Configure extension installation blocklist

Allows you to specify which extensions the users can NOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. Once an extension disabled due to the blocklist is removed from it, it will automatically get re-enabled.

A blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.

If this policy is left not set the user can install any extension in Google Chrome.

Example value:


Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Extension IDs the user should be prevented from installing (or * for all)

Registry PathSoftware\Policies\Google\ChromeOS\ExtensionInstallBlocklist
Value Name{number}
Value TypeREG_SZ
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)