Make sure that your GPO is linked to an OU containing computers and that something like Authenticated Users or Domain Computers is listed under the Security Filtering section of the GPO. If you start listing multiple extensions in a single GPO, be sure to add a comment to the setting detailing which ID belongs to which extension. If you deploy another extension in another GPO, you will need to add uBlock Origin to it as well so that users get both extensions. Note that this setting is not cumulative across GPOs. As far as I know, this value is the same for all Chrome browser extensions. We got this value by installing the extension one time manually and then viewing the extension details in Chrome://extensions. The first part of that value is the ID of the extension. Paste in this value: cjpalhdlnbpafiamejdnhcphjbkeiagm Enable the Configure the list of force-installs apps and extensions setting. If you aren’t already managing Google Chrome with Group Policy, create a new GPO named something like Default Google Chrome Settings.Įdit your Google Chrome GPO and navigate to Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Extensions. Using Group Policy to Deploy uBlock Origin for Google Chromeįirst, you will need to download the Google Group Policy ADMX templates and place them into your Group Policy Central Store. I prefer to keep all of my Chrome settings in a single GPO as it makes management a bit easier. This article will cover deploying and configuring uBlock for Google Chrome on both Windows clients and Chrome OS clients. This setup will give you the security of blocking ads and the flexibility to eliminate almost all of your false positives. Now, I block the most blatant ads at the network level and use uBlock Origin to block the remaining at the client level. In the past, I would block all ads at the network level, but this created too many false positives. Are you running an ad blocker in your environment? If not, your users are more likely to get malware, including ransomware. If they aren’t infected, your computers could still be used to mine digital currencies through a browser. Also, ads are annoying! 1
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |