How to Push Chrome Extension on Intune

ID: kfiocjonplkilcjfgabfngiddebalkod
Update URL:  https://crextnaut.securly.com/subscribers/{fid}/update-manifest.xml

You can find your FID on the Settings page of your filter account. It is the email address at the end of the SmartPAC URL. 

Steps:

1. Sign in to the Microsoft Endpoint Manager admin center

2. Select Devices > Windows > Configuration > Create New Policy. 

3. Select ‘Platform’, ‘Windows 10 and later’, and then select ‘Profile type’ “Settings catalog”. Click on the Create button.

4. On the Basics tab, enter a descriptive name, such as Manage Chrome Extension, then select Next. 

*Note this will manage all extensions for Chrome.

5. In Configuration settings, select “+ Add settings”.

6. Search for “Chrome” and select ‘Google Google Chrome Extensions’ to see all the settings in this category. 

7. Select ‘Configure the list of force-installed apps and extensions’.  This can be done by user, or by device.  After enabling this feature, a blank box will appear. Now enter the extension ID followed by a semicolon and the custom URL with no spaces in the box.

8. Navigate back to ‘Settings picker’, select ‘Configure extension installation blocklist' enable this setting and add “*”. This will prevent other extensions from installing in the Chrome browser. 

9. In the ‘Settings picker’ select “Extension management settings” for device or user depending on where you are deploying this and enable it on the left.  Then add the following string to the box: {"kfiocjonplkilcjfgabfngiddebalkod":{"override_update_url":true}}

10. In the ‘Assignments’ section select the device/user groups you want to target. 

When the configuration policy is complete, it will take time for the extension to push out for the users. It will depend on the sync frequency between the Windows device and InTune. If you have a testing device handy, you can find the device and force the sync. Learn more about that here.

Troubleshooting

If the extension isn't showing up, isn't enabled, or isn't functioning as expected, it is likely you have not enabled extended MV2 support. Your other MV2 extensions likely work because they are grandfathered in.  

How do I enable MV2 extensions in the Google Admin Console?

• • Log into the Google Admin Console (admin.google.com).
  • Navigate to Devices > Chrome > Settings.
  • Select Organizational Units (Use either the root OU or specific OUs where Securly extensions are deployed)
  • Under Users & Browsers, go to the Apps & Extensions section.
  • Find the setting for Manifest V2 extension availability
  • Change to Enable manifest v2 extensions
  • Save your changes to ensure the setting is applied.