How can I configure my group policy, to forcefully install a specific extension to MS Edge on client machines?

Now that Edge is starting to support more extensions, and better ones, this is becoming a valid option for secure browsing. If I want to allow my users to use Edge, I would expect them all to have required security extensions - e.g. ad blocker (specifically I like uBlock origin, but there are others), and any other required extension...

2 Answers 2


As far as i'm aware, Edge extensions are installed through the Windows Store. Therefor any extensions you need to install you would need to follow the same steps as distributing any other Windows Store app.

If you use System Center Configuration Manager you can do this fairly easily: https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business

Heres some more information: https://docs.microsoft.com/en-us/microsoft-store/distribute-offline-apps


Go to the Edge Download Page here and select Get Policy Files to get the Edge admx and adl files for your PolicyDefinitions in your DC.

Then go to your policy manager and Computer Configuration > Policies > Administrative Templates: Policy Definitions > Microsoft Edge > Extensions.

Here is a screenshot of what worked for me. I used the value cjpalhdlnbpafiamejdnhcphjbkeiagm;https://clients2.google.com/service/update2/crx to install ublock origin. Unfortunately I don't recall where I got this value.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.