Deploying Web Control Extensions via Group Policy Objects

1 min. readlast update: 05.26.2026

Instead of using the ThreatLocker option 'CreateBrowserWebControlExtensionPolicy' to enable/enforce web control extensions, you can deploy these extensions via Group Policy Objects. For Chrome/Edge, you can deploy registry settings via GPO. For Firefox, you can deploy a single file (policies.json) via GPO.

Please Note: It is important to be sure to include the store link in the registry key 'Value Data'. Be sure to copy/paste the entire Value Data line below for the selected browser store.

Chrome-GPO

Computer Configuration->Preferences->Windows Settings->Registry

Action: Update

Hive: HKEY_LOCAL_MACHINE

Key Path: SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist

Value Name: 1

Value Type: REG_SZ

Value Data: hmblejjjbiighoepgehkcallcgiadpmc;https://clients2.google.com/service/update2/crx

(Verify)

chrome://policy

 

Edge-GPO

Computer Configuration->Preferences->Windows Settings->Registry

Action: Update

Hive: HKEY_LOCAL_MACHINE

Key Path: SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist

Value Name: 1

Value Type: REG_SZ

Value Data: hgfcoifeokmjbiagpeaicjlhnlpfokfb;https://edge.microsoft.com/extensionwebstorebase/v1/crx

(Verify)

edge://policy

 

Firefox-GPO

Computer Configuration->Preferences->Windows Settings->Files

Name: policies.json

Action: Update

Source: \\your_domain\SYSVOL\your_domain\firefox\policies.json

Target: c:\Program Files\Mozilla Firefox\distribution\policies.json

Download---> policies.json

(Contents of policies.json)

{

"policies": {

"ExtensionSettings": {

"{6bdd07ae-1b18-4478-8e83-c1d2f0afb94a}": {

"installation_mode": "force_installed",

"install_url": "https://addons.mozilla.org/firefox/downloads/latest/threatlocker-web-control/latest.xpi"

}

}

}

}

(Verify)

about:policies

Was this article helpful?