Enterprise Deployment Guide

To pre-configure the Account ID so users don't need to enroll manually, add an ExtensionSettings policy:

{
  "pnpcomkpinmnhhlajjimcflfflnpbaej": {
    "installation_mode": "force_installed",
    "update_url": "https://clients2.google.com/service/update2/crx",
    "managed_storage": {
      "mbr_account_id": "YOUR_ACCOUNT_ID",
      "auto_enroll": true,
      "mbr_org_name": "Your Company Name"
    }
  }
}copy

Assign the configuration policy to your target device group. Extension installs on next Intune sync (typically within 8 hours, or force sync via Company Portal).

Download Chrome ADMX templates from chromeenterprise.google. Copy to your domain's PolicyDefinitions folder:

# On your Domain Controller:
Copy-Item "chrome.admx" "C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\"
Copy-Item "chrome.adml" "C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\en-US\"copy

In Group Policy Management Editor:

Computer Configuration → Policies → Administrative Templates → Google → Google Chrome → Extensions → Configure the list of force-installed apps and extensions

Enable the policy and add:

pnpcomkpinmnhhlajjimcflfflnpbaej;https://clients2.google.com/service/update2/crxcopy

To pre-configure Account ID via registry:

# Deploy via GPO Preferences → Registry
Key: HKLM\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\pnpcomkpinmnhhlajjimcflfflnpbaej\policy
Values:
  mbr_account_id  REG_SZ  YOUR_ACCOUNT_ID
  auto_enroll     REG_SZ  true
  mbr_org_name    REG_SZ  Your Company Namecopy

In JAMF Pro: Computers → Configuration Profiles → New. Add a Custom Settings payload with this preference domain and JSON:

# Preference Domain:
com.google.Chrome

# JSON value:
{
  "ExtensionInstallForcelist": [
    "pnpcomkpinmnhhlajjimcflfflnpbaej;https://clients2.google.com/service/update2/crx"
  ],
  "ExtensionSettings": {
    "pnpcomkpinmnhhlajjimcflfflnpbaej": {
      "installation_mode": "force_installed",
      "update_url": "https://clients2.google.com/service/update2/crx"
    }
  }
}copy

Add a second Custom Settings payload for the extension's managed storage:

# Preference Domain:
com.google.Chrome.extensions.pnpcomkpinmnhhlajjimcflfflnpbaej

# JSON value:
{
  "mbr_account_id": "YOUR_ACCOUNT_ID",
  "auto_enroll": true,
  "mbr_org_name": "Your Company Name"
}copy