Bulk installation for Chrome on PC
- Go to the server that manages the group policies and login.
- Go to the link below and download Google ADM / ADMX templates: http://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
- Extract the files to C:\Google Group Policies Templates\
- Open Group Policy Management.
- Right click on the GPO you want to configure and click Edit.
- Go to Computer Configuration > Policies > Administrative Templates, and right click on Add/Remove Templates
- Click Add and choose the file C:\Google Group Policies Templates\windows\adm\en-US\chrome.adm
- Close the Add/Remove Templates popup.
- Go to Classic Administrative Templates > Google > Google Chrome > Extensions, and, in the right panel, double click Configure the list of forced installed extensions.
- From the radio button, select Enabled.
- In the panel under Options, click Show.
- To the list in a new row, enter the following line: mahfncngjcmmhemjlbdiogjnngdcajab; https://clients2.google.com/service/update2/crx
- Click OK on both the open windows to close them
- Open the run window on the clients' computers (Windows + R).
- Run the command: gpupdate /force
Bulk installation for New Edge on PC
- Download the Edge Administrative Templates from here: https://www.microsoft.com/en-us/edge/business/download You will need to fill out the required fields and click the "GET POLICY FILES" button
- Open Group Policy Management
- Create a new GPO for the policy (or add to an existing policy)
- Right-click your GPO, and select “Edit”
- You will then see the “Group policy management Editor” window
- Expand the Computer/User configuration tree on the left-hand side, depending on how you wish to configure your policy
- Right-click on “Administrative templates” and select “Add/Remove Templates”
- Click on "add"
- Browse to the templates you downloaded in step 1 and open the “msedge.adm” template that is relevant to your operating system and Language.
- Once uploaded, expand to the following path (may vary depending on your OS) on the left of the Group policy management editor: “Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Microsoft Edge > Extensions > ”
- On the right-hand side, select “Control which extensions are installed silently”
- Right-click, and select “Edit”
- Mark the “Enabled” button
- Click the “Show…” button
- Under the “Value” column, enter the following: fpgebigbgnplnghkglogdclngficjjij;https://edge.microsoft.com/extensionwebstorebase/v1/crx (Please make sure you have no blank spaces in the Value Box)
- Click “OK”, followed by “Apply”
- Back in the Group Policy Management window, assign this policy to users/computers as normal
- Users affected by this GPO should now see the Edge extensions installed and enabled automatically (once the GPO has updated on their machine).
- To enable Developer Mode in Windows 10, set the above policies to Enabled and then click Apply followed by OK.
- Reboot your PC to save changes
Common Group Policy Problems and Troubleshooting
- Policies can be attached at different levels of the Active Directory structure, and there is a specific order in which these levels are processed. If there's a conflict on the same setting in multiple policies, the last one applied wins.
- Exceptions to the default order of precendence (such as like 'block', 'enforce', 'loopback') are possible. However, it is usually considered best practice to minimize the use of these. They change the way policies are collectively applied and make things more challenging to troubleshoot.
- Remember that new policies may take time to replicate to additional domain controllers and eventually reach the specified users. Servers in the same geographic site may sync as quickly as 15 minutes. However, the default interval for servers on different sites 3 hours.
- As documented above, we recommend applying these settings to the user rather than the computer for most scenarios. This usually leads to more consistent and predictable results. The 'loopback' option may be useful for situations where you want all users that logon to a specific computer.
If you are not seeing the results you expect, Microsoft offers several utilities for analyzing how multiple Group Policies are applying for a given scenario. This kind of analysis is typically referred to as 'RSoP' (Resultant Set of Policy), and it includes listing which policies are being applied, in which order, which settings each policy contains, and in the case of conflicts - which setting wins.
- Use Rsop.msc to gather computer policy - Windows Server | Microsoft Learn
A point-and-click tool used to display RSoP information. (Not available on all computers)
- gpresult | Microsoft Learn
A command-line tool for Windows that allows you to pull RSoP (Resultant Set of Policy) information for a specified user and / or computer.
- Get-GPResultantSetOfPolicy (GroupPolicy) | Microsoft Learn
A PowerShell command that writes RSoP information for a specified user and / or computer to a file.
Installation using InTune
Microsoft InTune can be used to deploy our extension out to your users or devices. Here are the pertinent differences from the UI in Group Policy Management.
Create the Configuration Profile
- Go to Devices > Policy > Configuration profiles page
- Click Create profile
- Select your Platform
- Select your Profile type (Settings Catalog)
- Click the Create button
- Insert the profile name
- Click Next
- On the next screen, click Add settings
- Search for extension
- Select "Administrative Templates\Google\Google Chrome\Extensions" or "Microsoft Edge\Extensions"
- Select "Configure the list of force-installed apps and extensions" for Chrome or "Control which extensions are installed silently" for Edge.
When ticking the box for the appropriate extension, the screen will change to show additional configuration options:
- Enable the option to Control which extensions are installed silently (Edge) or Configure the list of Force-installed apps and extensions (Chrome)
- Add the appropriate app ID (found earlier in this article). Make sure there is no leading space in the ID
- Click Next until you finally click Create
Confirm the configuration profile has been created:
Assign the appropriate groups to the profile. Once configured, the groups will get the extension on the next sync, which is usually around 2 hours. Click next.
Uninstalling the Application
Need to uninstall VisualSP? Please refer to our Uninstall the Browser Extension support article for details.
For further assistance, please don’t hesitate to reach out to us. We are always here to help! GPO