How to install Chrome Extension through msi setup via group policy

[Biswa S]

I have developed an msi setup for Windows machines, which contains my chrome extension native messaging app. I am about to publish the extension on Chrome Web Store. The extension is supposed to get silently installed through this msi setup. As per Chromium Policy List, I want to write it under Software\Policies\Chromium\ExtensionInstallForcelist, so that the extension cannot be removed or disabled. But I understand that directly writing it to the registry does not do the needful anymore and I need to do it through Group Policy (GPO). The client computers, where I have to install the chrome extension through msi setup, will not necessarily be joined to an Active Directory domain, rather those computers can be any workstations with any version of Windows (XP, 7, 8, Server) just connected to internet and users are also not required to sign in to chrome. So, please correct me if I am wrong, it is about machine policy and not cloud-based policy.

I was going through this link, but I need to know how to create a device based group policy which will let me silently install my chrome extension hard-enabled on any Windows computer for any user regardless of their being signed in to chrome with non-removable feature.

I responsibly confirm that this is not about manifestation of any harmful or malware development. Actually users themselves will knowingly install the msi setup. The extension reads user's URL to generate some statistical log. The msi setup and chrome extension will have completely authenticated source and the registry entry will include the fixed extension ID which I'll receive once I upload the extension on chrome web store.

Please help me create and deploy a machine group policy for installation of my chrome extension through msi.

[Antony Sargent]

This isn't supported because of abusive behavior by malware. Chrome requires that windows machines be joined to an Active Directory for enterprise policies to take effect. 

--
You received this message because you are subscribed to the Google Groups "Chromium-extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To post to this group, send email to chromium-...@chromium.org.
Visit this group at http://groups.google.com/a/chromium.org/group/chromium-extensions/.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/dacf3f28-3bc5-4071-a552-1acb8d3c07d6%40chromium.org.
For more options, visit https://groups.google.com/a/chromium.org/d/optout.

[Biswa S]

Many thanks for a quick reply. I can understand that. My product is to be completely legal, authenticated and free from virus, malware or any threat. In that case, please guide me about what I should do. Is it possible that having given a Windows Server machine (e.g. Windows Server 2008 R2) with Active Directory configured, I can create a policy or something like "Registry.pol" file, may be in some formal or legal way, so that I can pack that policy file with my msi setup file which, when installed on any Windows computer, will write to that machine's registry (Software\Policies\Chromium\ExtensionInstallForcelist) perfectly. Can this be legally configured any way?

On Thursday, 4 December 2014 04:29:27 UTC+5:30, Antony Sargent wrote:

This isn't supported because of abusive behavior by malware. Chrome requires that windows machines be joined to an Active Directory for enterprise policies to take effect. 

On Wed, Dec 3, 2014 at 7:34 AM, Biswa S <itsme...@gmail.com> wrote:

I have developed an msi setup for Windows machines, which contains my chrome extension native messaging app. I am about to publish the extension on Chrome Web Store. The extension is supposed to get silently installed through this msi setup. As per Chromium Policy List, I want to write it under Software\Policies\Chromium\ExtensionInstallForcelist, so that the extension cannot be removed or disabled. But I understand that directly writing it to the registry does not do the needful anymore and I need to do it through Group Policy (GPO). The client computers, where I have to install the chrome extension through msi setup, will not necessarily be joined to an Active Directory domain, rather those computers can be any workstations with any version of Windows (XP, 7, 8, Server) just connected to internet and users are also not required to sign in to chrome. So, please correct me if I am wrong, it is about machine policy and not cloud-based policy.

I was going through this link, but I need to know how to create a device based group policy which will let me silently install my chrome extension hard-enabled on any Windows computer for any user regardless of their being signed in to chrome with non-removable feature.

I responsibly confirm that this is not about manifestation of any harmful or malware development. Actually users themselves will knowingly install the msi setup. The extension reads user's URL to generate some statistical log. The msi setup and chrome extension will have completely authenticated source and the registry entry will include the fixed extension ID which I'll receive once I upload the extension on chrome web store.

Please help me create and deploy a machine group policy for installation of my chrome extension through msi.

--
You received this message because you are subscribed to the Google Groups "Chromium-extensions" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extensions+unsub...@chromium.org.

[Antony Sargent]

On Wed, Dec 3, 2014 at 11:44 PM, Biswa S <itsme...@gmail.com> wrote:

 Can this be legally configured any way?

Unfortunately not, sorry.