Skip to main content
日本語 简体中文 繁體中文

[Password Manager] Extension Deployment by Administrators

Overview

This article explains how administrators can centrally distribute (force-install) the Password Manager extension (Google Chrome / Microsoft Edge) to devices within their organization.

Notes

  1. This article is based on product specifications as of November 2026 and may be subject to change in the future.
  2. Screen displays and menu names may differ due to updates to browsers, operating systems, or management tools.
  3. This article explains how to distribute the extension. To disable the browser's built-in password manager, additional settings such as the PasswordManagerEnabled policy are required.
  4. For specific operations for each procedure, please refer to the official documentation or contact vendor support.
  5. We recommend verifying operation on a small number of devices before deploying to the production environment.
  6. If each user installs the extension manually, please refer to the following articles.
    [Password Manager] Installing and Enabling the Chrome Extension
    [Password Manager] Installing and Enabling the Edge Extension

Table of Contents

Prerequisites

Selecting a Distribution Method

Select a method according to the account management platform and device management tools you use. Extensions distributed from stores are usually updated to newer versions through the browser's update mechanism (network communication is required for updates).

Your Environment Recommended Method
Managing Chrome with Google Workspace / Cloud Identity Method 1: Google Admin Console
Using Microsoft 365 and signed in to Edge with a work account Method 1: Microsoft Edge Management Service
Active Directory / Microsoft Intune （Windows） Method 2: Windows Environment

Required Common Information

The extension IDs used for centralized distribution are as follows.

Browser Extension ID Store Page
Google Chrome cogimhdldbliahjefkfabieamdfijjmo Chrome Web Store
Microsoft Edge jhcihaigheajmgdjmkfkphbphablmjdm Microsoft Edge Add-ons

In ［Method 2］, configure the following values in each browser's ExtensionInstallForcelist (extension force-install list).

Browser Value to Configure (Extension ID & Update URL)
Google Chrome 
cogimhdldbliahjefkfabieamdfijjmo;https://clients2.google.com/service/update2/crx
Microsoft Edge 
jhcihaigheajmgdjmkfkphbphablmjdm;https://edge.microsoft.com/extensionwebstorebase/v1/crx

Chrome and Edge use different extension IDs.
Connect the ［Extension ID］ and ［Update URL］ with a half-width semicolon（；）and configure them as a single list item.

The extension ID and update URL do not normally change when the extension is updated. However, they may change in the future due to changes in how the extension is provided or changes to browser specifications.

Procedure

Method 1: Cloud Management Services

This method distributes extensions using browser cloud management services. The applicable operating systems and user/browser enrollment requirements vary by service.

Google Admin Console / Chrome Enterprise Core（Windows / macOS / ChromeOS）

You can force-install the Chrome extension for individual users or browsers from the Google Admin console.

Prerequisites

  • Per user: Use a Google Account managed by Google Workspace or Cloud Identity and sign in to a Chrome browser profile.
  • Per browser: Register the Target Chrome browser in the Admin console using Chrome Enterprise Core or similar. For browser enrollment on Windows/macOS, an enrollment token is typically distributed.

Configuration Procedure

  1. Sign in to the Google Admin console.
  2. Open ［Devices］－［Chrome］－［Apps & extensions］－［Users & browsers］.
  3. Select the Target organizational unit.
  4. Add the Password Manager extension from the Chrome Web Store, or add it by specifying the extension ID.
  5. Set the installation policy to ［Force install］ and save it.

※ The management method for managed ChromeOS devices differs from browser enrollment for Windows/macOS. Confirm the management Target and application scope.

References

Microsoft Edge Management Service (Windows / macOS)

You can use the Microsoft Edge Management Service to force-install Edge extensions for managed users.

Prerequisites

  • A Microsoft 365 environment where the Microsoft Edge Management Service is available.
  • Target users are signed in to Edge with a Microsoft Entra ID work or school account.
  • A configuration policy is assigned to Target users.

Configuration Procedure

  1. Sign in to the Microsoft 365 admin center.
  2. Open ［Settings］－［Microsoft Edge］－［Configuration policies］.
  3. Create a configuration policy for Target users.
  4. From the extension management settings, add the Edge extension ID for HENNGE Password Manager.
  5. Set the installation mode to ［Force］.
  6. Assign the policy to Target users or groups.

※ To disable the built-in Edge password manager, configure the PasswordManagerEnabled policy separately.

References

Method 2: Management Tools by OS

Distribute the policies described in Required Common Information from your existing device management infrastructure.

Windows Environment

Group Policy (GPO)

Target OS: Windows

Force-install Chrome and Edge extensions using Active Directory Group Policy.

Prerequisites

  • An Active Directory Group Policy management environment is available.
  • The Target devices are subject to GPO application.
  • Chrome or Edge administrative templates (ADMX/ADML) can be registered.

Configuration Procedure

  1. Obtain the administrative templates (ADMX/ADML) from the official Chrome or Edge website and register them in the Group Policy management environment.
  2. In the Group Policy Management Editor, open the following items.
    • Chrome: ［Computer Configuration］－［Policies］－［Administrative Templates］－［Google］－［Google Chrome］－［Extensions］
    • Edge: ［Computer Configuration］－［Policies］－［Administrative Templates］－［Microsoft Edge］－［Extensions］
  3. Enable the force-install policy corresponding to ExtensionInstallForcelist.
  4. Configure the extension ID and update URL for the Target browser listed in Required Common Information.
  5. Link the GPO to the organizational unit (OU) of the Target devices and apply it.

* There is no need to deploy Chrome Enterprise Core or the Microsoft Edge Management Service.

References

Microsoft Intune (Windows)

Target OS: Windows

Distribute the Chrome or Edge extension force-install policy from the Microsoft Intune Settings Catalog.

Prerequisites

  • Microsoft Intune is available.
  • The Target Windows devices are enrolled in and managed by Intune.

Configuration Procedure

  1. Sign in to the Microsoft Intune admin center.
  2. Create a new policy under ［Devices］－［Configuration］.
  3. Select platform ［Windows 10 and later］ and profile type ［Settings catalog］.
  4. In the Settings picker, search for and add the Chrome or Microsoft Edge extension force-install setting (ExtensionInstallForcelist).
    * If the Chrome item is not displayed in your environment, check the administrative templates or another applicable configuration method.
  5. Add the configuration values listed in Required Common Information.
  6. Assign and distribute it to the Target user or device groups.

References

Extension Distribution Verification and Troubleshooting

How to Verify Application

  1. Check policy application status

    Enter the following in the browser address bar and click ［Reload policies］.

    • Chrome: chrome://policy
    • Microsoft Edge: edge://policy

    Verify that ExtensionInstallForcelist or ExtensionSettings is displayed and that the Target settings have been applied correctly. If the status is displayed as ［OK］, verify that status. The policy name displayed varies depending on the configuration method used by the administrator.

  2. Check the extension installation status

    Use the following URLs to verify that Password Manager is installed and managed by your administrator. The displayed message may vary depending on the browser version.

    • Chrome: chrome://extensions
    • Microsoft Edge: edge://extensions

If the Settings Are Not Applied Properly

Symptom Items to Check
The policy is not displayed Check the assignment Target, device synchronization status, and whether the browser has been restarted. For cloud management, also check the management status of the Target browser and whether the browser profile is signed in with a work account.
The policy status shows an error Check the format of the configuration value (Extension ID;Update URL), half-width semicolons, browser-specific IDs and update URLs, and the data type (an array on macOS). Also be aware of conflicts with other management policies.
The policy is displayed, but the extension is not installed Check the extension ID and update URL, network connection, and access restrictions to the store or update server caused by proxies or firewalls.

Examples of primary communication destinations

  • Chrome: clients2.google.com, clients2.googleusercontent.com
  • Microsoft Edge: edge.microsoft.com, msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com

* The above are representative examples and do not cover all required communication destinations. Please refer to the official documentation and communication logs according to the extension distribution source and your network configuration.

Removing Distribution

To remove the forced installation of an extension, delete the settings for the Target extension from the policy or configuration profile configured in each management tool.

After changing the settings, please confirm that the policy has been removed on the Target devices.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.