ExtensionSettings

Configure extension management settings

Supported versions

• Windows: ≥ 77
• macOS: ≥ 77
• Android: ≥ 135
• iOS: Not supported

Description

Setting this policy controls extension management settings for Microsoft Edge, including those configured by other extension-related policies. This policy supersedes any legacy policies.

This policy maps an extension ID or update URL to a specific configuration. You can define a default configuration using the special ID "*", which applies to extensions without a custom configuration.

Note that any per-ID extension setting from either ExtensionInstallForcelist, ExtensionInstallAllowlist, ExtensionInstallBlocklist, or ExtensionSettings will only inherit 'installation_mode' and 'update_url' from the "*" defaults. It will not inherit any other properties. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest. If the 'override_update_url' flag is set to true, the extension is installed and updated using the update URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is the Edge Add-ons website update URL. For more details, check out the detailed guide to ExtensionSettings policy available at https://go.microsoft.com/fwlink/?linkid=2161555.

To block extensions from a particular third party store, you only need to block the update_url for that store. For example, if you want to block extensions from Chrome Web Store, you can use the following JSON.

{"update_url:https://clients2.google.com/service/update2/crx":{"installation_mode":"blocked"}}

Note that you can still use ExtensionInstallForcelist and ExtensionInstallAllowlist to allow / force install specific extensions even if the store is blocked using the JSON in the previous example.

If the 'sidebar_auto_open_blocked' flag is set to true in an extension's configuration, the hub-app (sidebar app) corresponding to the specified extension will be prevented from automatically opening.

On Windows instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be forced installed if the instance is joined to a Microsoft Active Directory domain or joined to Microsoft Azure Active Directory®.

On macOS instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be force installed if the instance is managed via MDM, joined to a domain via MCX.

Starting in Microsoft Edge version 149, the Microsoft365CopilotChatIconEnabled policy controls the display of Copilot in the toolbar.

Supported features

• Can be mandatory: Yes
• Can be recommended: No
• Dynamic Policy Refresh: Yes
• Per Profile: Yes
• Applies to a profile that is signed in with a Microsoft account: No

Data type

• Dictionary

Windows information and settings

Group Policy (ADMX) info

• GP unique name: ExtensionSettings
• GP name: Configure extension management settings
• GP path (Mandatory): Administrative Templates/Microsoft Edge/Extensions
• GP path (Recommended): N/A
• GP ADMX file name: MSEdge.admx

Example value

{"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/apps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "file_url_navigation_allowed": true, "installation_mode": "allowed", "minimum_version_required": "1.0.1"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "override_update_url": true, "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"], "sidebar_auto_open_blocked": true, "toolbar_state": "force_shown", "update_url": "https://contoso.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "update_url:https://www.contoso.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}}

Registry settings

• Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
• Path (Recommended): N/A
• Value name: ExtensionSettings
• Value type: REG_SZ

Example registry value

{"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/apps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "file_url_navigation_allowed": true, "installation_mode": "allowed", "minimum_version_required": "1.0.1"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "override_update_url": true, "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"], "sidebar_auto_open_blocked": true, "toolbar_state": "force_shown", "update_url": "https://contoso.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "update_url:https://www.contoso.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}}

Expanded example registry value

{
 "*": {
 "allowed_types": [
 "hosted_app"
 ],
 "blocked_install_message": "Custom error message.",
 "blocked_permissions": [
 "downloads",
 "bookmarks"
 ],
 "install_sources": [
 "https://company-intranet/apps"
 ],
 "installation_mode": "blocked",
 "runtime_allowed_hosts": [
 "*://good.contoso.com"
 ],
 "runtime_blocked_hosts": [
 "*://*.contoso.com"
 ]
 },
 "abcdefghijklmnopabcdefghijklmnop": {
 "blocked_permissions": [
 "history"
 ],
 "file_url_navigation_allowed": true,
 "installation_mode": "allowed",
 "minimum_version_required": "1.0.1"
 },
 "bcdefghijklmnopabcdefghijklmnopa": {
 "allowed_permissions": [
 "downloads"
 ],
 "installation_mode": "force_installed",
 "override_update_url": true,
 "runtime_allowed_hosts": [
 "*://good.contoso.com"
 ],
 "runtime_blocked_hosts": [
 "*://*.contoso.com"
 ],
 "sidebar_auto_open_blocked": true,
 "toolbar_state": "force_shown",
 "update_url": "https://contoso.com/update_url"
 },
 "cdefghijklmnopabcdefghijklmnopab": {
 "blocked_install_message": "Custom error message.",
 "installation_mode": "blocked"
 },
 "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {
 "blocked_install_message": "Custom error message.",
 "installation_mode": "blocked"
 },
 "fghijklmnopabcdefghijklmnopabcde": {
 "blocked_install_message": "Custom removal message.",
 "installation_mode": "removed"
 },
 "update_url:https://www.contoso.com/update.xml": {
 "allowed_permissions": [
 "downloads"
 ],
 "blocked_permissions": [
 "wallpaper"
 ],
 "installation_mode": "allowed"
 }
}

