Skip to main content
Question

Block all Google Chrome extensions except approved ones

  • June 6, 2018
  • 7 replies
  • 200 views
S
Forum|alt.badge.img+6

Hi,

I am trying to get a config to block all chrome extensions and allow only approved ones as I keep finding.
I found some examples online but I am not too familiar how to proceed, I know the way to setup is in Configuration Profile and Custom Settings, but I don't know the exact way to set that up. here is an example I found but can someone show me how to implement it.

thanks

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DeveloperToolsDisabled</key> <false/> <key>ExtensionInstallBlacklist</key> <array> <string>*
</string> </array> <key>ExtensionInstallWhitelist</key> <array> <!--Docs--> <string>aohghmighlieiainnegkcijnfilokake</string> <!--sheets--> <string>felcaaldnbdncclmgdcncolpebgiejap</string> <!--slides-->
</array>
</dict>
<!--Updated 2018-06-05 Syed-->
</plist>

    7 replies

    B
    Forum|alt.badge.img+12
    • bumbletech
    • Valued Contributor
    • June 6, 2018

    That looks about right. You'll need to save that as a file named "com.google.Chrome.plist", create a new Configuration Profile, and then upload your "com.google.Chrome.plist" file as a part of the "Custom Settings" payload.

    sepiemoini
    Forum|alt.badge.img+19
    • sepiemoini
    • Employee
    • June 6, 2018

    We're using this approach and identically to how @bumbletech explained it. Hope this helps :)

    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>DeveloperToolsDisabled</key>
    <false/>
    <key>ExtensionInstallBlacklist</key>
    <array>
        <!-- ID for Google Chrome Extension - Storyful Multisearch -->
        <string>chjbobecfbckiecmjcfacofliogmekcm</string>
    </array>
</dict>
</plist>

    B
    vcparra
    Forum|alt.badge.img+4
    • vcparra
    • New Contributor
    • July 15, 2022

    We're using this approach and identically to how @bumbletech explained it. Hope this helps :)

    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>DeveloperToolsDisabled</key>
    <false/>
    <key>ExtensionInstallBlacklist</key>
    <array>
        <!-- ID for Google Chrome Extension - Storyful Multisearch -->
        <string>chjbobecfbckiecmjcfacofliogmekcm</string>
    </array>
</dict>
</plist>


    Goal: Force install a, b, c + Uninstall and block future installs of d.

    Using this script, I hoped to achieve that but although it completed in Jamf, it did not uninstall d. Any suggestions?

    <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ExtensionInstallForcelist</key> <array> <string>hdokiejnpimakedhajhdlcegeplioahd</string> <string>glnpjglilkicbckjpbgcfkogebgllemb</string> <string>kgjfgplpablkjnlkjmjdecgdpfankdle</string> </array> <key>DeveloperToolsDisabled</key> <false/> <key>ExtensionInstallBlockList</key> <array> <string>kbfnbcaeplbcioakkpcpgfkobkghlhen</string> </array> </dict> </plist>

     

    kgam
    Forum|alt.badge.img+8
    • kgam
    • Valued Contributor
    • September 12, 2022

    I haven't tried the force install yet but "ExtensionInstallBlocklist" will successfully block (although not uninstall) the specified extensions.

    Tested it with this example and it works as expected to block already installed extentions and block future installs from the Chrome web store.

    Note: The name of the key has changed since the original post.

    <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ExtensionInstallBlocklist</key> <array> <!-- ID for Google Chrome Extension - LastPass --> <string>hdokiejnpimakedhajhdlcegeplioahd</string> <!-- ID for Google Chrome Extension - ProKeys --> <string>ekfnbpgmmeahnnlpjibofkobpdkifapn</string> <!-- ID for Google Chrome Extension - Speedtest --> <string>pgjjikdiikihdfpoppgaidccahalehjh</string> </array> </dict> </plist>

     

    Jasminpatel
    Forum|alt.badge.img
    • Jasminpatel
    • New Contributor
    • June 27, 2024

    You can whitelist Chrome extensions using a configuration profile. The provided code blocks all extensions by default and allows specific ones (Docs, Sheets, Slides in the example) through their IDs (found in the Chrome Web Store URL). Save this code as a .plist file and import it into your MDM tool (recommended) or a configuration profile creator app. Deploy the profile to your devices to enforce the whitelist. Remember to update the whitelist with any new approved extensions.

    F
    Forum|alt.badge.img+4
    • foreverkan
    • Contributor
    • February 19, 2025

    Hello everybody,

    I want to block all extension expect the one. I create plist and deploy with conf. profile. Machine has pulled the profile. But user can still install new extension and keep use installed extension. Where is my mistake? Here is my the plist

     



    J
    Forum|alt.badge.img+8
    • JeffBugbee
    • Contributor
    • February 28, 2025

    Hello everybody,

    I want to block all extension expect the one. I create plist and deploy with conf. profile. Machine has pulled the profile. But user can still install new extension and keep use installed extension. Where is my mistake? Here is my the plist

     




    Whitelist and Blacklist are not the correct keys.

    They should be

    ExtensionInstallBlocklist

    ExtensionInstallAllowlist

    https://chromeenterprise.google/policies/#ExtensionInstallBlocklist

    Terms & ConditionsCookie settingsAccessibility statement