Skip to main content

Deploy Arrow Smart Extension using GPO

Fred Rodriguez
Updated

If you're an admin on the Arrow Omnix plan, you can set up Omnix Credential Protection features for your organization at the same time you deploy the Arrow Smart Extension.
Mass deploy Omnix Credential Protection using Windows and GPO

This article explains how to create a new GPO policy, link the policy to an OU (organizational unit), and deploy the Arrow Smart Extension to any domain-joined computer inside the OU. The extension will be added to any Google Chrome, Microsoft Edge, or Mozilla Firefox browser installed on an OU computer.

GPO only supports Windows. If you're using a Mac computer, you can use Jamf instead.
Use Jamf to deploy the Arrow Smart Extension

Step 1: Create a new group policy and link to an OU

  1. On a domain-joined server, open Group Policy Management, right-click and select Run as administrator.

  2. Open all folders within Group Policy Management until you see the "Group Policy Objects" folder. Right-click that folder and select New.

  3. In the New GPO pop-up, enter "ArrowGPO" for the Name and then select OK.

  4. Right-click your OU from the "Group Policy Management" folder and select Link an Existing GPO. For example, if the domain is "dashlanenyc.com" and the OU is "Arrow-Client", the target computers are in the "Arrow-Client" folder.

  5. In the Select GPO pop-up, select the "Arrow-GPO" you created and select OK.

Step 2: Download the template for your browser and configure the Arrow Smart Extension GPO

Select the browser you're using.

Download the template and configure the Arrow Smart Extension GPO in Chrome

  1. Download the “policy_templates.zip” template file
  2. Right-click the "policy_templates.zip" file in Explorer, select Rename, and rename it "chrome_policy_templates".

  3. Select the "chrome_policy_templates" file that you just renamed and then select Extract all.

  4. In the Select a Destination and Extract Files pop-up, select Browse, select your "Downloads" folder, and select Extract.

  5. In the "Downloads" folder, open the "chrome_policy_templates" folder that you just extracted, and open the "windows" folder inside it.

  6. In the "windows" folder, open the "admx" folder.

  7. Select the two files named "chrome.admx" and "google.admx", right-click the two files, and select Copy.

  8. Open "C:/Windows" in a new Explorer window, right-click on the "Policy Definitions" folder, and select Paste.

  9. Return to the "admx" folder again, open the "en-US" folder inside that, select the two files named "chrome.adml" and "google.adml", right-click the two files, and select Copy.

  10. Return to the "Policy Definitions" folder again, right-click the "en-US" folder, and select Paste.

  11. Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.

  12. In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Google", "Google Chrome", and "Extensions". Then right-click "Configure the list of force-installed apps and extensions" and select Edit.

  13. In the Configure the list of force-installed apps and extensions pop-up, select Enabled, and select Show. In the Show Contents pop-up, paste "fdjamakpfbbddfjaooikfcpapjohcfmg;https://clients2.google.com/service/update2/crx", and select OK.

Download the template and configure the extension GPO in Edge

  1. Download Windows 64-bit Policy
  2. In the Download Microsoft Edge Policy File pop-up, select Accept and download.

  3. Open the "MicrosoftEdgePolicyTemplates" file you just downloaded in Explorer and save it to your "Downloads" folder.

  4. Select "MicrosoftEdgePolicyTemplates" file in your "Downloads" folder and then select Extract all.

  5. In the Select a Destination and Extract Files pop-up, select Browse, select your "Downloads" folder, and select Extract.

  6. In the "Downloads" folder, open the "MicrosoftEdgePolicyTemplates" folder that you just extracted, and open the "windows" folder inside it.

  7. In the "windows" folder, open the "admx" folder.

  8. Select the three files named "msedge.admx", "msedgeupdate.admx", and "msdegewebview2.admx", right-click the three files, and select Copy.

  9. Open "C:/Windows" in a new Explorer window, right-click on the "Policy Definitions" folder, and select Paste.

  10. Return to the "admx" folder again, open the "en-US" folder inside that, select the three files named "msedge.admx", "msedgeupdate.admx", and "msdegewebview2.admx", right-click the three files, and select Copy.

