Managing Edge extensions in Microsoft InTune

This article is intended for Administrators on how to manage Edge Extensions in Microsoft InTune for Clasroom.

 

To manage Edge extensions in Microsoft InTune, proceed as follows:

1. Sign into the Microsoft Endpoint Manager Admin Center.

2. Go to Devices > Windows > Configuration profiles > Create profile.

 

3. In the Create Profile, Select Platform, Windows 10 and later and Profile type, Select Settings catalog (preview). Click on the "Create" button.

 

 

 

 

 

 

 

 

 

4. On the Basics tab, specify a descriptive name, such as Impero Backdrop Extensions. Optionally, specify a Description for the policy, then click on Next.

 

 

 

 

 

 

 

 

 

 

 

 

5. In Configuration settings, select Add settings.

 

 

6. Select Microsoft Edge, Under Extensions, to see all the settings in this category. After adding your settings, click on the cross mark at the right-hand corner to close the settings picker. 

 

Allow specific extensions to be installed – By default, all extensions are allowed. However, if you block all extensions by setting the ‘ExtensionInstallBlockList’ policy to “*” users can only install extensions defined in this policy.

 

Control which extensions cannot be installed – List specific extensions that users are unable to install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed are disabled, and the user is unable to enable them.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed. Use “*” to block all extensions that aren’t explicitly listed in the allow list. If you don’t configure this policy, users can install any extension in Microsoft Edge.

 

7. It is important to have the backdrop client extension ID at the ready which is the following:

jjpmjccpemllnmgiaojaocgnakpmfgjg

 

8. Set the Allow specific extensions to be installed to Enabled and add the extension IDs to exempt from the block list. Similarly, If you want to add more to the allowed list Click +Add and provide Extensions ID.

Set Control which extensions cannot be installed to Enabled, added “*“, to block all extension.

 

When your happy with your configuration click on Next.

9. Under Assignments, In Included groups, select Add groups and then choose Select groups to include one or more groups.

I would look to use a test group first to make sure that it deploys as expected.

 

 

 

 

 

 

 

 

 

 

When your happy with your test group selection proceed through the profile wizard.

 

 

 

10. In-Scope tags, you can assign a tag to filter the profile to specific IT groups. Add scope tags (if required) and click on Next.

 

In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned.

 

11. When you have verified all your settings click on Create , you are then notified that your configuration profile has been created successfully.

Once the policy applies to the device, users are unable to install any other Extensions from the Store except the allowed extension (Backdrop Client) in this example.

 

12. Open up the test group devices which you applied this policy to, verify them to make sure that  the policy comes down as expected, if so expand to the wider groups of devices which you requirement our product on.