Learn how to prevent users from installing browser extensions and add-ons on Windows. This guide uses the Registry Editor to block extensions in Chrome, Microsoft Edge, and Firefox.
Press the Windows key, type regedit, and press Enter. Click Yes when prompted by User Account Control.
Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Important: Back up your registry before making changes. Go to File > