Control which extensions cannot be installed

Information

List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.

Use '*' to block all extensions that aren't explicitly listed in the allow list.

If you don't configure this policy, users can install any extension in Microsoft Edge.

Example value:

extension_id1
extension_id2

Solution

Policy Path: Microsoft Edge\Extensions
Policy Setting Name: Control which extensions cannot be installed

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v81/ba-p/1303621

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(4)

Plugin: Windows

Control ID: 5332e771fe47c9d7325cc06e1ac0a512d554cef5e956dacf0d6de77cc95b62a9