How can we help?

Deploy the Torii Browser Extension in Chrome using Microsoft Intune (Windows)

Rotem Golov
Rotem Golov
  • Updated

Learn about rolling Torii's Browser extension in Chrome using Microsoft Intune (Windows).

Deploy 

You will need the Chrome ADM/ADMX templates before you can configure the Torii Browser extension. 

  1. Download the appropriate Chrome ADM/ADMX Templates from https://chromeenterprise.google/browser/download/

    Note: Scroll Down to “Need to stick with on-premise management”

Download both the Policy and Update Templates

  1. Unzip both downloads. We will need 6 files to deploy the extension
    1. Google.admx
    2. GoogleUpdate.admx
    3. Chrome.admx
    4. Google.adml
    5. GoogleUpdate.adml
    6. Chrome.adml


  1. Log into the Microsoft Intune Admin Center
  2. Go to Devices >> Manage Devices >> Configuration
  3. Under Import ADMX >> Import
  4. Add the “google.admx” and “google.adml” files respectively >> Next >> Create
  5. Edit the “GoogleUpdate.admx” file in a text editor. Delete the line”    <using prefix="windows" namespace="Microsoft.Policies.Windows" />"

  1. Add the “GoogleUpdate.admx” and “GoogleUpdate.adml” files respectively >> Next >> Create
  1. Edit the “Chrome.admx” file in a text editor. Delete the line “<using namespace="Microsoft.Policies.Windows" prefix="windows"/>”
    1. Add the “chrome.admx” and “chrome.adml” files respectively >> Next >> Create
  2. Please make sure that all uploads are successful before proceeding:
  3. Click back to “Policies” >> Create >> New Policy
  4. Select “Windows 10 and later” for Platform
  5. Select “Templates” for Profile Type
  6. Select “Imported Administrative templates (Preview)”
  7. Click Create
  8. Provide a Name (ie. Torii - Chrome)
  9. Click Next
  10. Expand Google >> Google Chrome >> Extensions >> Configure the list of force-installed apps and extensions

  1. Select Enabled
  2. Add
    khfhkedhhdbejcbapdicgagbljimakai;https://clients2.google.com/service/update2/crx
  1. Click OK
  2.  Click Next
  3. Click Next for Scope
  4. Add the correct assignment groups (or All Devices)
  5. Click Next
  6. Click Create

Note: It can take a few hours for Intune to deploy the configuration down to the device. Once deployed you will see:

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request