Chrome Extension Disabled Enterprise Policy Override

Micheal Brown 45 Reputation points
2026-10-09T16:37:29.1566667+00:00

Corporate-mandated Chrome extension is automatically disabled by browser security checks. How do we force-install extensions via ExtensionInstallForcelist GPO?

Windows for business | Windows 365 Enterprise
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Hoang Le Huy 560 Reputation points Independent Advisor
    2026-10-09T17:09:56.8066667+00:00

    Hello Micheal Brown,

    If Chrome is automatically disabling a corporate extension, the supported enterprise method is to deploy it through the ExtensionInstallForcelist policy. This policy forces the extension to install silently, grants the required permissions automatically, and prevents users from disabling or uninstalling it through the Chrome interface.

    In Group Policy, import the latest Chrome ADMX templates and configure Computer Configuration > Administrative Templates > Google > Google Chrome > Extensions > Configure the list of force-installed apps and extensions. Add the extension using the format ExtensionID;UpdateURL. For extensions hosted in the Chrome Web Store, the update URL is typically the Chrome Web Store update service, and the extension ID can be obtained from the extension URL or from chrome://extensions while Developer Mode is enabled.

    After applying the GPO, run a policy refresh and verify the result in chrome://policy to confirm that ExtensionInstallForcelist is being received by the client. If the extension is still blocked, review additional policies such as ExtensionSettings, extension blocklists, and Chrome security logs to determine whether the extension has been disabled because it is corrupted, not trusted, or conflicts with enterprise extension management policies.

    If my answer is useful for you, please hit Accept the answer for me please.

    HL.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-09T16:37:42.17+00:00

    Use the Chrome Group Policy setting Configure the list of force-installed extensions.

    Steps:

    1. Open Group Policy Management Editor and go to the target OU.
    2. Navigate to: Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Google > Google Chrome > Extensions The exact path can vary by environment.
    3. Open Configure the list of force-installed extensions.
    4. Set it to Enabled.
    5. Select Show.
    6. Add the extension in this format: 
         <extension-id>;https://clients2.google.com/service/update2/crx
    7. Select OK, then Apply.
    8. Restart Chrome. If policy refresh is delayed, restart the device.

    Example entries from documented deployments:

    echcggldkblhodogklpincgchnpgcdco;https://clients2.google.com/service/update2/crx

    feolagkacappiaieohahjkeaikhjjcfa;https://clients2.google.com/service/update2/crx

    If Microsoft Edge is also in scope, the equivalent forced-install configuration uses ExtensionSettings JSON with installation_mode set to force_installed, and update_url must be defined for Chrome Web Store extensions.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.