Extension management settings

Setting the policy controls extension management settings for Google Chrome, including any controlled by existing extension-related policies. The policy supersedes any legacy policies that might be set.

This policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID "*", which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the "update" URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.

Note: For Windows® instances not joined to a Microsoft® Active Directory® domain, forced installation is limited to apps and extensions listed in the Chrome Web Store.
See https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings for more information about schema and formatting.

Example value:

{
"abcdefghijklmnopabcdefghijklmnop": {
"installation_mode": "allowed",
"blocked_permissions": [
"history"
],
"minimum_version_required": "1.0.1",
"toolbar_pin": "force_pinned"
},
"bcdefghijklmnopabcdefghijklmnopa": {
"installation_mode": "force_installed",
"update_url": "https://example.com/update_url",
"allowed_permissions": [
"downloads"
],
"runtime_blocked_hosts": [
"*://*.example.com"
],
"runtime_allowed_hosts": [
"*://good.example.com"
]
},
"cdefghijklmnopabcdefghijklmnopab": {
"installation_mode": "blocked",
"blocked_install_message": "Custom error message."
},
"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {
"installation_mode": "blocked",
"blocked_install_message": "Custom error message."
},
"update_url:https://www.example.com/update.xml": {
"blocked_permissions": [
"wallpaper"
],
"allowed_permissions": [
"downloads"
],
"installation_mode": "allowed"
},
"fghijklmnopabcdefghijklmnopabcde": {
"installation_mode": "removed",
"blocked_install_message": "Custom removal message."
},
"ghijklmnopabcdefghijklmnopabcdef": {
"installation_mode": "force_installed",
"update_url": "https://example.com/update_url",
"override_update_url": true
},
"*": {
"installation_mode": "blocked",
"blocked_permissions": [
"downloads",
"bookmarks"
],
"install_sources": [
"https://company-intranet/chromeapps"
],
"allowed_types": [
"hosted_app"
],
"runtime_blocked_hosts": [
"*://*.example.com"
],
"runtime_allowed_hosts": [
"*://good.example.com"
],
"blocked_install_message": "Custom error message."
}
}

Extension management settings

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\Google\Chrome
Value Name	ExtensionSettings
Value Type	REG_SZ
Default Value