# Intune - Chrome

### **Overview**

These step by step instructions allow you to deploy the Keeper Chrome extension to users through Intune.

**(1)** Go to the [**Intune Portal**](https://intune.microsoft.com/) **(**[**https://intune.microsoft.com/**](https://intune.microsoft.com/)**)**

**(2)** In the portal, navigate to **Devices** > **Configuration**.

**(3)** Select **Manage Devices** > **Configuration**

**(4)** On the Policies tab, click **Create** > **New Policy**.

<figure><img src="/files/F8WDtiUX7hsBjamLHUdC" alt=""><figcaption></figcaption></figure>

**(5)** Under Platform, select **Windows 10 and later**.

**(6)** Under Profile Type, choose **Settings Catalog**, then click **Create**.

**(7)** Enter a Name for the configuration profile and an optional Description, then click **Next**.

**(8)** In the Configuration Settings tab, select **+ Add settings**.

**(9)** Search for "**Google Chrome**", then select "**Google Chrome Extensions**" and then select "**Configure the list of force-installed apps and extensions**" below. Then select **Next** to continue.

<figure><img src="/files/dHuo8VQvXUZ547d5o7Dh" alt=""><figcaption></figcaption></figure>

**(10)** In the "Configuration Settings" tab, enable the "**Configure the list of force-installed apps and extensions"** option then paste the following on one line:

```
bfogiafebfohielmmehodmfbbebbbpei;https://clients2.google.com/service/update2/crx
```

<figure><img src="/files/YqJFQGjM3U202f9jb0c9" alt=""><figcaption></figcaption></figure>

**(11)** Review the **Scope tags** and **Assignments** settings tabs to assign the appropriate groups, then click **Create** to finalize. Ensure that "All Users" or specific groups are assigned.

**(12)** Navigate back to “**Devices | Configuration**” > Hit **Refresh**&#x20;

**(13)** Your newly created policy will appear

<figure><img src="/files/rbNzvRHAWsZOvliPC2qp" alt=""><figcaption></figcaption></figure>

***

The policy is now active. If a plan member has not yet enrolled with Intune, they will be prompted to do so upon signing in to a managed device. Once enrolled, the Keeper browser extension will be installed automatically.

### Pinning the Extension

To pin the Chrome extension on the user's browser:

**(1)** Click on the policy you created under **Devices | Configuration**

**(2)** Under the "**Configuration settings**" select "**Edit**"

**(3)** Click **+ Add setting** then search for "**Google Chrome**" settings and select **"Google Chrome Extensions"** then select "**Extension management settings**" in the subcategory below.

<figure><img src="/files/6uFQEXCUkmT4LZpAtHus" alt=""><figcaption></figcaption></figure>

**(4)** After selecting this option, close the window and under the "**Configuration settings**" tab, activate the setting "**Configure extension management settings**" and paste the below JSON into the box:

{% code overflow="wrap" %}

```json
{"bfogiafebfohielmmehodmfbbebbbpei":{"installation_mode":"force_installed","toolbar_pin":"force_pinned","update_url":"https://clients2.google.com/service/update2/crx"}}
```

{% endcode %}

<figure><img src="/files/239k2EtqO4CJZrXtR6qn" alt=""><figcaption></figcaption></figure>

**(5)** Select "**Review + Save**" and save the settings.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/en/enterprise-guide/deploying-keeper-to-end-users/keeper-fill/windows/intune-chrome.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
