Blocking Edge Add-ons and Chrome Extensions on Windows laptops

To prevent students from installing all kinds of add-ons or extensions in their browser themselves, you can disable this. With Intune this is fairly easy to set up.

In the Intune admin center, go to:

For Platform, select Windows 10 and later. For Profile type, select Settings catalog and click Create at the bottom.

Give the new profile a name, e.g. "Block extensions", and click Next at the bottom.

Click + Add settings
Type "extensions" in the search bar and click Search.
Click Google Google Chrome Extensions. A list of results appears; tick the following 2:
✅ Configure extension installation blocklist
✅ Configure extension installation blocklist (User)

Now click Microsoft Edge\Extensions. A new list of results appears; tick the following 2:
✅ Control which extensions cannot be installed
✅ Control which extensions cannot be installed (User)

Now click the cross at the top right of the Search button.

Then set all toggles to Enabled and type an asterisk (*) in each of the 4 input fields.

Click Next at the bottom, and click Next again at Scope tags

Under "Included groups", click Add groups and select the student group(s).

Click Next, check the settings and click Create

Intune will now roll out this setting to the student accounts. From now on, these accounts can no longer use add-ons or extensions unless they have been explicitly installed from Intune.

Updated on: 03/11/2026