Configure extension installation allow list

Setting the policy specifies which extensions are not subject to the blocklist.

A blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.

By default, all extensions are allowed. But, if you prohibited extensions by policy, use the list of allowed extensions to change that policy.

Example value:


Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Extension IDs to exempt from the blocklist

Registry PathSoftware\Policies\Google\ChromeOS\ExtensionInstallAllowlist
Value Name{number}
Value TypeREG_SZ
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)