Scripting Question

script to install a Chrome extension?

03/27/2017 10980 views
How does one deploy Chrome extensions these days (Tampermonkey)?  I've tried the group policy registry entry from here, but nothing seems to happen.  https://support.google.com/chrome/a/answer/188453?hl=en  It seems like downloading the crx file is impossible these days too?
0 Comments   [ + ] Show comments


All Answers

I use a Chrome GPO
Computer Configuration -- Administrative Templates -- Google -- Google Chrome -- Extensions

Enable both "Configure the list of force-installed apps an extensions" and "Configure extension installation whitelist"

For "Configure the list of force-installed apps an extensions" the value is


For ""Configure extension installation whitelist"" the value is


ABC, of course, should be replaced by the actual extension ID

Answered 03/27/2017 by: rockhead44
Red Belt

Would that work if you aren't using active directory?  I tried it with local group policy but it didn't seem to do anything.  This page that talks about the registry almost works, except the extension isn't enabled:  https://developer.chrome.com/extensions/external_extensions

Answered 03/27/2017 by: jszabo
Senior White Belt

  • I don't know. I am deploying in an AD environment.
  • I use the registry method without any issues. Can you post your registry keys?
    • [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo]

      Tampermonkey has a lot of extra permissions though. If I use a master_preferences file (with values from a user's manifest.json), it warns about the permissions and disables the extension:

      - Read and change all your data on the websites you visit
      - Display notifications
      - Modify data you copy and paste
      - Manage your apps, extensions, and themes
      • I haven't used that method for installing extension, I use the policy method instead. I'm not sure if that would be any different, however, due to the permissions issues you are experiencing:
      • Oh, I got the impression somewhere that if the computer wasn't joined to a domain, the chrome policy registry keys wouldn't work.
      • https://bugs.chromium.org/p/chromium/issues/detail?id=346386 -- "Note: starting with Chrome 28, policies are loaded directly from the Group Policy API on Windows. Policies manually written to the registry will be ignored. See http://crbug.com/259236 for details." I confirmed this. gpedit.msc works but not regedit. So how do you script that? Plus I believe the powershell group policy module doesn't work with local group policy.
    • Are your computers joined to a domain?
      • Some are, and some aren't. I set the policies via the registry keys so it doesn't matter.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