How to Silently Install and Activate the Extension on Windows Devices Using Intune (2/2)

Overview

This page provides detailed instructions on how to silently install and activate the Josys browser extension on Windows devices using Microsoft Intune.

Please complete the steps in the following guide before proceeding with this manual.
How to Silently Install and Activate the Extension on Windows Devices Using Intune (1/2)

Target Audience

Administrators planning and executing the bulk deployment of the Josys browser extension.

About Browser Extensions

For more information about browser extensions, please refer to the following pages first.

1. About Browser Extensions
2. How to Use Browser Extensions

Silent Installation Steps

0. Preliminary Verification

Please check whether you have previously force-installed any extensions.

Verification Steps

1. Open the Registry Editor.
2. Navigate to the following keys:
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist
   HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist
3. Check if there are any extension values under these keys.
4. Navigate to the following keys:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist
   HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist
5. Check if there are any extension values under these keys.
6. If no values exist, proceed to the following section:
   1. Creating a Configuration Profile
7. If values exist or are unknown, please refer to the following section:
   <If you have previously force-installed extensions>

1. Creating a Configuration Profile

1. Sign in to the Microsoft Intune admin center.
2. Go to "Devices" > "Manage devices" > "Configuration".
   
3. Click "+ Create" > "+ New policy".
4. Confirm that the "Create a profile" pane opens on the right side.
5. Enter the following settings:
   Platform: Windows 10 and later
   Profile type: Settings catalog
   
6. Once entered, click "Create" at the bottom.
7. On the "Create profile" page, ensure the "Basics" tab is open and enter the following details:
   Name: (e.g., Josys Edge Extension Force Deployment Policy for Windows)
   Description: (Optional)
   
8. Once entered, click "Next" at the bottom.

2-1. Configuring Google Chrome Settings

1. On the "Create profile" page, ensure the "Configuration settings" tab is open.
2. Click "+ Add settings" and search for "Google". Select "Google Google Chrome Extensions" from the search results.
3. Select "Configure the list of force-installed apps and extensions".
   
4. Set the setting to "Enabled".
5. In the "Extension/App IDs and update URLs to be silently installed" field, enter the following:
   moaklgcgokbgplldonjkoochhlefkbjf;https://clients2.google.com/service/update2/crx
   
6. Click "Next" at the bottom.
7. Proceed to Assigning Target Devices.

2-2. Configuring Microsoft Edge Settings

1. On the "Create profile" page, ensure the "Configuration settings" tab is open.
2. Click "+ Add settings" and search for "Microsoft Edge". Select "Microsoft Edge Extensions" from the search results.
3. Select "Control which extensions are installed silently".
   
4. Set the setting to "Enabled".
5. In the "Extension/App IDs and update URLs to be silently installed" field, enter the following:
   hjifncajikcdkhlofdjjlhcjoennmdfc;https://edge.microsoft.com/extensionwebstorebase/v1/crx
6. Click "Next" at the bottom.
7. Proceed to Assigning Target Devices.

3. Assigning Target Devices

1. Scope tags are optional. Click "Next" at the bottom again.
2. When the "Assignments" tab opens, select the devices on which you want to perform the silent installation.
   *To install on all devices, click "+ Add all devices".
   *If you want to test on a small number of devices first, create a group containing only the test devices and apply the settings to it.
3. Once configured, click "Next" at the bottom.
4. On the next page, click "Create" at the bottom.

This completes the silent installation and activation process.

<If you have previously force-installed extensions>

If values were already present during step "0. Preliminary Verification", please check the following cases:

1. You have previously installed using the Settings Catalog method
2. You have previously installed without using the Settings Catalog method

1. You have previously installed using the Settings Catalog method

If you have previously installed extensions using Administrative Templates, add the Josys browser extension ID and update URL using the same procedure.

1. Sign in to the Microsoft Intune admin center.
2. Go to "Devices" > "Manage devices" > "Configuration".
3. Click the configuration policy created during the previous installation.
4. Click "Edit" next to "Configuration settings" at the bottom.
5. From here, proceed with the same steps as below:

Google Chrome: 2-1. Configuring Google Chrome Settings
Microsoft Edge: 2-2. Configuring Microsoft Edge Settings

2. You have previously installed using a method other than the Settings Catalog

Installing a device management tool agent may automatically add browser extensions. Regardless of the tool, if you write values directly to the force-installation registry, configuring them via the Settings Catalog (Intune or AD) will overwrite the existing values.
To avoid this issue, use a script to write the new values to the registry without overwriting the existing ones.

Prerequisites

First, copy the script below and save it as a file named [Set-ForcedExtensions.ps1]. (Since it contains Japanese characters, we recommend verifying it in an editor like PowerShell ISE to avoid character encoding errors.)

<#
.SYNOPSIS
    Adds entries to the Google Chrome and Microsoft Edge extension force-install lists.
    If existing numeric value names exist, the new value name will be the maximum existing number plus one.

.DESCRIPTION
    This script modifies the registry to force-install specified browser extensions.
    To avoid conflicts if entries already exist under the ExtensionInstallForcelist key,
    it automatically determines the next available numeric registry value name (e.g., "1", "2", "3", ...).
    Administrator privileges are required to write to HKEY_LOCAL_MACHINE.

