(163) Microsoft Intune - Whitelisting allowed Extensions on Google Chrome and Microsoft Edge

Recently one of my customers wanted to whitelist only allowed extensions, while all other extensions not whitelisted will get blocked by admin.

This can be down by https://intune.microsoft.com/ then select Devices then select By platform: Windows then select Configuration then select Create then select New Policy. Select Platform: Windows 10 and later and Profile type: Settings Catalog

For Microsoft Edge:

Under Settings Catalog, search for:

• Allow specific extensions to be installed: Enabled

  • Extension IDs to exempt from the block list (Device), enter the list of exempted Edge extensions from being blocked:

    • lfochlioelphaglamdcakfjemolpichk

    • acifeljplikjhjobbicjiknoeafjoddh

    • iidhigpgcibnogiedkaaoadofibhfhbe;https://clients2.google.com/service/update2/crx

    • inomeogfingihgjfjlpeplalcfajhgai;https://clients2.google.com/service/update2/crx
      

• Control which extensions cannot be installed: Enabled

  • Extension IDs the user should be prevented from installing (or * for all) (Device)

    • Value is: *

If you have wanted extensions from Google Chrome store, then search for:

• Configure default state of Allow extensions from other stores setting: Enabled

It should look like this:

For Google Chrome:

Under Settings Catalog, search for:

• Configure extension installation allow list: Enabled

  • Extension IDs to exempt from the blocklist (Device), enter the list of exempted Edge extensions from being blocked:

    • bfogiafebfohielmmehodmfbbebbbpei

    • cfmnkhhioonhiehehedmnjibmampjiab

    • inomeogfingihgjfjlpeplalcfajhgai

    • iidhigpgcibnogiedkaaoadofibhfhbe
      

• Configure extension installation blocklist: Enabled

  • Extension IDs the user should be prevented from installing (or * for all) (Device)

    • Value is: *

It should look like this:

Once both policies have been applied, you get these in both Edge and Chrome when the end user attempts to install the extensions that are whitelisted and not whitelisted.

For Microsoft Edge - Keeper is allowed to be installed, while Grammarly is blocked.

For Google Chrome - Keeper is allowed to be installed, while Grammarly is blocked.