Deploying Using Microsoft Intune for Chrome on Windows

1. Go to https://intune.microsoft.com/.
2. Go to Endpoint Manager > Devices > Configuration policies.
3. Select Create > New Policy.
4. On the Create a profile page, complete the following:
   • In the Platform dropdown, select Windows 10 and later.
   • In the Profile Type dropdown, select Templates.
   • In the Template name dropdown, select Administrative templates.
5. Select Create.
6. On the Basics tab, complete the following:
   • In the Name field, enter a name to identify the profile.
   • In the Description field, enter a description for the profile.
7. Select Next.
8. On the Configuration settings tab, select Configure the list of force-installed apps and extensions configuration. Verify the path is \Google\Google Chrome\Extensions.
9. In the right hand panel, complete the following:
   • Under Supported on: Microsoft Windows 7 or later select Enabled.
   • In the Extension/App IDs and update URLs to be silently installed field enter ckdibgmbbhmafmjpjmknleccgcddanan;https://extension.savvy.security/update.xml.
10. Select OK.
11. Select Next.
12. On the Scopes tags tab, add any desired scope tags and select Next.
13. On the Assignments tab, assign any desired target users and groups and select Next.
14. On the Review + create tab, select Create.
15. Wait for new policy to propagate, or perform a manual synchronization.
16. Once propagated, verify that Chrome is now managed on endpoints:
    • Re-open Chrome on a managed target endpoint.
    • Select the three dots icon on the top right. The bottom entry should read “Managed by” followed by your organization name.
    • Open a new tab and browse to chrome://policy.
    • Verify under Chrome Policies you can see the ExtensionInstallForcelistDesc policy name with the following value: ckdibgmbbhmafmjpjmknleccgcddanan;https://extension.savvy.security/update.xml.