Chrome Browser Cloud Management - external extensions

[Joseph Flood]

Hi All,

I'm having difficulty finding proper guidance on this. I have an organisation setup in Google Admin and have a number of windows devices enrolled in Chrome Browser Cloud Management.

I am trying to force install a custom extension externally hosted. 

According to this article I should be able to achieve this Chrome Enterprise policy list and management | Documentation

"On Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management."

Has anyone in this group had any luck with the above?

Cheers,

Joe

[Joseph Flood]

Hi,

Is anyone able to provide guidance on this? Simeon?

Cheers,

Joe

On Sunday, 18 July 2021 at 06:06:33 UTC+10 vladimira...@gmail.com wrote:

Владимир Архипов

23:01 (сейчас) 

– Chromium Extensions, Simeon Vincent, ka...@couponfollow.com

Владимир Архипов

22:54 (5 минут назад) 







– Chromium Extensions, Simeon Vincent, Jackie Han, Chromium Extensions

как у вас дела ? мне нужна помощь я не могу перевести деньги из портфолио www.coingeсko.com ,чтобы заплатить разработчикам или оплатить свои расходы ,дело срочное там большая сумма если согласитесь я заплачу после работы    how are you? I need help I can't transfer money from my portfolio www.coingeсko.com to pay the developers or pay their expenses, it's urgent there is a large amount if you agree, I will pay after work, I will give the login and password to someone who can help

среда, 14 апреля 2021 г. в 12:05:27 UTC+3, Simeon Vincent:



Ответить всем

Написать сообщение автору

Переслать

четверг, 8 июля 2021 г. в 09:53:52 UTC+3, Simeon Vincent:

вторник, 6 июля 2021 г. в 15:23:22 UTC+3, jospe...@gmail.com:

[avm99963]

Which is the Windows edition running in the instances you want to administer? I submitted a patch for an issue regarding setting sensitive policies in Windows 10 Pro for Education devices,[1][2] but it is available only since Chrome 93 (which is expected to be promoted to the stable channel in the end of August).[3]

Cheers :-)

[1]: 1149740 - Sensitive policies are ignored/blocked for Professional Education editions of Windows - chromium

[2]: Add SUITE_EDUCATION_PRO to base::win::VersionType (Ic602f5c8) · Gerrit Code Review
[3]: https://chromiumdash.appspot.com/schedule

[avm99963]

Also, it would be useful if you sent a screenshot of chrome://histograms/EnterpriseCheck in one of the managed PCs in which the extension should be force installed. This will give us more clues about what's happening.

[Joseph Flood]

Hi Avm,

Thanks for your reply. These 2 machines are using Windows 10 Pro. Not the education edition. 

See attached two screenshots for them of the EnterpriseCheck stats.

[Joseph Flood]

Hi Avm,

Just a friendly bump to see if those screenshots reveal anything useful.

Thanks,

Joe

[Simeon Vincent]

Joe, can you confirm whether or not you have been able to successfully get the self-hosted extension to install on other devices? I'm looking to determine whether this is a Windows 10 issue or an issue with how the extension is being hosted.

Simeon - @dotproto

Chrome Extensions DevRel

[Joseph Flood]

Hi Simeon,

I've managed to get around to testing this now. Tried it on Ubuntu and it worked. Then went back to the 2 windows machines, and they too had installed the extension! Not sure what made it stick this time.

I'm now having a couple more issues. I can set this extension to "Force Install" and it installs it, but users cannot disable/re-enable the extension, nor can they open the developer console for the popup or the background page. This is an in-house tool, so it would be useful to do this to support users should any issue arise. Is there a setting that would enable debugging in the developer tool bar?

Also, I tried to configuring the extension as "Allow install" creating a private chrome app collection as described here https://support.google.com/chrome/a/answer/2649489. But when going to the "Chrome web store" it does not recommend this collection any where.

Any ideas what's going on here?

Regards,

Joe

[floody]

ah I figured out the issue with the chrome app collection. Ignore that.

Any chance there's away to enable debugging an extension?

[Simeon Vincent]

I've managed to get around to testing this now. Tried it on Ubuntu and it worked. Then went back to the 2 windows machines, and they too had installed the extension! Not sure what made it stick this time.

Were the Windows instances logged into the same profile(s)? It's possible that the extensions were installed on Windows devices via Chrome sync rather than directly via policy. Hopefully that's not the case.

I'm now having a couple more issues. I can set this extension to "Force Install" and it installs it, but users cannot disable/re-enable the extension, nor can they open the developer console for the popup or the background page. This is an in-house tool, so it would be useful to do this to support users should any issue arise. Is there a setting that would enable debugging in the developer tool bar?

You can control whether or not a force installed extension can be disabled using the ExtensionSettings policy and control whether or not developers tools can be used to debug force-installed extensions using the DeveloperToolsAvailability policy.

Simeon - @dotproto

Chrome Extensions DevRel

[floody]

Thanks Simeon, it seems like you can't control these settings from Google Admin? 

[floody]

So I can only set DeveloperToolsDisabled through the registry, I can't find any way to set this through Google Admin. That's ok, because at it works.

However, I can't make any changes to ExtensionSettings through the registry without conflicting with settings administered through google admin.

E.g. if I set "Force Install + pin", chrome policies will have the extension in "ExtensionInstallForcelist" and will have  { "toolbar_pin": "forced_pinned" } in "ExtensionSettings".  A warning will be displayed saying this is conflicting and overriding the local policy.

It would seem that Google Admin needs some more options when configuring extensions to support my requirements.