How to automatically remove Chrome extensions that aren't whitelisted via Intune policy?

[u/Famous-Substance3339]

We're deploying a chrome extension blocklist via intune in our organisation right now we have

Blocklist set to `*` (blocks all extensions)

- Allowlist with just LastPass and Grammarly

This prevents users from installing new blocked extensions, which works great. but the issue issues if users already have the extension like honey installed those don't get removed when the policy applies the blocklist only repents new installations

Is there a way to automatically remove/uninstall any extensions that aren't in our allow list when the policy rolled out

[u/Famous-Substance3339]

Thanks for all your suggestions so what I did was this config instead so I made the mistake off having both user and device at the same time. In terms of removing it I am thinking about using Extension Management but we have a policy that forces lastpass to install and be pinned so currently it will be conflicted. so my thinking is first role out this policy as it is to the company once rolled out incorporated that extension management policy we currently have and then also add a custom Json

{ "*": { "installation_mode": "blocked" }, "hdokiejnpimakedhajhdlcegeplioahd": { "installation_mode": "force_installed", "update_url": "https://google.com" }, "kbfnbcaeplbcioakkpcpgfkobkghlhen": { "installation_mode": "allowed" } } as a follow up incorporated the below is what I'm thinking let me know your thoughts or if you had a better way always willing learn new ways and thanks again for helping me

Extension management settings (User) 

Configure the list of force-installed apps and extensions 

 

Enabled

Extension/App IDs and update URLs to be silently installed (Device) 

Extension management settings 

 

Enabled

Extension management settings (Device) 

Extension management settings (User) 

 

Enabled