script to install a Chrome extension?

How does one deploy Chrome extensions these days (Tampermonkey)?  I've tried the group policy registry entry from here, but nothing seems to happen.  https://support.google.com/chrome/a/answer/188453?hl=en  It seems like downloading the crx file is impossible these days too?

0 Comments   [ + ] Show comments

Answers (2)

Posted by: rockhead44 4 years ago
Red Belt
I use a Chrome GPO
Computer Configuration -- Administrative Templates -- Google -- Google Chrome -- Extensions

Enable both "Configure the list of force-installed apps an extensions" and "Configure extension installation whitelist"

For "Configure the list of force-installed apps an extensions" the value is


For ""Configure extension installation whitelist"" the value is


ABC, of course, should be replaced by the actual extension ID

Posted by: jszabo 4 years ago
Senior White Belt
Would that work if you aren't using active directory?  I tried it with local group policy but it didn't seem to do anything.  This page that talks about the registry almost works, except the extension isn't enabled:  https://developer.chrome.com/extensions/external_extensions

  • I don't know. I am deploying in an AD environment. - rockhead44 4 years ago
  • I use the registry method without any issues. Can you post your registry keys? - chucksteel 4 years ago
    • [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo]

      Tampermonkey has a lot of extra permissions though. If I use a master_preferences file (with values from a user's manifest.json), it warns about the permissions and disables the extension:

      - Read and change all your data on the websites you visit
      - Display notifications
      - Modify data you copy and paste
      - Manage your apps, extensions, and themes - jszabo 4 years ago
      • I haven't used that method for installing extension, I use the policy method instead. I'm not sure if that would be any different, however, due to the permissions issues you are experiencing:
        https://www.chromium.org/administrators/policy-list-3#ExtensionInstallForcelist - chucksteel 4 years ago
      • Oh, I got the impression somewhere that if the computer wasn't joined to a domain, the chrome policy registry keys wouldn't work. - jszabo 4 years ago
      • https://bugs.chromium.org/p/chromium/issues/detail?id=346386 -- "Note: starting with Chrome 28, policies are loaded directly from the Group Policy API on Windows. Policies manually written to the registry will be ignored. See http://crbug.com/259236 for details." I confirmed this. gpedit.msc works but not regedit. So how do you script that? Plus I believe the powershell group policy module doesn't work with local group policy. - jszabo 4 years ago
    • Are your computers joined to a domain? - jszabo 4 years ago
      • Some are, and some aren't. I set the policies via the registry keys so it doesn't matter. - chucksteel 4 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