Deploy the DLP Chrome Browser extension via GPO

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention

Issue/Introduction

As per Article ID: 173154 it is sometimes required to manage the Chrome extension manually so it does not interfere with other GPOs.

You have successfully removed the extension by adding INSTALLCHROMEPLUGIN=0 to the installation script, but now you need to add it back in by domain GPO. 

Resolution

1. Download the Google Administrative Templates from here: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip

2. Open Group Policy Management.

3. Create a new GPO for the policy (or add to an existing policy).

4. Right-click on your GPO, and select “Edit”.

5. You then see the “Group policy management Editor” window.

6. Expand the Computer/User configuration tree on the left-hand side, depending on how you wish to configure your policy.

7. Right-click on “Administrative templates” and select “Add/Remove Templates”.

 

8. Click on “Add”.

9. Browse to the templates you downloaded in step 2, and open the “chrome.adm” template that is relevant to your operating system and Language.

10. Once uploaded, expand to the following path (may vary depending on your OS) on the left of the Group policy management editor:

“Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Google > Google Chrome > Extensions”

11. On the right-hand side, select “Configure the list of force-installed extensions”.

12. Right-click and select “Edit”.

13. Mark the “Enabled” button.

14. Click on the “Show…” button.

15. Under the “Value” column, specify the value according to Article ID: 204478 DLP Agent Chrome and Edge browser extension management.

16. Click on “OK”, followed by “Apply”.

You may need to run gpupdate on the machine to test the function.