Skip to main content

Create Chrome Extension Policy in Intune

This guide shows you how to create a Chrome extension deployment policy using Microsoft Intune's Settings Catalog for Windows 10 and later devices.

Prerequisites​

  • Microsoft Intune administrator access

  • Windows 10 or later devices enrolled in Intune

  • Google Chrome installed on target devices
  • Extension ID and installation URL

Overview​

Using Intune's Settings Catalog, you can:

  • Force install Chrome extensions organization-wide

  • Configure extension-specific policies
  • Manage Chrome browser settings centrally

  • Deploy to specific device groups or entire organization

Step-by-Step Instructions​

1. Navigate to Device Configuration​

  1. Sign in to

    Microsoft Intune admin center

  2. Navigate to Devices > Configuration

2. Create New Policy​

  1. Click Create

  2. Click New Policy

3. Select Platform​

  1. Click on Platform dropdown

  2. Select Windows 10 and later

4. Choose Profile Type​

  1. Click on Profile type dropdown

  2. Select Settings catalog for granular extension management

5. Create Profile​

  1. Click Create a profile…

  2. Click Create to proceed with policy setup

6. Name the Policy​

  1. Enter a descriptive name:

    Anzenna Chrome Extension Policy

  2. (Optional) Add a description explaining the policy's purpose

7. Configure Settings​

  1. Click Next to advance to settings configuration

  2. Click Add settings

8. Search for Chrome Settings​

  1. In the search field, type:

    chrome

  2. Click Search to find relevant Chrome settings

9. Select Extension Configuration​

  1. From the results, expand Google

  2. Click on Google Chrome Extensions

  3. Select Configure the list of force-installed apps and extensions

10. Close and Enable​

  1. Click Close to return to main configuration

  2. Toggle the setting to Enabled

11. Add Installation URL​

  1. In the field List of silently installed extensions, paste your installation URL

Format for Anzenna:

dfgkggkanghelhmebphoccfhkbjcgjoh;https://img.anzenna.ai/extensions/anzenna/manifest.xml

Format breakdown:

  • extension-id - Unique Chrome Web Store identifier

  • ; - Separator

  • update-url - Location of extension manifest

12. Assign to Devices​

  1. Click Next to move to device targeting

  2. Under Assignments, select target groups:

    • All devices
    • Specific device groups
    • Filtered dynamic groups

13. Finalize and Deploy​

  1. Review all settings

  2. Click Next to finish

  3. Click Create to deploy the policy

Deployment Timeline

Extensions deploy upon next device sync with Intune, typically within 8 hours or on device restart.

Example: Deploying Anzenna Extension​

Extension Details for Anzenna​

Extension ID:

dfgkggkanghelhmebphoccfhkbjcgjoh

Installation URL:

dfgkggkanghelhmebphoccfhkbjcgjoh;https://img.anzenna.ai/extensions/anzenna/manifest.xml

Policy Name:

Anzenna Chrome Extension Policy

Complete Configuration String​

When adding to the force-install list:

dfgkggkanghelhmebphoccfhkbjcgjoh;https://img.anzenna.ai/extensions/anzenna/manifest.xml

Verifying Policy Deployment​

Check Policy Status in Intune​

  1. Navigate to Devices > Configuration

  2. Click on your Chrome extension policy

  3. View Device status tab:

    • Successful deployments
    • Pending deployments
    • Failed deployments

Verify on End-User Device​

  1. On a managed Windows device with Chrome, navigate to:

    chrome://policy

  2. Search for ExtensionInstallForcelist

  3. Verify your extension ID appears in the list

  4. Navigate to:

    chrome://extensions

  5. Confirm the extension is installed and managed by organization

Managing Multiple Extensions​

Adding Additional Extensions​

To force install multiple extensions:

  1. Edit the policy

  2. In the force-install list, add multiple entries separated by commas:

extension-id-1;update-url-1,extension-id-2;update-url-2

Example with two extensions:

dfgkggkanghelhmebphoccfhkbjcgjoh;https://img.anzenna.ai/extensions/anzenna/manifest.xml,abcdefghijklmnopqrstuvwxyz123456;https://example.com/manifest.xml

Advanced Configuration​

Additional Chrome Policies​

You can configure other Chrome settings in the same policy:

  • ExtensionSettings - Per-extension configuration

  • BlockedExtensions - Prevent specific extensions

  • AllowedExtensions - Whitelist approach

  • ExtensionInstallBlacklist - Block extension installation

  • HomepageLocation - Set default homepage

  • BookmarkBarEnabled - Control bookmark bar

Example: Extension-Specific Settings​

To add configuration for a specific extension:

  1. Search for ExtensionSettings in Settings Catalog

  2. Enable the setting
  3. Add JSON configuration:
{
"dfgkggkanghelhmebphoccfhkbjcgjoh": {
  "installation_mode": "force_installed",
  "update_url": "https://img.anzenna.ai/extensions/anzenna/manifest.xml",
  "toolbar_pin": "force_pinned"
}
}

Troubleshooting​

Policy Not Applying​

Chrome policy not visible on device:

  • Verify device is enrolled and compliant
  • Check that Chrome is installed
  • Force Intune sync from device

  • Ensure no conflicting Group Policy Objects (GPO)

  • Wait for policy sync cycle (8 hours)

Extension Not Installing​

Extension doesn't appear after policy applies:

  • Verify extension ID is correct
  • Check update URL is accessible
  • Ensure Chrome can reach the manifest URL
  • Review Chrome version compatibility
  • Check network connectivity and proxies

Installation URL Issues​

Invalid format errors:

  • Ensure semicolon separator between ID and URL

  • Remove extra spaces or line breaks
  • Verify HTTPS protocol in URL
  • Check that manifest.xml is accessible

Best Practices​

  1. Test in pilot group - Deploy to small group first

  2. Use descriptive names - Clear policy names for easy management

  3. Document extension IDs - Keep record of all deployed extensions

  4. Regular audits - Review extension deployment quarterly

  5. Monitor compliance - Check deployment reports weekly

  6. Version control - Track policy changes in documentation

  7. Backup configurations - Export policy settings regularly

Policy Management​

Updating Extension Settings​

  1. Edit the existing policy in Intune
  2. Modify the force-install list
  3. Save changes
  4. Policy updates deploy on next sync

Removing Extensions​

To uninstall:

  1. Remove extension entry from force-install list

  2. Save policy
  3. Extension removed on next device sync

Alternatively:

  1. Delete the entire policy
  2. Extensions remain until manually removed

Scope Tags​

Use Intune scope tags to:

  • Limit policy visibility to specific admins
  • Organize policies by department
  • Delegate management responsibilities

Compliance and Reporting​

Built-in Reports​

Access via Reports > Device configuration:

  • Policy assignment status
  • Per-device deployment state
  • Error codes and failure reasons
  • Deployment timeline

Custom Reporting​

Export data for:

  • Executive summaries
  • Compliance documentation
  • Audit requirements
  • Trend analysis

Need help? Contact

Anzenna Support

for assistance.