Why is Edge extension force install policy restricted to Microsoft Store?

Anonymous
2023-03-14T15:36:27+00:00

On Windows 11, I am able to set policy directly in the registry for "ExtesnsionInstallForcelist" to require an extension be installed. I can do this with an extension from the chrome webstore by specifying the update URL. However, on Windows 10, I set the same policy and see the following error when I set the policy and reload it by opening a tab to "edge://policy"

"This device isn't managed by your organization. Because of this, it can only install extensions hosted in the Microsoft Store."

I have set other policy with this method and if I click on "..." to open the menu, I do see the "Managed by your organization" at the bottom of the menu.

What exactly is the criteria that could fail for Edge to not enforce this policy and not allow extensions from the chrome web store?

If I push this through GPO to other devices, it works. What is the artificial constraint?

Microsoft Edge | Browser extensions | Windows 10

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-03-14T17:22:21+00:00

If you look at the documentation for this policy, you'll see "For Windows instances not joined to a Microsoft Active Directory domain, forced installation is limited to apps and extensions listed in the Microsoft Edge Add-ons website." Does this apply to the machine where you see the warning?

In this case, 'managed' means 'domain-joined'. The message you see about 'managed by your organization' may be misleading; it only indicates that one or more policies are in force.

Was this answer helpful?

1 person found this answer helpful.
0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-03-14T18:03:24+00:00

    The use of the word "managed" is misleading. If that meant "domain joined", then that would explain at least part of the behavior I am seeing.

    Although I am able to apply the local group policy on Windows 11 when not joined to a domain. This particular behavior appears to be unique to Windows 10.

    Was this answer helpful?

    0 comments
  2. paulr0511 47,905 Reputation points Independent Advisor
    2023-03-14T16:23:59+00:00

    Good day Andrew! I am glad to be able to provide assistance to you today. This is best suited to be posted to our neighbor forum from the link below. They are more oriented on with regards to this type queries/issues and there will be IT Pros/System Admins/Server Admins/AD Admins who are available that will be able to fulfill your query as we are more of home/personal consumer based forum.

    https://learn.microsoft.com/en-us/answers/

    Regards,

    Paul R.

    Was this answer helpful?

    0 comments