  11. Return to the "Policy Definitions" folder again, right-click the "en-US" folder, and select Paste.

  12. Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.

  13. In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Microsoft Edge", and "Extensions". Then right-click "Control which extensions are installed silently" and select Edit.

  14. In the Configure the list of force-installed apps and extensions pop-up, select Enabled, and select Show. In the Show Contents pop-up, paste "gehmmocbbkpblljhkekmfhjpfbkclbph", and select OK.

Download the template and configure the extension GPO in Firefox

  1. Download the Mozilla policy template from Github to your "Downloads" folder. Select Code and then select Download ZIP.

    Download the template

  2. Right-click the "policy_templates.zip" file in Explorer, select Rename, and rename it "firefox_policy_templates".

  3. Select the "firefox_policy_templates" file that you just renamed and then select Extract all.

  4. In the Select a Destination and Extract Files pop-up, select Browse, select your "Downloads" folder, and select Extract.

  5. In the "Downloads" folder, open the "firefox_policy_templates" folder that you just extracted, and open the "policy-templates-master" folder inside it.

  6. In the "policy-templates-master" folder, open the "windows" folder.

  7. Select the two files named "firefox.admx" and "mozilla.admx", right-click the two files, and select Copy.

  8. Open "C:/Windows" in a new Explorer window, right-click on the "Policy Definitions" folder, and select Paste.

  9. Return to the "policy-templates-master" folder again, open the "windows" folder inside that, select the two files named "firefox.adml" and "mozilla.adml", right-click the two files, and select Copy.

  10. Return to the "Policy Definitions" folder again, right-click the "en-US" folder, and select Paste.

  11. Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.

  12. In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Mozilla", "Firefox", and "Extensions". Then right-click "Extensions to install" and select Edit.

  13. In the Configure the list of force-installed apps and extensions pop-up, select Enabled, and select Show. In the Show Contents pop-up, paste "https://addons.mozilla.org/firefox/downloads/latest/dashlane/latest.xpi", and select OK.

    image (6).png

(Optional) Step 3: Pin the Arrow Smart Extension to browser toolbars with GPO

Select the browser you want to pin the Arrow Smart Extension to with GPO.

Chrome

  1. Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
  2. In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, "Google", "Google Chrome", "Extensions", and then "Configure extension management settings".
  3. Select Enable, and paste the following code for "Configure extension management settings":
    {"fdjamakpfbbddfjaooikfcpapjohcfmg":{"toolbar_pin":"force_pinned"}}
    Select OK and Apply.
  4. Run gpupdate on the server and the client computer.
  5. Check the client computer. The Arrow D will appear pinned in the browser toolbar.

Microsoft Edge

  1. Right-click your OU from the "Group Policy Management" folder, as you did at the beginning of this article, and select Edit.
  2. In the Group Policy Management Editor, open "Computer Configuration", "Policies", "Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, “Microsoft Edge”, “Extensions”, and then "Configure extension management settings”"
  3. Select Enable, and paste the following code for "Configure extension management settings":
    {"gehmmocbbkpblljhkekmfhjpfbkclbph":{"toolbar_state":"force_shown"}}
    Select OK and Apply.
  4. Run gpupdate on the server and the client computer.
  5. Check the client computer. The Arrow D will appear pinned in the browser toolbar.

Delete the passwords saved in your browser

We strongly recommend that you delete the passwords saved in the browser password manager after you save them in Arrow. Otherwise, you might have problems using Autofill and other Arrow features.
Make sure you import your passwords to Arrow before deleting them in the browser.

Move your data to Arrow

Delete the passwords in your browser:

Google Chrome  |  Mozilla Firefox  |  Microsoft Edge  |  Safari

After the deployment is complete, the Arrow Smart Extension is automatically installed when members log in.

Comments

0 comments

Article is closed for comments.

Powered by Zendesk