Jamf Protect & Browser Extensions?

[kevin_neely]

Just getting started w/ Protect.  Can it also stop the addition or use of browser extensions?

Thanks!

-Kevin 

[AJPinto]

I would approach this situation with configuration profiles from JAMF Pro (or other MDM). Managing the Browsers should be the best way to accomplish what you need.

Most of the modern major browsers can have extensions blocked with a configuration profile. Chrome, FireFox and the such can have extensions whitelisted with configuration profile as well. Safari uses something called App Extensions which require user approval so you cant force install them, but you can block them.

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>DidDisableIndividualExtensionsAfterRemovingOnOffSwitchIfNecessary</key>

<true/>

<key>ExtensionsEnabled</key>

<false/>

<key>PayloadDisplayName</key>

<string>Safari</string>

<key>PayloadIdentifier</key>

<string>com.apple.Safari.7EA61148-734F-45EE-B298-88EDD58564AA</string>

<key>PayloadType</key>

<string>com.apple.Safari</string>

<key>PayloadUUID</key>

<string>7EA61148-734F-45EE-B298-88EDD58564AA</string>

<key>PayloadVersion</key>

<integer>1</integer>

</dict>

</array>

<key>PayloadDisplayName</key>

<string>Untitled</string>

<key>PayloadIdentifier</key>

<string>B3061D95-81DB-4B11-8215-B12B577DF301</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<string>B3061D95-81DB-4B11-8215-B12B577DF301</string>

<key>PayloadVersion</key>

<integer>1</integer>

</dict>

</plist>

[tzeilstra]

"Safari uses something called App Extensions which require user approval so you cant force install them, but you can block them."

@AJPinto Can you elaborate on "you can block them"?  I've been looking for a way to block specific Safari extensions and have not had any luck!