How to install the Chrome Extension on Intune

ID: kfiocjonplkilcjfgabfngiddebalkod
Update URL:  https://crextnaut.securly.com/subscribers/{fid}/update-manifest.xml

 

You can find your FID on the Settings page of your filter account. It is the email address at the end of the SmartPAC URL. 

 

Steps:

1. Sign in to the Microsoft Endpoint Manager admin center

2. Select Devices > Windows > Configuration > Create New Policy. 

3. Select ‘Platform’, ‘Windows 10 and later’, and then select ‘Profile type’ “Settings catalog”. Click on the Create button.

4. On the Basics tab, enter a descriptive name, such as Manage Chrome Extension, then select Next. 

*Note this will manage all extensions for Chrome.

5. In Configuration settings, select “+ Add settings”.

6. Search for “Chrome” and select ‘Google Google Chrome Extensions’ to see all the settings in this category. 

7. Select ‘Configure the list of force-installed apps and extensions’.  This can be done by user, or by device.  After enabling this feature, a blank box will appear. Now enter the extension ID followed by a semicolon and the custom URL with no spaces in the box.

8. Navigate back to ‘Settings picker’, select ‘Configure extension installation blocklist' enable this setting and add “*”. This will prevent other extensions from installing in the Chrome browser. 

9. In the ‘Settings picker’ select “Extension management settings” for device or user depending on where you are deploying this and enable it on the left.  Then add the following string to the box: {"kfiocjonplkilcjfgabfngiddebalkod":{"override_update_url":true}}

 

 

10. In the ‘Settings picker’ select "Control Manifest v2 extension availability.  Select enabled and 'Manifest v2 is enabled'.

11. In the ‘Assignments’ section select the device/user groups you want to target. 

When the configuration policy is complete, it will take time for the extension to push out for the users. It will depend on the sync frequency between the Windows device and InTune. If you have a testing device handy, you can find the device and force the sync. Learn more about that here.

 

Troubleshooting

Extension is missing or not functioning as expected

If the extension isn't showing up, isn't enabled, or isn't functioning as expected, it is likely you have not enabled extended MV2 support. Your other MV2 extensions likely work because they are grandfathered in.  

How do I enable MV2 extensions in the Google Admin Console?

1. Log into the Google Admin Console (admin.google.com).
2. Navigate to Devices > Chrome > Settings.
3. Select Organizational Units (Use either the root OU or specific OUs where Securly extensions are deployed).
4. Under Users & Browsers, go to the Apps & Extensions section.
5. Find the setting for Manifest V2 extension availability
6. Change to Enable manifest v2 extensions
7. Save your changes to ensure the setting is applied.

•  

Extension is not working in ChromeOS 140+

In ChromeOS 140 and higher, Google has changed the way it enforces the Chrome Sync policy, resulting in the Securly extension lacking the necessary permissions to function properly. If extension syncing is not enabled from the Google Admin Console and a student disables sync for extensions from their browser settings, the extension doesn't function properly. To ensure extension syncing is active, follow the below steps: 

1. In Google admin console, navigate to Devices > Chrome > Settings > Users & browsers > Other settings > Chrome Sync (ChromeOS).
   
2. Ensure the ‘Allow Chrome Sync’ configuration is selected.
   
3. Uncheck ‘Extensions’ from the section for excluded sync types to ensure extensions are included in sync.