Posted on 03-25-2020 09:56 PM
Trying to deploy extensions via DMG, but everytime I deploy it and I launch Chrome, the extension simply disappears from the folder... anyone have any idea why?
Solved! Go to Solution.
Posted on 03-26-2020 10:41 PM
@danny.gutman, let's see if we can take advantage of one of Jamf Pro 10.19's new features to make this easier.
First, if you already have configuration profiles for Google Chrome but they don't include the ExtensionInstallForcelist
key, then you can deploy this new configuration profile side-by-side with yours and it won't conflict.
Scope and save to deploy to your Macs. When you launch Google Chrome and view your extensions, you should see your new extension appear in just a few seconds.
Posted on 03-26-2020 01:05 PM
How are you trying to install the extension? I've found a configuration profile works best.
This one is for Okta, but you can use it as a guide. On your Mac, enable Developer mode in Google Chrome and you should see the extension's ID. Replace the one at the beginning of the value below, just before the semi-colon.
Domain: com.google.Chrome
Key: ExtensionInstallForcelist
Value: glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx
Posted on 03-26-2020 01:15 PM
@talkingmoose, sure, I can find the extension ID, no problem, and I found the payload for the Config Profile.... but I'm not sure how to create the plist. I see the current plist for Google Chrome has values in it already.... does the plist I create overwrite those? Is the plist modified everytime I use Chrome?
Posted on 03-26-2020 10:41 PM
@danny.gutman, let's see if we can take advantage of one of Jamf Pro 10.19's new features to make this easier.
First, if you already have configuration profiles for Google Chrome but they don't include the ExtensionInstallForcelist
key, then you can deploy this new configuration profile side-by-side with yours and it won't conflict.
Scope and save to deploy to your Macs. When you launch Google Chrome and view your extensions, you should see your new extension appear in just a few seconds.
Posted on 06-22-2023 12:49 PM
You're the best! New Jamf admin here 👋 and this was a great guide on configuring and testing out my first extension.
Posted on 07-14-2023 12:35 PM
Super helpful!!👍🏽
Posted on 04-02-2020 01:39 AM
@talkingmoose A big thank you for your post, solved my issue deploying Chrome Remote Desktop which I had been struggling with for a while!
Posted on 04-02-2020 07:21 AM
@talkingmoose Thanks !! I used your instructions to deploy a Grid Extension for Google Meet. Appreciate it
Posted on 04-02-2020 07:42 AM
Absolutely brilliant @talkingmoose, thank you so much.
Posted on 04-10-2020 08:40 AM
@talkingmoose is the updated link to the JSON this: https://github.com/talkingmoose/jamf-manifests/blob/master/Google%20Chrome%20Extensions%20(com.google.Chrome).json ?
Posted on 04-10-2020 10:03 AM
Thanks, @krispayne! Yes, that's it. Did a little housekeeping and renamed it without thinking.
I've updated the link in my original reply but you can also find it here:
Posted on 06-06-2020 11:45 AM
@talkingmoose Thank you for your post! It was extremely helpful. I was also wondering if there's a way to deploy extensions for Firefox and Safari using this method?
Posted on 07-20-2020 06:18 AM
@talkingmoose Thanks for the post - it made deploying a chrome extension a breeze!
Posted on 07-22-2020 09:42 AM
Thanks @talkingmoose Works great. Now I am looking for a way to block extension.
Posted on 07-28-2020 11:03 AM
Hi @talkingmoose
This seems to be using force_installed as installation_mode, since I'm not able to remove the extension once it's installed.
How can I use normal_installed as installation_mode?
Posted on 07-29-2020 11:18 AM
@SoundCloud, not sure what you mean by "force_installed" and "normal_installed". If you're referring to the old MCX settings of "Once", "Often" or "Always", Apple and Jamf only support profiles as "Always".
If you're referring to something else, point me in the right direction and I'll take a look.
Posted on 07-30-2020 04:14 AM
Hi @talkingmoose Sorry, I didn't not explain properly, here is more context;
I am using your "Custom Schema" to deploy a Chrome extension, however the scheme is using the ExtensionInstallForcelist policy which apparently is setting the installation mode to:
force_installed - Automatically install extensions that you specify without user interaction. Users can’t disable or remove them. You also need to define the extension download location.
On the below link, It is mentioned that we could use the ExtensionSettings policy and use the installation mode normal_installed, which in this case will allow users to remove the extension if they want, however I couldn't make it running.
https://support.google.com/chrome/a/answer/7517624
Posted on 11-12-2020 01:49 AM
Hello @talkingmoose . Thank you I was able to push the extension. Now I am looking to remove the extension and then remove the configuration file created. Could you please help me with the steps?
Posted on 11-18-2020 08:16 PM
@VinV, from what I see in my testing, simply removing the configuration profile and restarting the browser app will remove the extensions.
Posted on 04-26-2021 08:03 AM
Thanks for your help @talkingmoose quick question from me. Our proxy blocks access to the Chrome Web Store so any download of a chrome extension is blocked. Any idea what I would need to package and deploy along with the above Config Profile to make the extension work?
