Description

Deploy the ConcealBrowse extension to Google Chrome on macOS endpoints seamlessly with Microsoft Intune.

Applies to

• Microsoft Intune
• Apple macOS
• Google Chrome

Procedure for Normal Installation (user can disable)

1. In your web browser navigate to https://endpoint.microsoft.com/ and you will need to sign in with an administrator account.
2. On the left select Devices. Then under the By platform section, choose macOS.
   
   
3. Under the macOS policies section, click Configuration Profiles
   
   
4. Check to see if you have an existing profile for Chrome. From our testing you can only have one profile per application.
   1. If you already have a Chrome profile, refer to the next section: If you already have a Chrome profile
   2. If you do NOT have a Chrome profile, scroll down to the section named: If you do not have a Chrome Profile

If you already have a Chrome profile

1. Click on the profile, under Configuration settings, locate and expand the Preference file.

2. Copy the contents to a text editor which handles XML well.
   Ex. Visual Studio Code - you can download it here if needed.

   <key>ExtensionSettings</key>
   <dict>
   <key>jmdpihfpelphmllgmamebdbelmobjfpg</key>
   <dict>
   <key>installation_mode</key>
   <string>normal_installed</string>
   <key>toolbar_pin</key>
   <string>force_pinned</string>
   <key>update_url</key>
   <string>https://clients2.google.com/service/update2/crx</string>
   </dict>
   </dict>
   

3. Recommended, disable incognito mode and guest mode as it’s not possible to enforce extension usage in those modes.
   

   <key>IncognitoModeAvailability</key>
   <integer>1</integer>
   <key>BrowserGuestModeEnabled</key>
   <false/>

4. The resultant file should look like this, along with your existing settings
   

   <key>ExtensionSettings</key>
   <dict>
   <key>jmdpihfpelphmllgmamebdbelmobjfpg</key>
   <dict>
   <key>installation_mode</key>
   <string>normal_installed</string>
   <key>toolbar_pin</key>
   <string>force_pinned</string>
   <key>update_url</key>
   <string>https://clients2.google.com/service/update2/crx</string>
   </dict>
   </dict>
   <key>IncognitoModeAvailability</key>
   <integer>1</integer>
   <key>BrowserGuestModeEnabled</key>
   <false/>

5. Save the file

6. In Microsoft Intune, visit Devices > macOS > Configuration Profiles (refer to images above)

7. Click the existing chrome Configuration profile

8. Next to Configuration settings, click Edit

9. Click Select a file, browse to and select your updated file

10. Click Review + Save

If you do not have a Chrome Profile

1. Download our pre-configured com.google.Chrome.plist file attached to this article. Once downloaded, delete the .removeme extension.

2. Open the file with a text editor which handles XML well
   Ex. Visual Studio Code - you can download it here if needed. The XML Tools extension is very helpful
3. Review and modify any other settings desired. For example Incognito mode and guest mode will be disabled by the plist file to prevent bypassing ConcealBrowse protections.
4. Click + Create profile:
   - Platform: macOS
   - Profile type: Templates
   - Template name: Preference file
5. Click Create

6. Basics:
   - Name: Chrome Profile
   - Description: We recommend adding your name, date, and a link to this article

7. Click Next

8. Configuration settings:
   - Preference domain name: com.google.Chrome
   - Click Select a file
   - Browse to and select the plist file you downloaded in step 1.

9. Click Next

10. Assignments:
    - Choose a group to test the preferences with before mass deployment
    - Choose any necessary exclusions
    - Click Next, then Create

Configure ConcealBrowse for silent installation

1. Download the concealbrowse.plist.removeme file attached to this article. Once downloaded, delete the .removeme extension.

2. Edit the file to incorporate your Company ID and Site ID. Ensure they are all lowercase. Find your Company ID & Site ID: Register New Device > Step 4

3. Click + Create profile:
   - Platform: macOS
   - Profile type: Templates
   - Template name: Preference file

4. Click Create

5. Basics:
   - Name: Chrome - ConcealBrowse Settings
   - Description: We recommend adding your name, date, and a link to this article

6. Click Next

7. Configuration settings:
   - Preference domain name: com.google.Chrome.extensions.jmdpihfpelphmllgmamebdbelmobjfpg
   - Click Select a file
   - Browse to and select the plist file you completed in step 2.

8. Click Next

9. Assignments:
   - Choose a group to test the preferences with before mass deployment
   - Choose any necessary exclusions
   - Click Next, then Create

Procedure for Enforced Installation (user cannot disable)

Use the directions above, and edit the installation_mode from normal_installed to force_installed

<key>installation_mode</key>
<string>force_installed</string>

References