Description
Deploy the ConcealBrowse extension to Google Chrome on macOS endpoints seamlessly with Microsoft Intune.
Applies to
- Microsoft Intune
- Apple macOS
- Google Chrome
Procedure for Normal Installation (user can disable)
- In your web browser navigate to https://endpoint.microsoft.com/ and you will need to sign in with an administrator account.
- On the left select Devices. Then under the By platform section, choose macOS.
- Under the macOS policies section, click Configuration Profiles
- Check to see if you have an existing profile for Chrome. From our testing you can only have one profile per application.
- If you already have a Chrome profile, refer to the next section: If you already have a Chrome profile
- If you do NOT have a Chrome profile, scroll down to the section named: If you do not have a Chrome Profile
If you already have a Chrome profile
- Click on the profile, under Configuration settings, locate and expand the Preference file.
-
Copy the contents to a text editor which handles XML well.
Ex. Visual Studio Code - you can download it here if needed.<key>ExtensionSettings</key>
<dict>
<key>jmdpihfpelphmllgmamebdbelmobjfpg</key>
<dict>
<key>installation_mode</key>
<string>normal_installed</string>
<key>toolbar_pin</key>
<string>force_pinned</string>
<key>update_url</key>
<string>https://clients2.google.com/service/update2/crx</string>
</dict>
</dict> - Recommended, disable incognito mode and guest mode as it’s not possible to enforce extension usage in those modes.
<key>IncognitoModeAvailability</key>
<integer>1</integer>
<key>BrowserGuestModeEnabled</key>
<false/> - The resultant file should look like this, along with your existing settings
<key>ExtensionSettings</key>
<dict>
<key>jmdpihfpelphmllgmamebdbelmobjfpg</key>
<dict>
<key>installation_mode</key>
<string>normal_installed</string>
<key>toolbar_pin</key>
<string>force_pinned</string>
<key>update_url</key>
<string>https://clients2.google.com/service/update2/crx</string>
</dict>
</dict>
<key>IncognitoModeAvailability</key>
<integer>1</integer>
<key>BrowserGuestModeEnabled</key>
<false/> -
Save the file
-
In Microsoft Intune, visit Devices > macOS > Configuration Profiles (refer to images above)
-
Click the existing chrome Configuration profile
-
Next to Configuration settings, click Edit
-
Click Select a file, browse to and select your updated file
-
Click Review + Save
If you do not have a Chrome Profile
-
Download our pre-configured com.google.Chrome.plist file attached to this article. Once downloaded, delete the .removeme extension.
- Open the file with a text editor which handles XML well
Ex. Visual Studio Code - you can download it here if needed. The XML Tools extension is very helpful - Review and modify any other settings desired. For example Incognito mode and guest mode will be disabled by the plist file to prevent bypassing ConcealBrowse protections.
- Click + Create profile:
- Platform: macOS
- Profile type: Templates
- Template name: Preference file - Click Create
-
Basics:
- Name: Chrome Profile
- Description: We recommend adding your name, date, and a link to this article -
Click Next
-
Configuration settings:
- Preference domain name: com.google.Chrome
- Click Select a file
- Browse to and select the plist file you downloaded in step 1. - Click Next
-
Assignments:
- Choose a group to test the preferences with before mass deployment
- Choose any necessary exclusions
- Click Next, then Create
Configure ConcealBrowse for silent installation
-
Download the concealbrowse.plist.removeme file attached to this article. Once downloaded, delete the .removeme extension.
- Edit the file to incorporate your Company ID and Site ID. Ensure they are all lowercase. Find your Company ID & Site ID: Register New Device > Step 4
-
Click + Create profile:
- Platform: macOS
- Profile type: Templates
- Template name: Preference file - Click Create
-
Basics:
- Name: Chrome - ConcealBrowse Settings
- Description: We recommend adding your name, date, and a link to this article -
Click Next
-
Configuration settings:
- Preference domain name: com.google.Chrome.extensions.jmdpihfpelphmllgmamebdbelmobjfpg
- Click Select a file
- Browse to and select the plist file you completed in step 2. - Click Next
-
Assignments:
- Choose a group to test the preferences with before mass deployment
- Choose any necessary exclusions
- Click Next, then Create
Procedure for Enforced Installation (user cannot disable)
Use the directions above, and edit the installation_mode from normal_installed to force_installed
<key>installation_mode</key>
<string>force_installed</string>
References
Was this article helpful?
Articles in this section
- Deploy ConcealBrowse on Windows 10+ using Intune and Win32 app
- Deploying ConcealBrowse through ConnectWise Automate
- Conceal Firefox Release
- Deploying ConcealBrowse through Datto ComStore
- Deploy ConcealBrowse on Windows 10+ using Intune and MSI
- Deploying ConcealBrowse through the MSI
- Deploy the ConcealBrowse extension to Chrome on most operating systems using Chrome Browser Cloud Management and Jumpcloud
- Deploy the ConcealBrowse extension to Chrome on most operating systems using Chrome Browser Cloud Management
- Deploy the ConcealBrowse extension to Chrome, Edge, and Brave on Windows 10+ using NinjaOne/NinjaRMM and PowerShell
- Walkthrough for existing users moving to device based installation