Most organizations prioritize security and manageability when it comes to their employees’ web browsing experience. One common method to achieve this is by implementing policies that restrict certain actions, such as installing extensions, in web browsers like Microsoft Edge. This can be done by utilizing the “control which extensions cannot be installed” policy, which allows admins to block the installation of specific extensions.

By leveraging the wildcard option in this policy, organizations can block all extensions in one full swoop in Microsoft Edge. This level of granular control ensures that only approved and secure extensions are accessible to employees, reducing the risk of malicious or incompatible extensions compromising the browsing environment.

GPO (Group Policy Object) and Intune settings catalogue are two popular tools that organizations use to enforce such policies. So, whether it’s through GPO or the Intune settings catalogue, organizations have the means to effectively control which extensions can or cannot be installed in Microsoft Edge, safeguarding their browsing environment. (screenshots below)