Policy
Control which extensions cannot be installed
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled. A blocklist value of '*' means all extensions are blocked by default. Extensions that are explicitly listed in the allowlist are allowed if they are signed (packed). All unpacked extensions are blocked. If this policy isn't set, the user can install any extension in Microsoft Edge. Starting in Microsoft Edge version 149, the 'Microsoft365CopilotChatIconEnabled' (Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar) policy controls the display of Copilot in the toolbar. Example value: extension_id1 extension_id2
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Extension IDs the user should be prevented from installing (or * for all) ID ExtensionInstallBlocklistDesc | list | Path Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist Value name 1, 2, … Type REG_SZ | List: standard |