On Mac devices, browser restrictions can be comprehensively blocked using a Device Config. This Config is managed using the Device Config Generator, and can apply to Chrome, Edge, and Firefox browsers.
Blocked extensions are disabled if already installed.
Trying to install a blocked browser extension will return an error message:
Step 1: Enable the Browser Extensions Manager
- On the dashboard, go to Config Generator > macOS Config > Web.
- Go to Browser Extensions Manager.
Step 2: Choose a Blocking Approach
- Choose to either Restrict specific browser extensions or Only allow approved browser extensions.
If you want to use the default-deny approach, choose to only allow approved browser extensions.
Step 3: Add Extensions
- Select Edit Blocklist.
- Create a new extension group if one isn't created.
Extension groups make it easier to manage the same browser extension across multiple extension stores.
- Add extension IDs to block or approve. See Finding Browser Extension IDs for more information.
Frequently Asked Questions
Recommendations for the Firefox Browser
It's significantly more difficult to block browser extensions on Firefox as opposed to Microsoft Edge or Google Chrome.
You may choose to disable the Firefox browser instead.
Are there other ways to restrict adding browser extensions?
In addition to specifically blocking extensions by their IDs, you can also:
- Block the extension stores using a Device Config Website Blocklist.
- Block the extension stores using your Content Policy.
Do I need to find all of the IDs for the same extension across all extension stores?
No. You could choose to allow a browser extension downloaded from one store while blocking it on another.