Google Chrome GPO Force install of Extensions

[fiza]

I am trying to lock down our Chrome install for students using Group Policy. I have the Chrome templates and I have blacklisted all extensions by using '*' as the wildcard. The blacklist works as when I test it I cant install any extensions. I want to force install a couple of extensions but I have tried adding in the IDs into the GPO but it never deploys. From what I understood I just need to add in the ID of the extension which I could get from an account that had it installed by switching on developer mode.

 

Does anyone know how I can force install extensions using GP whilst blacklisting all others?

[fiza]

Sorted : I had to add in the ID of the extension followed by ;https://clients2.google.com/service/update2/crx

[ITGuyNW]

When I do it, it is literally

 

Policies > Administrative Templates > Classic Administrative Templates > Google > Google Chrome > Extensions- On the right-hand side, select 'Configure the list of force-installed extensions'- Right-click and select 'Edit'- Select the 'Enabled' option- Click on 'Show'- Under the 'Value' column, enter the following string:gblkchompccdlgleecnffhlefbhejhhb;https://clients2.google.com/service/update2/crx (example)- Click on 'OK', followed by 'Apply'

 

I probably wouldn't blacklist extensions as that it is why it won't deploy. You want to ban urls instead.

Edited December 1, 2016 by ITGuyNW

[Arthur]

I probably wouldn't blacklist extensions as that it is why it won't deploy.

The whitelist takes precedence over the blacklist when it contains * so extensions specified there will still install.

[fiza]

The whitelist takes precedence over the blacklist when it contains * so extensions specified there will still install.

 

That they do! Just tested and its all working.