Psono Documentation

# Intune

A brief guide how to distribute the browser extension centrally with Microsoft Intune (Endpoint Manager)

# Installation Windows

This guide explains how to distribute Psono in your company and install it for your users in Edge.

  1. Login to endpoint.microsoft.com

  2. Click on Devices

    Click on Devices

  3. Go to Windows devices > Configuration profiles

    Intune

  4. Click on Create profile

    Intune

  5. Basics

    Select" Windows 10 and later", "Templates" and "Administrative Templates"

    Intune

  6. Configuration settings

    Choose "Computer Configuration and" select "Control which extensions are installed silently"

    Intune

  7. Toggle Enabled

    Toggle Enabled and enter the following value abobmepfpbkapdlmfhnnkebcnhgeccbm (or for the extension from chrome store eljmjmgjkbmpmfljlmklcfineebidmlo;https://clients2.google.com/service/update2/crx)

    Intune

  8. Assignments

    Assign the profile to the intended users / groups or devices as needed.

    Intune

  9. Review and create

    Intune

    It takes a while till the profile is applied to all users.

# Configuration Windows with ADMX templates

You can configure Psono's browser extensions through Intune with the provided ADMX templates.

# Import the ADMX templates

Download the following template and language files:

The browser extension template depends on the base PSONO template. Import them in this order:

  1. Log in to the Microsoft Intune admin center (opens new window).

  2. Go to Devices > Manage devices > Configuration > Import ADMX.

  3. Click Import, upload PSONO.admx together with PSONO.adml, and wait until the import status is Available.

  4. Click Import again, upload PSONO_Browser_Extensions.admx together with PSONO_Browser_Extensions.adml, and wait until the import status is Available.

Do not delete the base PSONO template while the browser extension template is imported. Intune requires the parent template for the browser extension policies.

# Create a configuration profile

  1. Go to Devices > Manage devices > Configuration and create a new policy.

  2. Select Windows 10 and later as the platform and Templates > Imported Administrative templates as the profile type.

  3. Enter a meaningful name for the profile.

  4. Under Configuration settings, navigate to Computer Configuration > PSONO > PSONO Browser Extensions.

  5. Select the ConfigJson policy for each browser that you want to configure, set it to Enabled, and enter your browser extension configuration as a single-line JSON value. For example:

    {"backend_servers":[{"title":"Your Company","url":"https://example.com/server"}],"base_url":"https://example.com/","allow_custom_server":false,"allow_registration":true,"allow_lost_password":true}

    Separate policies are available for Chrome, Edge, and Firefox. Configure only the policies for browsers used in your environment.

  6. Assign the profile to the intended users, groups, or devices, then review and create it.

It can take some time for the profile to be applied to all assigned devices.

# Configuration Windows with PowerShell scripts

As an alternative to the ADMX templates, you can distribute PowerShell scripts that make the necessary adjustments.

  1. Login to endpoint.microsoft.com

  2. Click on Devices

    Intune

  3. Go to Scripts

    Intune

  4. Click "Add" and select "Windows 10 and later"

    Intune

  5. Enter a meaningful title

    Intune

  6. Script settings

    Pick one of the PowerShell scripts below and check "Run script in 64 bit PowerShell Host"

    Intune

    • PowerShell script for Chrome:
    if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\eljmjmgjkbmpmfljlmklcfineebidmlo\policy") -ne $true) {  New-Item "HKLM:\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\eljmjmgjkbmpmfljlmklcfineebidmlo\policy" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\eljmjmgjkbmpmfljlmklcfineebidmlo\policy' -Name 'ConfigJson' -Value '{"backend_servers":[{"title":"Your Company","url":"https://example.com/server"}],"base_url":"https://example.com/","allow_custom_server":false,"allow_registration":true,"allow_lost_password":true}' -PropertyType String -Force -ea SilentlyContinue;
    • PowerShell script for Edge:
    if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Microsoft\Edge\3rdparty\Extensions\abobmepfpbkapdlmfhnnkebcnhgeccbm\policy") -ne $true) {  New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Edge\3rdparty\Extensions\abobmepfpbkapdlmfhnnkebcnhgeccbm\policy" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Policies\Microsoft\Edge\3rdparty\Extensions\abobmepfpbkapdlmfhnnkebcnhgeccbm\policy' -Name 'ConfigJson' -Value '{"backend_servers":[{"title":"Your Company","url":"https://example.com/server"}],"base_url":"https://example.com/","allow_custom_server":false,"allow_registration":true,"allow_lost_password":true}' -PropertyType String -Force -ea SilentlyContinue;
    • PowerShell script for Firefox:
    if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Mozilla\ManagedStorage\{3dce78ca-2a07-4017-9111-998d4f826625}") -ne $true) {  New-Item "HKLM:\SOFTWARE\Mozilla\ManagedStorage\{3dce78ca-2a07-4017-9111-998d4f826625}" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Mozilla\ManagedStorage\{3dce78ca-2a07-4017-9111-998d4f826625}' -Name '(default)' -Value 'C:\Program Files\Mozilla Firefox\browser\extensions\3dce78ca-2a07-4017-9111-998d4f826625.json' -PropertyType String -Force -ea SilentlyContinue;
New-Item 'C:\Program Files\Mozilla Firefox\browser\extensions' -ItemType Directory
New-Item 'C:\Program Files\Mozilla Firefox\browser\extensions\3dce78ca-2a07-4017-9111-998d4f826625.json' -ItemType File -Value '{"name": "{3dce78ca-2a07-4017-9111-998d4f826625}","description": "ignored","type": "storage","data": {"ConfigJson": "{\"backend_servers\":[{\"title\":\"Your Company\",\"url\":\"https://example.com/server\"}],\"base_url\":\"https://example.com/\",\"allow_custom_server\":false,\"allow_registration\":true,\"allow_lost_password\":true}"}}' -Force

  7. Assignments

    Assign the script to the corresponding users / groups / devices.

  8. Review

    Review your settings and confirm.

← Mobile App →