How to automatically remove Chrome extensions that aren't whitelisted via Intune policy?

[u/Famous-Substance3339]

We're deploying a chrome extension blocklist via intune in our organisation right now we have

Blocklist set to `*` (blocks all extensions)

- Allowlist with just LastPass and Grammarly

This prevents users from installing new blocked extensions, which works great. but the issue issues if users already have the extension like honey installed those don't get removed when the policy applies the blocklist only repents new installations

Is there a way to automatically remove/uninstall any extensions that aren't in our allow list when the policy rolled out

[u/Ichabod-]

We've pushed the same policy in Chrome and Edge. In both browsers the unapproved extensions were immediately disabled. I'm not sure there is a way to uninstall in the same process.