Chrome extension
Group Policy (GPO)
See Set Chrome Browser policies on managed PCs to download the policy templates.
You will need to modify "Configure the list of force-installed apps and extensions" under Computer Configuration -> Policies -> Administrative Templates .* -> Google -> Google Chrome -> Extensions
Set it to enabled and add the UXM extension to the list of forced extensions, see available extensions in bottom of page, newest UXM Web extension is:
Newest Browser Extension for UXM Desktop Agent versions after 2022.08.01
iilkkemeagoeimfiklijgaeblnfpknlk;https://clients2.google.com/service/update2/crx
Modify "Configure native messaging allowlist" under Computer Configuration -> Policies-> Administrative Templates .* -> Google -> Google Chrome -> Native Messaging
Add values: com.uxmapp.chromium.nativemessagehost and mcg_uxm_chrome_nativemessagehost (if supporting UXM Desktop Agent version under 2022.06.23)
Extension will be install on the Active Directory joined machines next time they synchronize GPO settings, you can force the synchronization by executing gpupdate /force in a elevated cmd prompt on the domain joined client machine.
Please note that you can only have 1 Chrome extension allow list, multiple lists in different GPO's won't be merged together.
Google Admin console (Chrome Browser Cloud Management)
Goto admin.google.com and login as your Google administrator and select Device Management -> Chrome and then Apps & Extension, see available extensions in bottom of page, newest UXM Web extension is
UXM Desktop Agent version over 2022.08.01 iilkkemeagoeimfiklijgaeblnfpknlk;https://clients2.google.com/service/update2/crx
Select that is has to "Force Install".
Manual Installation
Select extension to add from "Chrome extension versions" list and press "Add to Chrome", requires that the UXM Desktop agent is installed on endpoint.
UXM Desktop installer
The UXM Desktop agent can write to the Group Policy registry to force the extension to load, this is done by selecting "Force browser extension/addon activation" during install or supplying the /force_activation parameter to the installer.
The UXM Desktop agent enables the extension by altering the following 2 registry places:
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist
"NewestExtensionID;https://clients2.google.com/service/update2/crx" is added.
 - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\NativeMessagingAllowlist
"mcg_uxm_chrome_nativemessagehost" and "com.uxmapp.chromium.nativemessagehost" is added.
Users will be notified that the extension is managed by the organization and it can't be disabled.
Chrome settings will display that the browser is managed by your organization. Clicking on the "browser is managed" will show the extensions installed by organization.
Please note that GPO's distributed by domain will override the settings set by the UXM Desktop agent. GPO will have to be setup by the domain admin, see section 1.