Skip to content

Deploying Using Microsoft Intune for Chrome on Mac OS

  1. Go to https://endpoint.microsoft.com/#home.
  2. Go to Endpoint Manager > Devices > Configuration Profiles.
  3. Select + Create Profile.
  4. On the Create a profile page, complete the following:
    • In the Platform dropdown, select macOS.
    • In the Profile Type dropdown, select Templates.
    • In the Template name dropdown, select Preference file.
  5. Select Create.
  6. On the Basics tab, complete the following:
    • In the Name field, enter a name to identify the profile.
    • In the Description field, enter a description for the profile.
  7. Select Next.
  8. On the Configuration settings tab, complete the following:

    • In the Preference domain name field, enter com.google.chrome.
    • In the Property list file field, upload the following plist file:
    1
    2
    3
    4
    5
    6
    7
    <key>ExtensionInstallForcelist</key>
    <array>
    <string>ckdibgmbbhmafmjpjmknleccgcddanan;
    https://extension.savvy.security/update.x ml</string>
    </array>
    <key>update_url</key>
    <string>https://extension.savvy.security/update.xml</string>
    
  9. Select Next.

  10. On the Assignments tab, assign any desired target users and groups and select Next.
  11. On the Review + create tab, select Create.
  12. Wait for new policy to propagate, or perform a manual synchronization.
  13. Once propagated, verify that Chrome is now managed on endpoints:
    • Re-open Chrome on a managed target endpoint.
    • Select the three dots icon on the top right. The bottom entry should read “Managed by” followed by your organization name.
    • Open a new tab and browse to chrome://policy.
    • Verify under Chrome Policies you can see the ExtensionInstallForcelistDesc policy name with the following value: ckdibgmbbhmafmjpjmknleccgcddanan;https://extension.savvy.security/update.xml.