Posted on 04-26-2021 01:44 PM
@gkofos, I'm not sure how easy Google is making manual deployments with the latest versions of Chrome. From what I've read, they're making it more difficult. My advice is to not fight any software developer when they're steering you down a certain path (in this case installing directly from the Chrome store).
I believe you can set a configuration profile to disable your end users from installing their own extensions. If you can do that, I would speak with your proxy folks, tell them you can manage the profiles that get installed and then ask they lift the block in the proxy.
Google may have other methods they endorse for installing extensions. I suggest following their guidance.
Posted on 06-25-2021 02:15 AM
@talkingmoose thank you so much for your detailed explanation of how to push a Chrome extension via Jamf.
But now I would like to reverse it, so remove the same Chrome extension via Jamf. How can I do that?
EDIT: I was just blind, removing the configuration profile + restart Chrome worked!
Posted on 08-11-2021 09:39 AM
Jamf should clone @talkingmoose, we need more of him. 🙂
Posted on 08-11-2021 10:19 AM
Yep, we need a herd of mooses here!
07-15-2022 08:20 PM - edited 07-15-2022 08:21 PM
@talkingmoose thank you for the JSON, worked great. I see others have commented on removing the extensions, however my case seems a bit different. I would like to Forcelist extensions a and b, however Blocklist extension c. I attempted to modify your JSON (see below) to fit this goal, but it is giving me a syntax error. Please advise.
I read that the Blocklist will "disable already installed extensions if blocked, without a way for the user to enable them." During testing (chrome://policy), the Forcelist was applied, however the Blocklist was not. I manually deleted extension c and at that point, the Blocklist policy was applied and I was unable to reinstall extension c. Ideally, I would like extension c to be uninstalled completely, but at the very least it be disabled as stated in the policy. Any suggestions? Perhaps I needed to give it more time?
{
"title": "Google Chrome Extensions (com.google.Chrome)",
"description": "Install extensions in Google Chrome",
"__feedback": "bill@talkingmoose.net",
"properties": {
"ExtensionInstallForcelist": {
"title": "Extension Install Forcelist",
"description": "Add extension IDs. Paste the extension ID in front of the default text.",
"property_order": 5,
"type": "array",
"items": {
"title": "Extension ID",
"default": "<paste extension ID here>;https://clients2.google.com/service/update2/crx",
"type": "string",
"ExtensionInstallBlocklist": {
"title": "Extension Install Blocklist",
"description": "Add extension IDs. Paste the extension ID in front of the default text.",
"property_order": 6,
"type": "array",
"items": {
"title": "Extension ID",
"default": "<paste extension ID here>;https://clients2.google.com/service/update2/crx",
"type": "string"
}
}
}
}
Any help would be much appreciated.
Posted on 07-16-2022 10:27 AM
@vcparra Speaking strictly on the formatting of the JSON snippet posted you are missing the } needed to close your ExtensionInstallForcelist as well as the "items" list contained in the ExtensionInstallForcelist. You also need to remove the , from the end of the "type" line in that "items" list because the , indicates there will be additional lines. With those changes your JSON would like like:
{
"title": "Google Chrome Extensions (com.google.Chrome)",
"description": "Install extensions in Google Chrome",
"__feedback": "bill@talkingmoose.net",
"properties": {
"ExtensionInstallForcelist": {
"title": "Extension Install Forcelist",
"description": "Add extension IDs. Paste the extension ID in front of the default text.",
"property_order": 5,
"type": "array",
"items": {
"title": "Extension ID",
"default": "<paste extension ID here>;https://clients2.google.com/service/update2/crx",
"type": "string"
}
}
"ExtensionInstallBlocklist": {
"title": "Extension Install Blocklist",
"description": "Add extension IDs. Paste the extension ID in front of the default text.",
"property_order": 6,
"type": "array",
"items": {
"title": "Extension ID",
"default": "<paste extension ID here>;https://clients2.google.com/service/update2/crx",
"type": "string"
}
}
}
}
Posted on 07-16-2022 04:28 PM
@sdagley still getting the "JSON format is incorrect. Validate the content and fix errors to continue." from your corrections.
Posted on 07-16-2022 04:35 PM
Needed a , after the } on line 16. Thank you!!
Posted on 10-27-2022 07:58 AM
Hi all, This is works fine.
I discovered meanwhile that user can disable the extension in incognito mode !! Is there a way to add the config profile inorder to force the extension "incognito mode" or even disable "incognito mode" ? Thanks
Posted on 05-04-2023 01:26 PM
Hey there!
I have been using this to deploy a OKTA extension and the google chrome remote desktop extension and it has worked wonders for over a year.
Unfortunately, recently the google chrome remote desktop extension is no longer installing while the OKTA one continues to work great. Any idea of what I can do to get the google chrome remote desktop extension working again?
I have tried to remake the config profile and made sure that the extension ID did not change but still it will not work. This just seems strange that it works for OKTA but not the other.