ExtensionInstallForcelist

Configure the list of force-installed apps and extensions

Supported on:

  • Chrome (Windows) since version 9

Description:

Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can't uninstall or turn off through the Samsung Browser interface. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren't available to apps and extensions that aren't force-installed.)

Although Samsung Browser aims to prevent users from uninstalling these extensions, some operating systems make it impossible for Samsung Browser to defend robustly against extensions being modified externally, so this prevention is best efforts.

Leaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Samsung Browser.

This policy supersedes ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Samsung Browser automatically uninstalls it.

The source code of any extension may be altered by users through developer tools, potentially rendering the extension dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy.

Each list item of the policy is a string that contains an extension ID and, optionally, an update URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on internet://extensions when in Developer mode. If specified, the update URL should point to an Update Manifest XML document. The update URL should use one of the following schemes: http, https or file. By default, the Chrome Web Store's update URL is used. The update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest. The update url for subsequent updates can be overridden using the ExtensionSettings policy.

On Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Samsung Browser.

Note: This policy doesn't apply to Incognito mode.

Note: This policy only applies to platforms that support extensions.

Supported features:

  • Applied to browser without restart. Note that some ongoing tasks may not be affected.
  • Applied at Samsung Browser profile level.

Data type:

List of strings

Windows registry location:

Software\Policies\Samsung\Internet\ExtensionInstallForcelist

Example value:

Software\Policies\Samsung\Internet\ExtensionInstallForcelist\1 = aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx
Software\Policies\Samsung\Internet\ExtensionInstallForcelist\2 = abcdefghijklmnopabcdefghijklmnop

More policies under Extensions: