Knowledge Base

Using GPO to install the Web Threat Shield to Edge Chromium

  • 23 March 2020
  • 0 replies
  • 30 views

Userlevel 4
Badge +15

You can use Group Policy Object (GPO) to deploy the Webroot Web Threat Shield (WTS) extension to Edge Chromium on Windows domains, which is helpful when you have to enable the WTS for groups of computers. To enable the WTS for a single computer, use these instructions.

Webroot has created this document to assist with using GPO to install the WTS extension. It assumes that you have experience with GPO and it is recommended that you do before proceeding. For more information on GPO from Microsoft, click here.

Webroot Support does not troubleshoot GPO and will not be able to answer GPO related questions. If the Web Threat Shield itself is malfunctioning in any way, Webroot Support will be able to investigate and assist.

For more information on using GPO, click the topic below:

 

To install the WTS to Microsoft Edge Chromium using GPO

  1. Download the latest Microsoft Edge Chromium Policy templates from the Microsoft Edge for Business site. You will first have to select a channel/build and platform, then you can use the Get Policy Files link to download the templates.
     

    Note: Click here for additional information on customizing Edge Chromium using GPO.

  2. Unpack the files from the downloaded policy templates zip file.
     
  3. In the contents of the unpacked zip file, the Windows directory includes a msedge.admx and msedgeupdate.admx file, in addition to a number of language directories. The language directories each contain a msedge.adml and msedgeupdate.adml file. You will duplicate this structure when copying these files.
     
  4. Identify the language you will be using and place copies of the above files in the proper location:
     
    • If applying the GPO to a single computer
      1. Use location: C:\Windows\PolicyDefinitions
      2. Copy the msedge.admx and msedgeupdate.admx files to C:\Windows\PolicyDefinitions
      3. Copy the msedge.adml and msedgeupdate.adml files to the language directory located in C:\Windows\PolicyDefinitions
         
    • If applying the GPO to a domain
      1. Use location: \\<domain>\SYSVOL\<domain>\policies\PolicyDefinitions\
      2. Copy the msedge.admx and msedgeupdate.admx files to C:\Windows\PolicyDefinitions
      3. Copy the msedge.adml and msedgeupdate.adml files to the language directory located in \\<domain>\SYSVOL\<domain>\policies\PolicyDefinitions\
         

         
  5. Start the Group Policy Editor
    • To edit the policy for a single computer, open the Local Computer Policy by entering gpedit.msc at the Start menu.
    • To edit the policy for a domain, start Group Policy Management on a domain controller.
       
  6. In the left pane of the policy editor, expand the tree structure and locate the Control which Extensions are installed silently setting in the Microsoft Edge section:
    • Computer Configuration > Policies > Administrative Templates > Microsoft Edge > Extensions > Control which Extensions are installed silently
       
  7. In the right pane, click Control which extensions are installed to open the Settings page and select Enabled.
     

     
  8. Click the Enabled button to enable the extension to install.
     
  9. To specify the extension to install, click the Show button and add the value below to the dialog box:
    • Fmkaflbamgddpjacdmjlkhbnpnlemaea
       
  10. To verify that the WTS is installed, you can check the Options page. To open the Options page, in the top bar of the browser, click the Webroot icon and select Extension options.

    When WTS is installed, you will see the screen:
     

     

 

For more information on using GPO, click the topic below:


This topic has been closed for comments