Browser Extension Deployment

Chrome via Intune on Windows

Deploy the Ploy Chrome extension to Windows devices using Microsoft Intune. This guide shows you how to configure a PowerShell script and Chrome policy to force-install the extension.

Before you begin: You'll need admin access to Microsoft Intune and your Ploy tenant subdomain.

What you need

  • Microsoft Intune admin access

  • Ploy extension ID: onophcmaogkfmemihdicghifbojhhkik

  • Update manifest URL: https://ploy-chrome-extension.s3.amazonaws.com/extension/v2/update-manifest.xml

Step 1 – Download the Windows deployment package

Get your pre-configured PowerShell script from the Ploy portal:

  1. Go to Settings in your Ploy dashboard

  2. Navigate to Portal Config

  3. Click Download policy for Windows

Download policy button in Ploy portal settings

Extract the ZIP file and locate ploy-chrome-windows.ps1 – you'll use this in Intune.

Step 2 – Upload the PowerShell script to Intune

  1. In the Microsoft Intune admin center, go to Devices → Configuration

  2. Select Configuration scripts (under Manage)

  3. Click + Add → Windows 10 and later

  4. Give it a name like "Ploy Chrome Extension - Force Install"

  5. Upload the ploy-chrome-windows.ps1 file

  6. Assign to a test group of devices

Create new policy button in Intune

Step 3 – Create a Chrome configuration profile

Now configure Chrome to force-install the Ploy extension:

  1. Go to Devices → Configuration

Select administrative templates in Intune

  1. Click + Create → New policy

  2. Select Windows 10 and later for platform

  3. Name it "Chrome - Ploy Extension" and click Next

  4. In Configuration settings, search for Chrome

  5. Find and enable Configure the list of force-installed apps and extensions

Select force-installed extensions policy

  1. Click Show Options or +Add

  2. Paste this value:

onophcmaogkfmemihdicghifbojhhkik;https://ploy-chrome-extension.s3.amazonaws.com/extension/v2/update-manifest.xml
Paste extension ID and update URL

  1. Click OK, then Next

  2. Assign to the same test group you used for the PowerShell script

  3. Review and create the policy

Step 4 – Verify on test devices

On a test Windows device:

  1. Sync with Intune (Settings → Accounts → Access work or school → Sync)

  2. Quit and reopen Chrome completely

  3. Confirm the Ploy icon appears in the toolbar

  4. Visit chrome://extensions – Ploy should show as "Installed by your organization"

  5. Visit chrome://policy and verify the subdomain and authentication token appear under the Ploy section

  6. Click the Ploy icon and sign in to verify access

Once verified on test devices, expand the rollout by updating your Intune assignments to include more users or departments.

Was this helpful?
Was this helpful?