Would you like to learn how to use a group policy to disable the installation of extensions on the Google Chrome browser? In this tutorial, we will show you how to prevent the installation of Google Chrome extensions on all computers in the domain.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7

Hardware List:

The following section presents the list of equipment used to create this tutorial.

Every piece of hardware listed above can be found at Amazon website.

Tutorial GPO – Disable the  installation of Extensions on Google Chrome

On the domain controller, download the latest version of the Google Chrome template.

GPO - Google Chrome policy template

Extract the ZIP file named POLICY_TEMPLATES.

In our example, all files were placed on the root of a directory named DOWNLOADS.

Gpo - Google Chrome template

Access the directory named WINDOWS and copy the ADMX files to the Policy definitions directory.

Copy to Clipboard

Access the correct language subdirectory.

Copy the ADML files to the correct language directory inside the Policy definitions.

Copy to Clipboard

On the domain controller, open the group policy management tool.

Windows 2012 - Group Policy Management

Create a new group policy.

Windows 2012 - Group Policy Objects

Enter a name for the new group policy.

Windows - Add GPO

In our example, the new GPO was named: MY-GPO.

On the Group Policy Management screen, expand the folder named Group Policy Objects.

Right-click your new Group Policy Object and select the Edit option.

Windows - Edit GPO

On the group policy editor screen, expand the User configuration folder and locate the following item.

Copy to Clipboard

Here are the Google Chrome configuration options.

GPO - Google Chrome

Access the folder named EXTENSIONS.

GPO - Block extensions installation Chrome

Access the item named Configure extension installation blocklist.

Enable this configuration and enter an asterisk as the list of blocked extensions.

GPO - Deny extensions installation Chrome

In our example, we configured the system to deny the installation of extensions on Google Chrome.

To save the group policy configuration, you need to close the Group Policy editor.

Congratulations! You have finished the GPO creation.

Tutorial GPO – Google Chrome

On the Group policy management screen, you need to right-click the Organizational Unit desired and select the option to link an existent GPO.

Windows-2012-Applocker application

In our example, we are going to link the group policy named MY-GPO to the root of the domain.

GPO- tutorial linking

After applying the GPO you need to wait for 10 or 20 minutes.

During this time the GPO will be replicated to other domain controllers.

On a remote computer, try to install a Google Chrome extension.

GPO - Google Chrome deny extension installation

In our example, we used a GPO to prevent the installation of Google Chrome extensions.