如果您想阻止用户在Google Chrome中安装扩展程序,本文将对您很方便。无论您是想禁用所有当前安装的扩展程序、新的扩展程序安装,还是阻止其他人在Google Chrome中启用任何扩展程序,本文都将帮助您做到这一点。还可以阻止用户安装外部扩展或特定类型,如主题、脚本等。
使用组策略(Group Policy)阻止用户在Chrome中安装扩展程序(Chrome)
要防止用户使用组策略在(Group Policy)Google Chrome中安装扩展程序,请按照以下步骤操作 -
- 按 Win+R打开运行提示。
- 输入gpedit.msc并点击Enter按钮。
- 导航到计算机配置中的(Computer Configuration)扩展(Extensions)。
- 双击配置扩展安装阻止列表(Configure extension installation blocklist)设置。
- 选择启用(Enabled)选项。
- 单击显示(Show)按钮。
- 输入*作为值。
- 单击确定(OK)按钮。
您需要先为 Google Chrome 添加组策略模板 才能使用本地组策略(Local Group Policy)方法。
要开始,请按 Win+R在屏幕上 显示运行(Run)提示。之后,键入gpedit.msc
并按 Enter 按钮以在您的 PC 上打开本地组策略编辑器。(Local Group Policy Editor)然后,导航到以下路径-
Computer Configuration > Administrative Templates > Class Administrative Templates > Google > Chrome > Extensions
您可以在右侧看到一个名为“ 配置扩展安装阻止列表”的设置。(Configure extension installation blocklist)双击它并选择 启用 (Enabled )选项。
然后,单击 Show 按钮,输入 * 作为 Value,然后单击 OK 按钮保存更改。
您可能必须再次单击“ 确定 (OK )”按钮。
完成后,您现有的所有扩展程序都将关闭,用户将无法安装任何新扩展程序。每当有人试图打开Chrome 网上应用店(Chrome Web Store)以安装扩展程序时,他/她都会 被管理员消息阻止 。(Blocked by admin )
阻止(Block)用户使用注册表在(Registry)Chrome中安装扩展程序
要阻止用户使用注册表在(Registry)Google Chrome中安装扩展程序,请按照以下步骤操作 -
- 按Win+R打开运行提示。
- 键入regedit并点击Enter按钮。
- 单击是(Yes)选项。
- 导航到HKEY_LOCAL_MACHINE中的(HKEY_LOCAL_MACHINE)策略(Policies)。
- 右键单击 Policies > New > Key。
- 将其命名为Google。
- 右键单击Google > New > Key。
- 将其命名为Chrome。
- 右键单击Chrome > New > Key。
- 将其命名为ExtensionInstallBlocklist。
- 右键单击ExtensionInstallBlocklist > New > String Value。
- 将其命名为1。
- 双击它并输入*作为数值数据。
- 单击确定(OK)按钮。
建议 在执行以下步骤之前创建系统还原点。
要开始,您必须按 Win+R运行(Run)提示。然后,键入按 Enter 按钮,然后单击 Yes 选项以 打开 Registry Editor。打开后,导航到此路径-regedit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies
然后,按照这些步骤每分钟创建所有密钥和子密钥。首先,右键单击 Policies > New > Key 并将其命名为 Google。如果您已经可以看到Google密钥,则不必再次创建它。
现在,右键单击 Google > New > Key,并将其命名为 Chrome。
右键单击 Chrome > New > Key,并将其命名为 ExtensionInstallBlocklist。
右键单击 ExtensionInstallBlocklist > New > String Value 并将其命名为 1。
双击 1,输入 * 作为数值数据,然后单击 OK 按钮。
它将阻止Google Chrome中的扩展安装。
阅读(Read):使用组策略禁用 Firefox 中的附加组件安装(Disable add-on installation in Firefox using Group Policy)。
允许在(Allow)Chrome中激活特定的扩展程序
正如我之前所说,如果启用这些方法(注册表编辑器(Registry Editor)和本地组策略编辑器(Local Group Policy Editor)),所有现有的扩展都将被停用。但是,您可以绕过它并阻止用户仅安装新的扩展程序。
组策略用户:(Group Policy users:)
在本地组策略编辑器(Local Group Policy Editor)中有一个名为“ 配置扩展安装允许列表(Configure extension installation allow list)”的设置,您可以在获得上述设置的同一位置找到该设置。双击(Double-click)它,选择 启用 (Enabled )选项,然后单击 显示 (Show )按钮。
现在,打开Chrome Web Store上的扩展程序下载页面并记下扩展程序 ID。URL中提到了扩展 ID 。例如,Todoist Chrome扩展的URL是这样的:
https://chrome.google.com/webstore/detail/todoist-for-chrome/jldhpllghnbhlbpcmnajkpdmadaolakh
这意味着扩展 ID 是 jldhpllghnbhlbpcmnajkpdmadaolakh。
您必须按照此方法获取扩展 ID 并将其粘贴 到要允许的每个扩展的值 框中。(Value )
最后,单击 OK 按钮保存更改。
注册表编辑器用户:(Registry Editor users:)
如果您使用注册表编辑器(Registry Editor)阻止其他人在 Chrome 中安装扩展程序,则需要在Chrome中(Chrome)创建一个子键 。为此,右键单击 Chrome > New > Key,并将其命名为 ExtensionInstallAllowlist。
右键单击 ExtensionInstallAllowlist > New > String Value 并将其命名为 1。
双击 1 并输入扩展 ID 作为值(Value)数据。
阅读(Read):禁止在 Microsoft Edge 浏览器中安装扩展。
允许在(Allow)Chrome中安装特定的扩展程序类型
如果您使用组策略(Group Policy)方法,请打开 Configure allowed app/extension types 设置,选择 启用 (Enabled )选项,单击 显示 (Show )按钮,然后输入如下值:
- * “延期”
- * “主题”
- * “用户脚本”
- *“托管应用程序”
- * “legacy_packaged_app”
- *“平台应用程序”
另一方面,如果您使用注册表编辑器,请在(Registry Editor)Chrome中创建一个名为ExtensionAllowedTypes的新子项。然后,右键单击ExtensionAllowedTypes > New > String Value并将其命名为 1。
之后,双击 1 并如前所述设置数值数据。
希望本指南有所帮助。
How to prevent users from installing Extensions in Google Chrome
If you want to prevent uѕers from installing extensiоns in Google Сhrome, this article will be handy for you. Whether you want to disable all currently installed extensions, new extension inѕtallation, or block others from enabling any extension in Google Chrome, this articlе will help you do that. It is also possible to prevent users from installing external extensions оr a specific type such as themes, scripts, etc.
