Skip to main content

MDM Integration

Professional

Deploy the Containment.AI Chrome extension to managed devices using your Mobile Device Management (MDM) solution for enterprise-wide coverage.

Overview​

MDM deployment enables:

  • Automatic extension installation
  • Centralized configuration
  • Compliance enforcement
  • No user action required

Supported MDM Platforms​

Microsoft Intune​

For Windows and macOS devices managed by Intune.

Jamf Pro​

For macOS devices managed by Jamf.

VMware Workspace ONE​

For mixed device environments.

Google Workspace​

For Chromebooks and Chrome browser management.

Other MDM​

Generic instructions for other platforms supporting Chrome extension policies.

Prerequisites​

Before deploying:

  • MDM admin access
  • Organization ID from Containment.AI dashboard
  • Chrome extension ID (provided in setup)
  • Update URL (provided in setup)

Microsoft Intune​

Step 1: Create Configuration Profile​

  1. Go to Devices > Configuration profiles
  2. Click Create profile
  3. Select:
    • Platform: Windows 10 and later
    • Profile type: Settings catalog

Step 2: Add Chrome Settings​

  1. Click Add settings
  2. Search for "Chrome"
  3. Add Extension management settings

Step 3: Configure Extension​

Add the extension configuration:

{
  "ExtensionInstallForcelist": {
    "Value": [
      "EXTENSION_ID;https://clients2.google.com/service/update2/crx"
    ]
  },
  "ExtensionSettings": {
    "Value": {
      "EXTENSION_ID": {
        "installation_mode": "force_installed",
        "update_url": "https://clients2.google.com/service/update2/crx",
        "toolbar_pin": "force_pinned"
      }
    }
  },
  "3rdparty": {
    "Value": {
      "extensions": {
        "EXTENSION_ID": {
          "organizationId": "YOUR_ORG_ID"
        }
      }
    }
  }
}

Step 4: Assign Profile​

  1. Click Assignments
  2. Select target groups
  3. Save and deploy

Jamf Pro​

Step 1: Create Configuration Profile​

  1. Go to Configuration Profiles
  2. Click New
  3. Name: "Containment.AI Chrome Extension"

Step 2: Add Chrome Payload​

  1. Click Application & Custom Settings
  2. Upload policy plist or JSON

Chrome Policy JSON​

{
  "ExtensionInstallForcelist": [
    "EXTENSION_ID;https://clients2.google.com/service/update2/crx"
  ],
  "ExtensionSettings": {
    "EXTENSION_ID": {
      "installation_mode": "force_installed",
      "update_url": "https://clients2.google.com/service/update2/crx"
    }
  },
  "3rdparty": {
    "extensions": {
      "EXTENSION_ID": {
        "organizationId": "YOUR_ORG_ID"
      }
    }
  }
}

Step 3: Scope and Deploy​

  1. Set scope to target computers
  2. Deploy to production

Google Workspace​

Step 1: Access Admin Console​

  1. Go to admin.google.com
  2. Navigate to Devices > Chrome > Apps & extensions

Step 2: Add Extension​

  1. Click + (Add)
  2. Select Add from Chrome Web Store
  3. Enter extension ID or search
  4. Click Select

Step 3: Configure​

  1. Set Installation Policy to Force install
  2. Enable Pin to browser toolbar
  3. Add managed configuration: 
    {
      "organizationId": "YOUR_ORG_ID"
    }

Step 4: Apply to OUs​

  1. Select target organizational units
  2. Save changes

Generic MDM​

For other MDM solutions supporting Chrome policies:

Required Policies​

Force Install Extension Registry/Policy path: ExtensionInstallForcelist Value: EXTENSION_ID;update_url

Extension Settings Registry/Policy path: ExtensionSettings Value: JSON with installation_mode and update_url

Organization Configuration Registry/Policy path: 3rdparty.extensions.EXTENSION_ID Value: JSON with organizationId

Windows Registry​

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist]
"1"="EXTENSION_ID;https://clients2.google.com/service/update2/crx"

macOS Preferences​

<key>ExtensionInstallForcelist</key>
<array>
  <string>EXTENSION_ID;https://clients2.google.com/service/update2/crx</string>
</array>

Verification​

After deployment, verify:

In Containment.AI​

  1. Go to Clients
  2. Check device count increases
  3. Verify organization connection

On Device​

  1. Open Chrome
  2. Go to chrome://extensions
  3. Verify extension is installed
  4. Check "Managed" badge

Troubleshooting​

Extension Not Installing​

  1. Check MDM Policy

    • Verify policy is assigned
    • Confirm device in scope
    • Check policy sync status

  2. Check Chrome Policy

    • Open chrome://policy
    • Look for extension policies
    • Check for conflicts

  3. Check Update URL

    • Verify network access to Google
    • Check proxy settings
    • Test URL directly

Extension Installed But Not Connecting​

  1. Check Organization ID

    • Verify correct org ID in config
    • Check for typos
    • Confirm org is active

  2. Check Network

    • Extension needs internet access
    • Verify API endpoints accessible
    • Check firewall rules

Users Can Disable Extension​

MDM-installed extensions shouldn't be removable. If users can:

  1. Check MDM policy enforcement
  2. Verify installation_mode is "force_installed"
  3. Review Chrome management settings

Best Practices​

Staged Rollout​

  1. Deploy to pilot group first
  2. Monitor for issues
  3. Gradually expand scope

Testing​

  • Test on representative devices
  • Verify all OS versions
  • Check different Chrome versions

Documentation​

  • Document configuration settings
  • Record deployment scope
  • Track version history

Monitoring​

  • Monitor installation success rate
  • Track connection status
  • Set up alerts for issues

Advanced Configuration​

Minimum Version​

Force specific extension version:

{
  "minimum_version_required": "1.5.0"
}

Toolbar Pinning​

Pin extension to toolbar:

{
  "toolbar_pin": "force_pinned"
}

Update Control​

Control update behavior:

{
  "override_update_url": true,
  "update_url": "https://custom-update-server/updates.xml"
}