ExtensionInstallBlocklist

Control which extensions cannot be installed

Supported versions

• Windows: ≥ 77
• macOS: ≥ 77
• Android: Not supported
• iOS: Not supported

Description

Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.

A blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.

If this policy isn't set, the user can install any extension in Microsoft Edge.

Starting in Microsoft Edge version 149, the Microsoft365CopilotChatIconEnabled policy controls the display of Copilot in the toolbar.

Supported features

• Can be mandatory: Yes
• Can be recommended: No
• Dynamic Policy Refresh: Yes
• Per Profile: Yes
• Applies to a profile that is signed in with a Microsoft account: No

Data type

• List of strings

Windows information and settings

Group Policy (ADMX) info

• GP unique name: ExtensionInstallBlocklist
• GP name: Control which extensions cannot be installed
• GP path (Mandatory): Administrative Templates/Microsoft Edge/Extensions
• GP path (Recommended): N/A
• GP ADMX file name: MSEdge.admx

Example value

extension_id1

extension_id2

Registry settings

• Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
• Path (Recommended): N/A
• Value name: 1, 2, 3, ...
• Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 =

extension_id1

SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\2 =

extension_id2

Mac information and settings

• Preference Key name: ExtensionInstallBlocklist
• Example value:

<array>
  <string>extension_id1</string>
  <string>extension_id2</string>
</array>

See also

• Microsoft Edge - Policies