Deploying the Edge Extension with GPO

Follow the steps below to deploy the Filter Crome Extension with GPO:

1. Download the ADMX templates and follow these instructions to deploy to your domain or to your workstation.

   

2. In your Group Policy Editor, go to Computer Configuration or User Configuration) > Policies > Administrative Templates > Microsoft Edge.

3. Select Extensions.

• Go to 'Control which extensions are installed silently (ExtensionInstallForcelist)' and include the Securly Edge extension and any other mandatory extensions.

  

  For the Securly extension, enter the extension ID followed by a semicolon and the custom URL with no spaces. This can be found by navigating to Filter Settings page > Account Details.

• Select 'Configure Enable Extension management settings' and enable Override Update URL by using the following data in the box: {"bmlalgfmolfmkjmnikbphgijefopggme":{"override_update_url":true}}

  

• Enable “Control Manifest v2 extension availability” and set to "Manifest v2 is enabled"

  

• "Control which extensions cannot be installed" [ExtensionInstallBlocklist] can be used to block all other extensions (such as VPNs or proxies)

1. “Hide the First-run experience and splash screen” can be disabled.

   

2. Diable “Configure InPrivate mode availability” [InPrivateModeAvailability]

3. Disable “Enable guest mode” [BrowserGuestModeEnabled].

4. Disable “Enable ending processes in the Browser task manager” [TaskManagerEndProcessEnabled]/

5. “Browser sign-in settings” [BrowserSignin] may be used to force users to sign in to the browser. This can help with other Office apps.

6. Disable “Control where developer tools can be used” [DeveloperToolsAvailability].

7. "Restrict which accounts can be used to sign in to Microsoft Edge" [RestrictSigninToPattern] can be used to prevent students signing in to Edge with a personal Microsoft account, a known circumvention route for extension-based filtering. Enter a regex matching your managed domain(s), e.g. .*@yourdomain.edu.au.