I was able to get the Google Chrome Extension Blacklist up and running without issue, and it is working great. The second I block one extension, the students move on to another, so I am hoping to do the reverse and block everything and allow just a few. I thought that it would be an easy fix to change the key from <ExtensionInstallBlacklist> to <ExtensionInstallWhitelist>, but that isn't working. Has anyone had success with a specific script that you could share? I have spent time browsing the community posts, and most are from several years ago.
Just for reference, this is the Blacklist Script I am using:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<dict> <key>DeveloperToolsDisabled</key> <true/> <key>ExtensionInstallBlacklist</key> <array> <string>mkccemimdjbojildcllapppfhphcfmkn</string> <string></string> </array>
Thanks in advance for any help, I am newer to JAMF and took over for someone that was let go and left things a bit of a mess.
@jarredondo You can use a schema in 10.19 in a config profile to blacklist all extensions and then you can set a whitelist for them. it is easier to use this than to have to rewrite the plist file for every extension.
That is my small json that can be put into the config profile.
@a.hebert Thank you so much for sharing this. I really appreciate it. I got it set up to the point where I enter the entries. This is probably a really stupid question, but do I put the extension ID in this field for the whitelist? What do I put in the blacklist to
block all of them? Again, so sorry for the dumb questions and thanks for the help.
This JSON is great! I am guessing that putting an asterisk for the other items like "Allow Outdated Plugins" will not allow them in the same way it will block "everything"?
Will this also work for Google Chrome Applications? We'd like to Whitelist those as well. If I am wrong in that deduction please feel free to correct me :)
Thank you in advance!
It is definitely Monday... I have this configured and used the asterisk in the black and white list as our InfoSec wants all blocked for now. I am still able to install Extensions... What the heck am I doing wrong? Thanks
Chrome updated the names for the extension block/white/allow lists. Edit the Schema file to change the names, then add the new categories using the 'add/remove properties' button.
ExtensionInstallBlacklist = ExtensionInstallBlocklist
ExtensionInstallWhitelist = ExtensionInstallAllowlist
ExtensionInstallForcelist can force extensions to all computers