.NOTES
    Created: 2025-05-15
    This script must be run as an administrator.
#>

#Requires -Version 5.1
#Requires -RunAsAdministrator

function Add-ForceListedExtension {
    [CmdletBinding(SupportsShouldProcess=$true)]
    param (
        [Parameter(Mandatory=$true)]
        [string]$RegistryKeyPath,

        [Parameter(Mandatory=$true)]
        [string]$ExtensionData,

        [Parameter(Mandatory=$true)]
        [string]$BrowserName
    )

    Write-Host "Processing ($BrowserName): Attempting to add extension '$ExtensionData' to path '$RegistryKeyPath'."

    try {
        # Ensure the registry key path exists (create if it does not)
        if (-not (Test-Path $RegistryKeyPath)) {
            Write-Host "Registry key path '$RegistryKeyPath' does not exist. Creating..."
            New-Item -Path $RegistryKeyPath -Force -ErrorAction Stop | Out-Null
            Write-Host "Successfully created registry key path '$RegistryKeyPath'."
        }

        # Determine the next available numeric registry value name
        $existingProperties = Get-ItemProperty -Path $RegistryKeyPath -ErrorAction SilentlyContinue # Do not error if key does not exist or has no values
        $numericValueNames = @() # Array to store numeric registry value names

        if ($existingProperties) {
            # Get all property names (value names) using PSObject.Properties.Name
            $numericValueNames = $existingProperties.PSObject.Properties.Name | ForEach-Object {
                if ($_ -match "^\d+$") { # Check if it consists entirely of numbers using regex
                    [int]$_ # Convert to integer
                }
            } | Sort-Object # Sort numerically
        }

        $nextValueNumber = 1
        if ($numericValueNames.Count -gt 0) {
            $nextValueNumber = $numericValueNames[-1] + 1 # Last element of array (max value) + 1
        }
        $nextValueName = $nextValueNumber.ToString()

        Write-Host "($BrowserName) Next value name to use is '$nextValueName'."

        # Add or update registry value
        if ($PSCmdlet.ShouldProcess("Set data '$ExtensionData' to value '$nextValueName' in registry path '$RegistryKeyPath'", "Set Registry Value")) {
            New-ItemProperty -Path $RegistryKeyPath -Name $nextValueName -Value $ExtensionData -PropertyType String -Force -ErrorAction Stop
            Write-Host "($BrowserName) Successfully added/updated registry value '$nextValueName' in path '$RegistryKeyPath' with data '$ExtensionData'."
        }
    }
    catch {
        Write-Error "($BrowserName) Failed to process registry for path '$RegistryKeyPath'. Error: $($_.Exception.Message)"
        # Uncomment below for detailed error info if needed
        # $_ | Format-List -Force
    }
    Write-Host ("-" * 70) # Divider
}

# --- Configuration Items ---
$ChromePolicyKey = "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist"
$ChromeExtensionValue = "moaklgcgokbgplldonjkoochhlefkbjf;https://clients2.google.com/service/update2/crx"

$EdgePolicyKey = "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist"
$EdgeExtensionValue = "hjifncajikcdkhlofdjjlhcjoennmdfc;https://edge.microsoft.com/extensionwebstorebase/v1/crx"

# --- Script Execution ---
Write-Host "Starting extension force-install list configuration script..."
Write-Host ("=" * 70)

# Configure Google Chrome
Add-ForceListedExtension -RegistryKeyPath $ChromePolicyKey -ExtensionData $ChromeExtensionValue -BrowserName "Google Chrome"

# Configure Microsoft Edge
Add-ForceListedExtension -RegistryKeyPath $EdgePolicyKey -ExtensionData $EdgeExtensionValue -BrowserName "Microsoft Edge"

Write-Host ("=" * 70)
Write-Host "Script execution completed."

# Uncomment below if running interactively and you do not want the output window to close immediately
# Read-Host "Press any key to exit..."

Steps

1. Sign in to the Microsoft Intune admin center.
2. Go to "Devices" > "Scripts and remediations".
   
3. Click "Platform scripts".
4. Click the "+ Add" button and select "Windows 10 and later".
5. On the next page, ensure the "Basics" tab is open and enter the following details:
   Name: (e.g., Force Install Browser Extensions (HKLM))
   Description: (Optional)
6. Once entered, click "Next" at the bottom.
7. On the next page, ensure the "Script settings" tab is open.
8. Click the folder button on the right side of the "Script location" file reference field, and upload the script you saved earlier.
9. Configure the settings as follows:
   Run this script using the logged on credentials: "No"
   Enforce script signature check: "No"
   Run script in 64-bit PowerShell Host: "Yes"
10. Once selected, click "Next" at the bottom of the page.
11. On the next page, ensure the "Assignments" tab is open.
12. Select the devices on which you want to enable the extension.
    *To enable the extension on only some devices: Select the target group from "Add groups".
    *To enable the extension on all devices: Select "Add all devices".
13. Once selected, click "Next" at the bottom of the page.
14. The final confirmation screen will be displayed. Review the details and click "Create" at the bottom of the page.