Extension management settings

Configures extension management settings for Google Chrome.

This policy controls multiple settings, including settings controlled by any existing extension-related policies. This policy will override any legacy policies if both are set.

This policy maps an extension ID or an update URL to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy. With an update URL, configuration will be applied to all extensions with the exact update URL stated in manifest of this extension, as described at https://developer.chrome.com/extensions/autoupdate.

For Windows instances that are not joined to a Microsoft® Active Directory® domain, forced installation is limited to apps and extensions listed in the Chrome Web Store.

See https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings for more information about schema and formatting.

Example value:

{
"abcdefghijklmnopabcdefghijklmnop": {
"blocked_permissions": [
"history"
],
"installation_mode": "allowed",
"minimum_version_required": "1.0.1"
},
"bcdefghijklmnopabcdefghijklmnopa": {
"runtime_blocked_hosts": [
"*://*.example.com"
],
"allowed_permissions": [
"downloads"
],
"update_url": "https://example.com/update_url",
"runtime_allowed_hosts": [
"*://good.example.com"
],
"installation_mode": "force_installed"
},
"update_url:https://www.example.com/update.xml": {
"blocked_permissions": [
"wallpaper"
],
"allowed_permissions": [
"downloads"
],
"installation_mode": "allowed"
},
"cdefghijklmnopabcdefghijklmnopab": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"*": {
"blocked_permissions": [
"downloads",
"bookmarks"
],
"installation_mode": "blocked",
"runtime_blocked_hosts": [
"*://*.example.com"
],
"blocked_install_message": "Custom error message.",
"allowed_types": [
"hosted_app"
],
"runtime_allowed_hosts": [
"*://good.example.com"
],
"install_sources": [
"https://company-intranet/chromeapps"
]
},
"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {
"blocked_install_message": "Custom error message.",
"installation_mode": "blocked"
},
"fghijklmnopabcdefghijklmnopabcde": {
"blocked_install_message": "Custom removal message.",
"installation_mode": "removed"
}
}

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Extension management settings

Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Google\Chrome
Value NameExtensionSettings
Value TypeREG_SZ
Default Value

chrome.admx

Administrative Templates (Computers)

Administrative Templates (Users)