Best approach to push Windows 10 Chrome Extention via Intune

Rahul 241 Reputation points

Hi Team,

Just wanted to understand the best approach to push Win-10 Chrome Extension to Azure AD Join and Intune enrolled device via Intune only.

I have gone through some blogs for the same.


Problem Statement: Devices are set for autopilot self enrollment and there is a 3rd party software management solution which is pushing the windows apps. Once the device is enrolled and user login, Intune pushes the 3rd party software management client app which installs chrome and other apps. We notice there's an issue when pushing chrome extension via 3rd party solution so we wanted to explore Intune here.

In the above mentioned blog I see basically 3 methods:

Method 1: Powershell Script
Method 2: ADMX Ingestion
Method 3: Packaged as MSI
Method 4: Chrome Extension via Win32App in Intune

From my point of view Method 1 looks easy but there will be an issue that the script will not do anything because when the script execute at that time the Chrome browser will not have been installed via 3rd party software management solution and hence app registry will not be created.

Method 2 looks complex and volatile.

Method 3 no idea if this is a recommended approach.

Method 4 Looks somewhat doable but not yet tried it. Not sure if it will work in the same scenario in case there's some delay in Chrome app installation via 3rd party software management solution and chrome extension app is installed before Chrome or doesn't work.

Let me know your suggestion here.

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
915 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,730 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Crystal-MSFT 46,171 Reputation points Microsoft Vendor

    @Rahul , Maybe we can consider win32 app and we can set Chrome as Dependencies app which will enforce the device to install the dependent apps before it installs the Win32 app. Here is a link for the reference:

    Hope it can help.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Mohammed Kaif Joey 0 Reputation points

    Best approach is to import the latest Chrome admx templates (all the one's shown below) and then create an intune config profile with the setting below. Thats it!

    You can find the current Google Chrome ADMX files here: 1. Download bundle - Chrome Enterprise and Education Help (

    You have to upload (in this order):

    1. From your local current Windows 11 (if not already done)
    2. Configuration\admx*google.admx*
    3. Configuration\admx*GoogleUpdate.admx*
    4. Configuration\admx*chrome.admx*

    Intune config profile:

    User's image

    0 comments No comments