Deployment Guide

Microsoft Intune Deployment

Windows macOS Chrome Edge

Deploy Ghostery across your organization using Microsoft Intune (part of Microsoft Endpoint Manager). This guide covers cloud-based deployment for Windows, macOS, and managed browsers.

Prerequisites

• Microsoft Intune license (included in Microsoft 365 E3/E5, EMS E3/E5)
• Intune Administrator or Global Administrator role
• Devices enrolled in Intune

Deploy to Microsoft Edge

Intune has built-in support for Edge extension management, making it the simplest browser to configure.

Using Settings Catalog (Recommended)

1. Navigate to Microsoft Intune admin center → Devices → Configuration profiles
2. Create profile:
   • Platform: Windows 10 and later
   • Profile type: Settings catalog
3. Add settings: Search for "Extension" and select:
   Microsoft Edge → Extensions → Control which extensions are installed silently
4. Add the extension entry:

   fclbdkbhjlgkbpfldjodgjncejkkjcme;https://edge.microsoft.com/extensionwebstorebase/v1/crx

5. Assign the profile to your target device groups.

Configure Extension Settings

To configure Ghostery's managed storage settings in Intune:

1. In the same profile, add another setting from Settings catalog:
   Microsoft Edge → Extensions → Configure extension management settings
2. Add the following JSON configuration:

   {
     "fclbdkbhjlgkbpfldjodgjncejkkjcme": {
       "installation_mode": "force_installed",
       "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",
       "managed_configuration": {
         "disableOnboarding": true,
         "disableUserControl": true,
         "trustedDomains": ["your-company.com"]
       }
     }
   }

Deploy to Google Chrome

Using Settings Catalog

1. Create a new configuration profile (Settings catalog, Windows 10 and later)
2. Add settings: Search for "Chrome" and select:
   Google Chrome → Extensions → Configure the list of force-installed apps and extensions
3. Add the extension entry:

   mlomiejdfkolichcflejclcbmpeaniij;https://clients2.google.com/service/update2/crx

4. Assign the profile to your target device groups.

Configure Chrome Extension Settings

1. Add the setting:
   Google Chrome → Extensions → Extension management settings
2. Add the following JSON:

   {
     "mlomiejdfkolichcflejclcbmpeaniij": {
       "installation_mode": "force_installed",
       "update_url": "https://clients2.google.com/service/update2/crx",
       "managed_configuration": {
         "disableOnboarding": true,
         "disableUserControl": true
       }
     }
   }

Using OMA-URI (Alternative Method)

For scenarios where Settings Catalog doesn't provide the needed options, use custom OMA-URI settings.

Chrome Force Install via OMA-URI

1. Create profile: Templates → Custom
2. Add OMA-URI setting:

   Name	Chrome Force Install Ghostery
   OMA-URI	./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~Extensions/ExtensionInstallForcelist
   Data type	String
   Value	<enabled/><data id="ExtensionInstallForcelistDesc" value="1mlomiejdfkolichcflejclcbmpeaniij;https://clients2.google.com/service/update2/crx"/>

Edge Force Install via OMA-URI

macOS Deployment via Intune

For Mac devices enrolled in Intune, use a custom configuration profile with a property list (plist).

1. Create profile: macOS → Templates → Custom
2. Upload a .mobileconfig file containing the browser extension policy. See the macOS Profiles guide for plist examples.

Verify Deployment

After the Intune policy syncs to devices:

Check Device Sync Status

In Intune admin center, navigate to Devices → All devices → [select device] → Device configuration to verify the profile was applied successfully.

Verify on Device

• Edge: Navigate to edge://policy
• Chrome: Navigate to chrome://policy

Look for the ExtensionInstallForcelist or ExtensionSettings policy containing the Ghostery extension ID.