Skip to main content
Question

Jamf Protect & Browser Extensions?

  • October 4, 2022
  • 2 replies
  • 71 views

Forum|alt.badge.img+7

Just getting started w/ Protect.  Can it also stop the addition or use of browser extensions?

 

Thanks!

-Kevin 

2 replies

AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • 2802 replies
  • October 4, 2022

I would approach this situation with configuration profiles from JAMF Pro (or other MDM). Managing the Browsers should be the best way to accomplish what you need.

 

Most of the modern major browsers can have extensions blocked with a configuration profile. Chrome, FireFox and the such can have extensions whitelisted with configuration profile as well. Safari uses something called App Extensions which require user approval so you cant force install them, but you can block them.

 

 

 

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>DidDisableIndividualExtensionsAfterRemovingOnOffSwitchIfNecessary</key> <true/> <key>ExtensionsEnabled</key> <false/> <key>PayloadDisplayName</key> <string>Safari</string> <key>PayloadIdentifier</key> <string>com.apple.Safari.7EA61148-734F-45EE-B298-88EDD58564AA</string> <key>PayloadType</key> <string>com.apple.Safari</string> <key>PayloadUUID</key> <string>7EA61148-734F-45EE-B298-88EDD58564AA</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDisplayName</key> <string>Untitled</string> <key>PayloadIdentifier</key> <string>B3061D95-81DB-4B11-8215-B12B577DF301</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>B3061D95-81DB-4B11-8215-B12B577DF301</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist>

 

 

 


Forum|alt.badge.img+10
  • Contributor
  • 21 replies
  • January 20, 2023

I would approach this situation with configuration profiles from JAMF Pro (or other MDM). Managing the Browsers should be the best way to accomplish what you need.

 

Most of the modern major browsers can have extensions blocked with a configuration profile. Chrome, FireFox and the such can have extensions whitelisted with configuration profile as well. Safari uses something called App Extensions which require user approval so you cant force install them, but you can block them.

 

 

 

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>DidDisableIndividualExtensionsAfterRemovingOnOffSwitchIfNecessary</key> <true/> <key>ExtensionsEnabled</key> <false/> <key>PayloadDisplayName</key> <string>Safari</string> <key>PayloadIdentifier</key> <string>com.apple.Safari.7EA61148-734F-45EE-B298-88EDD58564AA</string> <key>PayloadType</key> <string>com.apple.Safari</string> <key>PayloadUUID</key> <string>7EA61148-734F-45EE-B298-88EDD58564AA</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDisplayName</key> <string>Untitled</string> <key>PayloadIdentifier</key> <string>B3061D95-81DB-4B11-8215-B12B577DF301</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>B3061D95-81DB-4B11-8215-B12B577DF301</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist>

 

 

 


"Safari uses something called App Extensions which require user approval so you cant force install them, but you can block them."

@AJPinto Can you elaborate on "you can block them"?  I've been looking for a way to block specific Safari extensions and have not had any luck!