D%22Annotation%202020-02-11%20083435.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20would%20be%20nice%20to%20have%20control%20over%20those%20toggles.%3C%2FP%3E%3CP%3EProcmon%20didn't%20deliver%20any%20results%2C%20so%20I%20guess%20this%20is%20save%20somewhere%20in%20a%20config%20file%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1231944%22%20slang%3D%22en-US%22%3ERe%3A%20Edge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1231944%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318153%22%20target%3D%22_blank%22%3E%40ashishpoddar%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20the%20reply.%3C%2FP%3E%3CP%3EI%20know%20those%20are%20for%20the%20end-user%2C%20but%20as%20a%20system%20administrator%20it%20would%20be%20nice%20to%20have%20control%20over%20those%20toggles.%3C%2FP%3E%3CP%3EThis%20to%20have%20a%20predictable%20outcome.%3C%2FP%3E%3CP%3EFor%20example%2C%20we%20do%20not%20want%20developers%20to%20side%20load%20their%20own%20extensions%20in%20the%20browser.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20yes%2C%20it%20would%20be%20nice%20to%20have%20a%20GPO%20for%20managing%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1231892%22%20slang%3D%22en-US%22%3ERe%3A%20Edge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1231892%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F155477%22%20target%3D%22_blank%22%3E%40Matthias%20Vandenberghe%3C%2FA%3E%26nbsp%3BHi%20Matthias.%20These%20two%20toggle%20are%20primarly%20for%20the%20end%20users%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ea)%20Developer%20mode%20is%20only%20required%20if%20someone%20is%20developing%20an%20extension%20and%20wants%20to%20test%20it%20by%20sideloading%20the%20extension.%20We%20do%20not%20recommend%2C%20enabling%2Fdisabling%20this%20by%20policy%2C%20as%20it%20is%20a%20very%20sparse%20use%20case%20any%20way.%20Moreover%2C%20developers%20understand%20this%20as%20a%20similar%20option%20has%20been%20available%20in%20Google%20Chrome%20for%20a%20while.%20(Also%20note%20that%20if%20you%20set%20the%20policy%20%22%3CSPAN%3EControl%20which%20extensions%20cannot%20be%20installed%20-%20Enabled%20to%20%22*%22%2C%20it%20is%20implied%20that%20%3CU%3Eeven%20developers%20cannot%20side%20load%20any%20extensions%3C%2FU%3E)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eb)%20Allow%20extensions%20from%20other%20stores%3A%20is%20a%20setting%20for%20users%20to%20turn%20on%2C%20in%20case%20they%20want%20to%20install%20extensions%20from%20other%20stores%20such%20as%20Chrome%20Web%20Store.%20However%20since%20a%20large%20number%20of%20developers%20have%20already%20published%20their%20extensions%20to%20Microsoft%20Edge%20addons%20website%20(and%20more%20on%20the%20way)%2C%20we%20expect%20that%20most%20users%20will%20not%20need%20it.%20Also%2C%20in%20case%20the%20toggle%20is%20turned%20off%2C%20and%20users%20go%20to%20install%20an%20extension%20from%20Chrome%20Web%20Store%20they%20see%20a%20prominent%20message%20asking%20them%20to%20turn%20this%20on%3A%26nbsp%3B%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorashishpoddar_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20id%3D%22tinyMceEditorashishpoddar_1%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Chrome%20store%20banner.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F177334i0DAA862905D93655%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Chrome%20store%20banner.png%22%20alt%3D%22Chrome%20store%20banner.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDo%20you%20still%20think%20there%20is%20a%20need%20for%20a%20policy%20for%20%22Allow%20extensions%20from%20other%20stores%22%3F%20Are%20there%20users%20who%20are%20complaining%20that%20this%20workflow%20is%20an%20issue%3F%20Would%20be%20great%20to%20know%20exact%20user%20feedback%20so%20that%20we%20can%20fix%20the%20core%20issue%20as%20well.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1232039%22%20slang%3D%22en-US%22%3ERe%3A%20Edge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1232039%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F155477%22%20target%3D%22_blank%22%3E%40Matthias%20Vandenberghe%3C%2FA%3E%26nbsp%3BI%20forgot%20to%20mention%20in%20my%20note%20(edited%20now)%20that%2C%20when%20you%20enable%20policy%26nbsp%3B%3CSPAN%3E%3CU%3EControl%20which%20extensions%20cannot%20be%20installed%3C%2FU%3E%20(%3C%2FSPAN%3E%3CSPAN%3EExtensionInstallBlockList%20%3C%2FSPAN%3E%3CSPAN%3E)%20and%20set%20it%20to%20%22*%22%2C%20even%20developers%20cannot%20install%20extensions.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3ESo%20having%20a%20policy%20to%20control%20toggle%20%22Developer%20mode%22%20will%20conflict%20with%20that%20policy.%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1232070%22%20slang%3D%22en-US%22%3ERe%3A%20Edge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1232070%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20chiming%20in%20here%20to%20cross-link%20the%20other%20thread%20over%20at%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fdiscussions%2Fedge-policy-req-allow-extensions-from-other-stores%2Fm-p%2F1231900%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fdiscussions%2Fedge-policy-req-allow-extensions-from-other-stores%2Fm-p%2F1231900%3C%2FA%3E%26nbsp%3Bwhere%20practically%20the%20same%20discussion%20is%20going%20on.%20I've%20posted%20there%20some%20arguments%20for%20why%20we%20need%20GPOs%20for%20those%20switches.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1234035%22%20slang%3D%22en-US%22%3ERe%3A%20Edge%20-%20Extensions%20-%20Developer%20and%20other%20store%20toggle%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1234035%22%20slang%3D%22en-US%22%3E%22Allow%20extensions%20from%20other%20stores%22%20automatically%20shows%20up%2C%20users%20can%20simply%20select%20it.%20that%20is%20if%20they%20want%20to%20install%20extensions%2FAddons%20from%20other%20sources.%3CBR%20%2F%3Eof%20course%20Microsoft's%20extension%20store%20is%20quickly%20getting%20populated.%20more%20than%201000%20items%20and%20growing%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftedge.microsoft.com%2Faddons%2Fcategory%2FEdgeExtensionsEditorsPick%3Fhl%3Den-US%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftedge.microsoft.com%2Faddons%2Fcategory%2FEdgeExtensionsEditorsPick%3Fhl%3Den-US%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