Prevent users from installing extensions in Chrome using Group Policy
To prevent users from installing extensions in Google Chrome using Group Policy, follow these steps-
- Press Win+R to open the Run prompt.
- Type gpedit.msc and hit the Enter button.
- Navigate to Extensions in Computer Configuration.
- Double-click on Configure extension installation blocklist setting.
- Choose the Enabled option.
- Click the Show button.
- Enter * as the Value.
- Click the OK button.
You need to first add the Group Policy template for Google Chrome to use the Local Group Policy method.
To get started, press Win+R to display the Run prompt on your screen. After that, type gpedit.msc
and hit the Enter button to open Local Group Policy Editor on your PC. Then, navigate to the following path-
Computer Configuration > Administrative Templates > Class Administrative Templates > Google > Chrome > Extensions
You can see a setting named Configure extension installation blocklist on your right-hand side. Double-click on it and select the Enabled option.
Then, click on the Show button, enter * as the Value, and click the OK button to save the change.
You might have to click the OK button once again.
Once done, all your existing extensions will be turned off, and users won’t be able to install any new extensions. Whenever someone tries to open the Chrome Web Store to install an extension, he/she will get Blocked by admin message.
Block users from installing extensions in Chrome using Registry
To block users from installing extensions in Google Chrome using Registry, follow these steps-
- Open the Run prompt by press Win+R.
- Type regedit and hit the Enter button.
- Click the Yes option.
- Navigate to Policies in HKEY_LOCAL_MACHINE.
- Right-click on Policies > New > Key.
- Name it as Google.
- Right-click on Google > New > Key.
- Name it as Chrome.
- Right-click on Chrome > New > Key.
- Name it as ExtensionInstallBlocklist.
- Right-click on ExtensionInstallBlocklist > New > String Value.
- Name it as 1.
- Double-click on it and enter * as the Value data.
- Click the OK button.
It is recommended to create a System Restore point before heading to the following steps.
To get started, you have to open the Run prompt by pressing Win+R. Then, type regedit
hit the Enter button, and click on the Yes option to open Registry Editor. Once it is opened, navigate to this path-
HKEY_LOCAL_MACHINE\SOFTWARE\Policies
Then, follow these steps minutely to create all the keys and sub-keys. At first, right-click on Policies > New > Key and name it as Google. In case you can already see the Google key, you do not have to create it again.
Now, right-click on Google > New > Key, and name it as Chrome.
Right-click on Chrome > New > Key, and name it as ExtensionInstallBlocklist.
Right-click on ExtensionInstallBlocklist > New > String Value and name it as 1.
Double-click on 1, enter * as the Value data, and click the OK button.
It will block the extension installation in Google Chrome.
Read: Disable add-on installation in Firefox using Group Policy.
Allow specific extensions to be activated in Chrome
As I said earlier, if you enable these methods (Registry Editor and Local Group Policy Editor), all the existing extensions will be deactivated. However, you can bypass that and block users from installing only new extensions.
Group Policy users:
There is a setting called Configure extension installation allow list in the Local Group Policy Editor that you can find in the same location where you got the above-mentioned setting. Double-click on it, choose the Enabled option and click the Show button.
Now, open the extension download page on Chrome Web Store and note down the extension ID. The extension ID is mentioned in the URL. For instance, the URL of the Todoist Chrome extension is this:
https://chrome.google.com/webstore/detail/todoist-for-chrome/jldhpllghnbhlbpcmnajkpdmadaolakh
That means the extension ID is jldhpllghnbhlbpcmnajkpdmadaolakh.
You have to follow this method to get the extension ID and paste it in the Value box for each extension you want to allow.
At last, click the OK button to save the change.
Registry Editor users:
If you used the Registry Editor to prevent others from installing extensions in Chrome, you need to create a sub-key in Chrome. For that, right-click on Chrome > New > Key, and name it as ExtensionInstallAllowlist.
Right-click on ExtensionInstallAllowlist > New > String Value and name it as 1.
Double-click on 1 and enter the extension ID as the Value data.
Read: Disallow installation of Extensions in Microsoft Edge browser.
Allow specific extension type to be installed in Chrome
If you use the Group Policy method, open the Configure allowed app/extension types setting, select the Enabled option, click the Show button, and enter a value like this:
- * “extension”
- * “theme”
- * “user_script”
- * “hosted_app”
- * “legacy_packaged_app”
- * “platform_app”
On the other hand, if you use the Registry Editor, create a new sub-key in Chrome called ExtensionAllowedTypes. Then, right-click on ExtensionAllowedTypes > New > String Value and name it as 1.
After that, double-click on 1 and set the value data as said earlier.
Hope this guide helps.