Windows
1. Windows - Distribute via Group Policy (GPO)
See Set Chrome Browser policies on managed PCs to download the policy templates.
You will need to modify "Configure the list of force-installed apps and extensions" under Computer Configuration -> Policies -> Administrative Templates .* -> Google -> Google Chrome -> Extensions
Set it to enabled and add the UXM extension to the list of forced extensions, see available extensions in bottom of page, newest UXM Web extension is:
UXM Desktop Agent version over 2022.08.01 ninkobkbpfmfemolepdagihmfmbpbino;https://clients2.google.com/service/update2/crx
And modify "Configure native messaging allowlist" under Computer Configuration -> Policies-> Administrative Templates .* -> Google -> Google Chrome -> Native Messaging
Value to add: mcg_uxm_chrome_nativemessagehost and com.uxmapp.chromium.nativemessagehost (from version 2022.06.23+)
Extension will be install on the Active Directory joined machines next time they synchronize GPO settings, you can force the synchronization by executing gpupdate /force in a elevated cmd prompt on the domain joined client machine.
Please note that you can only have 1 Chrome extension allow list, multiple lists in different GPO's won't be merged together.
2. Windows - Distribute via Google Admin console (Chrome Browser Cloud Management)
Goto admin.google.com and login as your Google administrator and select Device Management -> Chrome and then Apps & Extension, see available extensions in bottom of page, newest UXM Web extension is
UXM Desktop Agent version over 2022.08.01 ninkobkbpfmfemolepdagihmfmbpbino;https://clients2.google.com/service/update2/crx
Select that is has to "Force Install".
3. Adding the extension manually
Select extension to add from "Chrome extension versions" list and press "Add to Chrome", requires that the UXM Desktop agent is installed on endpoint.
4. Distribute via UXM Desktop installer
The UXM Desktop agent can write to the Group Policy registry to force the extension to load, this is done by selecting "Force browser extension/addon activation" during install or supplying the /force_activation parameter to the installer.
The UXM Desktop agent enables the extension by altering the following 2 registry places:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist "NewestExtensionID;https://clients2.google.com/service/update2/crx" is added.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\NativeMessagingAllowlist "mcg_uxm_chrome_nativemessagehost" and "com.uxmapp.chromium.nativemessagehost" is added.
Users will be notified that the extension is managed by the organization and it can't be disabled.
Chrome settings will display that the browser is managed by your organization. Clicking on the "browser is managed" will show the extensions installed by organization.
Please note that GPO's distributed by domain will override the settings set by the UXM Desktop agent. GPO will have to be setup by the domain admin, see section 1.