Hi all,

 

We set the following policy:

Microsoft Edge\Extensions\Control which extensions cannot be installed - Enabled - *

This to block all extensions which we do not whitelist.

 

Next to that we set the following setting:

Microsoft Edge\Extensions\Allow specific extensions to be installed - enabled - {GUID}

To whitelist all the guids we want to whitelist. This also includes guids from the Google Chrome webstore. 

This works perfectly.

 

Now, what I didn't find, is a policy to control the following settings:

Annotation 2020-02-11 083435.png

 

It would be nice to have control over those toggles.

Procmon didn't deliver any results, so I guess this is save somewhere in a config file now.

 

5 Replies

@Matthias Vandenberghe Hi Matthias. These two toggle are primarly for the end users:

 

a) Developer mode is only required if someone is developing an extension and wants to test it by sideloading the extension. We do not recommend, enabling/disabling this by policy, as it is a very sparse use case any way. Moreover, developers understand this as a similar option has been available in Google Chrome for a while. (Also note that if you set the policy "Control which extensions cannot be installed - Enabled to "*", it is implied that even developers cannot side load any extensions)

 

b) Allow extensions from other stores: is a setting for users to turn on, in case they want to install extensions from other stores such as Chrome Web Store. However since a large number of developers have already published their extensions to Microsoft Edge addons website (and more on the way), we expect that most users will not need it. Also, in case the toggle is turned off, and users go to install an extension from Chrome Web Store they see a prominent message asking them to turn this on: 

 
 

Chrome store banner.png

 

 

Do you still think there is a need for a policy for "Allow extensions from other stores"? Are there users who are complaining that this workflow is an issue? Would be great to know exact user feedback so that we can fix the core issue as well.

 

 

Hi @ashishpoddar ,

 

Thanks for the reply.

I know those are for the end-user, but as a system administrator it would be nice to have control over those toggles.

This to have a predictable outcome.

For example, we do not want developers to side load their own extensions in the browser.

 

So yes, it would be nice to have a GPO for managing this.

@Matthias Vandenberghe I forgot to mention in my note (edited now) that, when you enable policy Control which extensions cannot be installed (ExtensionInstallBlockList ) and set it to "*", even developers cannot install extensions.

 

So having a policy to control toggle "Developer mode" will conflict with that policy.  

 

 

Just chiming in here to cross-link the other thread over at https://techcommunity.microsoft.com/t5/discussions/edge-policy-req-allow-extensions-from-other-store... where practically the same discussion is going on. I've posted there some arguments for why we need GPOs for those switches.

"Allow extensions from other stores" automatically shows up, users can simply select it. that is if they want to install extensions/Addons from other sources.
of course Microsoft's extension store is quickly getting populated. more than 1000 items and growing
https://microsoftedge.microsoft.com/addons/category/EdgeExtensionsEditorsPick?hl=en-US