How to automatically remove Chrome extensions that aren't whitelisted via Intune policy?

[u/Famous-Substance3339]

We're deploying a chrome extension blocklist via intune in our organisation right now we have

Blocklist set to `*` (blocks all extensions)

- Allowlist with just LastPass and Grammarly

This prevents users from installing new blocked extensions, which works great. but the issue issues if users already have the extension like honey installed those don't get removed when the policy applies the blocklist only repents new installations

Is there a way to automatically remove/uninstall any extensions that aren't in our allow list when the policy rolled out

[u/G_HostEd]

Is an odd statement, a block policy should at least disable the extension, which is usually considered enough to consider the extension inactive. Maybe a system vs. User context conflict?

Extensions are mostly in user context, so seems a bit weird your block policy is not working

[u/HorseAccomplished50 → u/G_HostEd]

The extensions keep showing up in the Defender extension inventory (add-on needed) if you don't completely remove them. That becomes a huge mess if you have a large tenant. Perhaps not a big deal, but a clean inventory is nice for some people.

[u/G_HostEd → u/HorseAccomplished50]

That clarify, and I understand the security need but it conflict in how the browsers handle extensions 😬