Chrome extension deployment using Intune

Follow the steps below to deploy the Chrome extension using Intune :

1. Sign in to the Microsoft Endpoint Manager admin center
2. Select Devices > Windows > Configuration > Create New Policy.
3. Select ‘Platform’, ‘Windows 10 and later’, and then select ‘Profile type’ “Settings catalog”. Click on the Create button.
4. On the Basics tab, enter a descriptive name, such as Manage Chrome Extension, then select Next. This will manage all extensions for Chrome.
5. In Configuration settings, select “+ Add settings”.
6. Search for “Chrome” and select ‘Google Google Chrome Extensions’ to see all the settings in this category.
7. Select ‘Configure the list of force-installed apps and extensions’. This can be done by user, or by device. After enabling this feature, a blank box will appear.
8. Now, you'll have to enter the Filter extension ID followed by a semicolon and the custom URL designated for your account. This can be found by navigating to Filter Settings page > Account Details > Extension IDs.
9. Navigate back to ‘Settings picker’, select ‘Configure extension installation blocklist' enable this setting and add “*”. This will prevent other extensions from installing in the Chrome browser.
10. In the ‘Settings picker’ select “Extension management settings” for device or user depending on where you are deploying this and enable it on the left. Then add the following string containing the extension ID to the box: {"kfiocjonplkilcjfgabfngiddebalkod":{"override_update_url":true}}
11. In the ‘Settings picker’ select "Control Manifest v2 extension availability. Select enabled and 'Manifest v2 is enabled'.
12. In the ‘Assignments’ section select the device/user groups you want to target.

When the configuration profile is complete, it will take time for the extension to push out for the users. It will depend on the sync frequency between the Windows device and Intune.

If you have a testing device handy, you can find the device and force the sync. Learn more about force syncing in this Microsoft article.

Troubleshooting

If the extension isn't showing up, isn't enabled, or isn't functioning as expected, it is likely you have not enabled extended MV2 support. Your other MV2 extensions likely work because they are grandfathered in.

How do I enable MV2 extensions in the Google Admin Console?

1. Log into the Google Admin Console (admin.google.com).
2. Navigate to Devices > Chrome > Settings.
3. Select Organizational Units (Use either the root OU or specific OUs where Securly extensions are deployed)
4. Under Users & Browsers, go to the Apps & Extensions section.
5. Find the setting for Manifest V2 extension availability
6. Change to Enable manifest v2 extensions
7. Save your changes to ensure the setting is applied.