Mac information and settings

• Preference Key name: ExtensionSettings
• Example value:

<key>ExtensionSettings</key>
<dict>
 <key>*</key>
 <dict>
 <key>allowed_types</key>
 <array>
 <string>hosted_app</string>
 </array>
 <key>blocked_install_message</key>
 <string>Custom error message.</string>
 <key>blocked_permissions</key>
 <array>
 <string>downloads</string>
 <string>bookmarks</string>
 </array>
 <key>install_sources</key>
 <array>
 <string>https://company-intranet/apps</string>
 </array>
 <key>installation_mode</key>
 <string>blocked</string>
 <key>runtime_allowed_hosts</key>
 <array>
 <string>*://good.contoso.com</string>
 </array>
 <key>runtime_blocked_hosts</key>
 <array>
 <string>*://*.contoso.com</string>
 </array>
 </dict>
 <key>abcdefghijklmnopabcdefghijklmnop</key>
 <dict>
 <key>blocked_permissions</key>
 <array>
 <string>history</string>
 </array>
 <key>file_url_navigation_allowed</key>
 <true/>
 <key>installation_mode</key>
 <string>allowed</string>
 <key>minimum_version_required</key>
 <string>1.0.1</string>
 </dict>
 <key>bcdefghijklmnopabcdefghijklmnopa</key>
 <dict>
 <key>allowed_permissions</key>
 <array>
 <string>downloads</string>
 </array>
 <key>installation_mode</key>
 <string>force_installed</string>
 <key>override_update_url</key>
 <true/>
 <key>runtime_allowed_hosts</key>
 <array>
 <string>*://good.contoso.com</string>
 </array>
 <key>runtime_blocked_hosts</key>
 <array>
 <string>*://*.contoso.com</string>
 </array>
 <key>sidebar_auto_open_blocked</key>
 <true/>
 <key>toolbar_state</key>
 <string>force_shown</string>
 <key>update_url</key>
 <string>https://contoso.com/update_url</string>
 </dict>
 <key>cdefghijklmnopabcdefghijklmnopab</key>
 <dict>
 <key>blocked_install_message</key>
 <string>Custom error message.</string>
 <key>installation_mode</key>
 <string>blocked</string>
 </dict>
 <key>defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd</key>
 <dict>
 <key>blocked_install_message</key>
 <string>Custom error message.</string>
 <key>installation_mode</key>
 <string>blocked</string>
 </dict>
 <key>fghijklmnopabcdefghijklmnopabcde</key>
 <dict>
 <key>blocked_install_message</key>
 <string>Custom removal message.</string>
 <key>installation_mode</key>
 <string>removed</string>
 </dict>
 <key>update_url:https://www.contoso.com/update.xml</key>
 <dict>
 <key>allowed_permissions</key>
 <array>
 <string>downloads</string>
 </array>
 <key>blocked_permissions</key>
 <array>
 <string>wallpaper</string>
 </array>
 <key>installation_mode</key>
 <string>allowed</string>
 </dict>
</dict>

Android information and settings

• Preference Key name: ExtensionSettings
• Example value:

{"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/apps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "file_url_navigation_allowed": true, "installation_mode": "allowed", "minimum_version_required": "1.0.1"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "override_update_url": true, "runtime_allowed_hosts": ["*://good.contoso.com"], "runtime_blocked_hosts": ["*://*.contoso.com"], "sidebar_auto_open_blocked": true, "toolbar_state": "force_shown", "update_url": "https://contoso.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "update_url:https://www.contoso.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}}

See also

• Microsoft Edge - Policies