Docs / Browser extensions
Group Policy Object
How to deploy extensions using GPO
This article explains how to create a new GPO policy, link the policy to an OU (organizational unit), and deploy the Corma extension to any domain-joined computer inside the OU. The Corma extension will be added to any Google Chrome, Microsoft Edge, or Mozilla Firefox browser installed on an OU computer.
GPO only supports Windows. If you're using a Mac computer, you can use Jamf or Kandji instead.
Step 1: Create a new group policy and link to an OU
On a domain-joined server, open Group Policy Management, right-click and select Run as administrator.
Open all folders within Group Policy Management until you see the "Group Policy Objects" folder. Right-click that folder and select New.
In the New GPO pop-up, enter "CormaGPO" for the Name and then select OK.
Right-click your OU from the "Group Policy Management" folder and select Link an Existing GPO. For example, if the domain is "corma.io" and the OU is "Corma-Client", the target computers are in the "Corma-Client" folder.
In the Select GPO pop-up, select the "Corma-GPO" you created and select OK.
Step 2: Download the template for your browser and configure the extension GPO
This step depends on the browser you are using. Find tutorials below.
On chrome
Download the template and configure the extension GPO in Chrome
Download the “policy_templates.zip” template file
Right-click the "policy_templates.zip" file in Explorer, select Rename, and rename it "chrome_policy_templates".
Select the "chrome_policy_templates" file that you just renamed and then select Extract all.
In the Select a Destination and Extract Files pop-up, select Browse, select your "Downloads" folder, and select Extract.
In the "Downloads" folder, open the "chrome_policy_templates" folder that you just extracted, and open the "windows" folder inside it.
In the "windows" folder, open the "admx" folder.
Select the two files named "chrome.admx" and "google.admx", right-click the two files, and select Copy.
Open "C:/Windows" in a new Explorer window, right-click on the "Policy Definitions" folder, and select Paste.
Return to the "admx" folder again, open the "en-US" folder inside that, select the two files named "chrome.adml" and "google.adml", right-click the two files, and select Copy.
Return to the "Policy Definitions" folder again, right-click the "en-US" folder, and select Paste.
Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Google", "Google Chrome", and "Extensions". Then right-click "Configure the list of force-installed apps and extensions" and select Edit.
In the Configure the list of force-installed apps and extensions pop-up, select Enabled, and select Show. In the Show Contents pop-up, paste
iolppafpkhfdepflackhngphhjkocjoa;https://clients2.google.com/service/update2/crx, and select OK.
On Microsoft Edge
Download the template and configure the extension GPO in Edge
In the Download Microsoft Edge Policy File pop-up, select Accept and download.
Open the "MicrosoftEdgePolicyTemplates" file you just downloaded in Explorer and save it to your "Downloads" folder.
Select "MicrosoftEdgePolicyTemplates" file in your "Downloads" folder and then select Extract all.
In the Select a Destination and Extract Files pop-up, select Browse, select your "Downloads" folder, and select Extract.
In the "Downloads" folder, open the "MicrosoftEdgePolicyTemplates" folder that you just extracted, and open the "windows" folder inside it.
In the "windows" folder, open the "admx" folder.
Select the three files named "msedge.admx", "msedgeupdate.admx", and "msdegewebview2.admx", right-click the three files, and select Copy.
Open "C:/Windows" in a new Explorer window, right-click on the "Policy Definitions" folder, and select Paste.
Return to the "admx" folder again, open the "en-US" folder inside that, select the three files named "msedge.admx", "msedgeupdate.admx", and "msdegewebview2.admx", right-click the three files, and select Copy.
Return to the "Policy Definitions" folder again, right-click the "en-US" folder, and select Paste.
Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Microsoft Edge", and "Extensions". Then right-click "Control which extensions are installed silently" and select Edit.
In the Configure the list of force-installed apps and extensions pop-up, select Enabled, and select Show. In the Show Contents pop-up, paste
iolppafpkhfdepflackhngphhjkocjoa, and select OK.
Step 3 (optional): Pin the extension to browser toolbars with GPO
Chrome
Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Google", "Google Chrome", "Extensions", and then “Configure extension management settings”.
Select Enable, and paste the following code for “Configure extension management settings”: {“
iolppafpkhfdepflackhngphhjkocjoa”:{“toolbar_pin”:”force_pinned”}}
Select OK and Apply
Run gpupdate on the server and the client computer.
Check the client computer. The Corma C will appear pinned in the browser toolbar.
Microsoft Edge
Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, “Microsoft Edge”, “Extensions”, and then “Configure extension management settings”.
Select Enable, and paste the following code for “Configure extension management settings”:
{“
iolppafpkhfdepflackhngphhjkocjoa””:{“toolbar_state”:”force_shown”}}
Select OK and Apply
Run gpupdate on the server and the client computer.
Was this helpful?