Download templates

Upload templates

Configure templates

Deploy templates to devices/users/groups

Download and run this file

After finished installing policies, navigate to the Intune Configuration profile upload page and click the Import ADMX tab.

Click the + Import button

In the selection window navigate to C:\Windows\Policy Definitions\

Locate the Windows.admx file and select it.

Add the Windows.adml file located at C:\Windows\Policy Definitions\en-US\

Click the blue Next button.

Verify the displayed info is correct and then click the blue Create button.

Navigate to Microsoft Edge for Business

Scroll down and locate the archetype of windows your systems are on and click the blue text that should read Download Windows XX-bit Policy where XX is 64, 32, or ARM64

Locate the file you downloaded, it should have a name similar to MicrosoftEdgePolicyTemplates.cab

Extract the MicrosoftEdgePolicyTemplates.zip file

Extract the MicrosoftEdgePolicyTemplates folder

Open your browser of choice and navigate to Intune Admin Center webpage and login as an administrator

On the left side click Devices

On the new side bar that appears scroll down to the Policy section and click Configuration profiles

Click the Import ADMX tab and then click Import

In the field labeled ADMX file click the blue folder icon to the right of it

Navigate to where you exported that folder in step 5 and then go to the following: Windows -> ADMX -> msedge.admx

Click the Open button to confirm the file.

In the field labeled ADML file click the blue folder icon to the right of it

Navigate to where you exported the folder in step 5 and then go to the following subfolder: Windows -> ADMX -> en-US -> msedge.adml

Click the Open button to confirm the file.

Click the blue Next button

Check that you have the two correct files added, it should read ADMX file: msedge.admx and ADML file for the default langeuage: msedge.adml

If everything looks correct, click Create

Wait for the profile to upload, typically takes a few minutes.

Navigate to Intune Device Configuration Profiles

Click the + Create profile button

Set the Platform drop down to Windows 10 and later

Set the Profile type drop down to Settings catalog

Click the blue Create button.

Give your profile a name such as Edge Force Install Extension

Give the profile a description if you wish

Click the blue Next button

Click the blue text that read + Add settings

In the field labeled Search for a setting input Microsoft Edge

Scroll through the list until you locate Microsoft Edge\Extensions and click it

Then scroll through the bottom list and look for the option named Control which extensions are intalled silently Click the checkbox on the left

Do another search from step 10 and input Microsoft Edge and look for an option called Microsoft Edge

Look for the option Allow managed extensions to use the Enterprise Hardware Platform API and click the checkbox

Look for the option Browser sign-in settings and click the checkbox

Look for the option Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account

Look for the option Configure InPrivate mode availability

Click the X in the top right of the Settings Picker menu.

Enable all of the policies and configure the following:

Click the blue Next button at the bottom

Set any Scope Tags if you have any you'd like to set

Click the blue Next button at the bottom

Set which users, groups or devices you'd like to have this policy enforced on by clicking the Add Groups, Add All Users or Add All Devices.

Alternatively you can add all users or devices and then add groups to the exclude list.

Click the blue Next button

Review all the options and ensure they look correct and then click the blue Create button at the bottom to create the policy

Navigate to Intune Device Configuration Profiles

Click the + Create profile button

Set the Platform drop down to Windows 10 and later

Set the Profile type drop down to Settings catalog

Click the blue Create button.

Give your profile a name such as Edge Force Install Extension

Give the profile a description if you wish

Click the blue Next button

Click the blue text that read + Add settings

In the field labeled Search for a setting input Microsoft Edge

Do a search for Chrome

Locate the field called Google Google Chrome Extensions and click it

In the table below locate the Configure the list of force-installed apps and extensions option and check the box next to it.

In the search field from step 11, do another search for Chrome and click the row called Google Google Chrome

Look for an option called Browser sign-in settings and click the checkbox

Look for an option called Enables managed extensions to use the Enterprise Hardware Platform API and click the checkbox

Look for an option called Incognito mode availability and click the checkbox

Look for an option called Add restrictions on managed accounts and click the checkbox

Click the X in the top right of the Settings Picker menu

Look for the section labeled Google Chrome > Extensions and check the toggle to enable that policy.

Input the following into the field that should have appeared

Click the toggle for each option to enable it and configure the following settings after:

Click the blue Next button at the bottom

Set any Scope Tags if you have any you'd like to set

Click the blue Next button at the bottom

Set which users, group or devices you'd like to have this policy enforced on by clicking the Add Groups, Add All Users or Add All Devices.

Alternatively you can add all users or devices and then add groups to the exclude list.

Click the blue Next button

Review all the options and ensure they look correct and then click the blue Create button at the bottom to create the policy