Edit

Share via

ExtensionInstallBlocklist

  • Article

Control which extensions cannot be installed

Supported versions

  • On Windows and macOS since 77 or later

Description

Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.

A blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.

If this policy isn't set, the user can install any extension in Microsoft Edge.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • List of strings

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: ExtensionInstallBlocklist
  • GP name: Control which extensions cannot be installed
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Extensions
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

extension_id1

extension_id2

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
  • Path (Recommended): N/A
  • Value name: 1, 2, 3, ...
  • Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 =

extension_id1

SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\2 =

extension_id2

Mac information and settings

  • Preference Key name: ExtensionInstallBlocklist
  • Example value:
<array>
  <string>extension_id1</string>
  <string>extension_id2</string>
</array>

See also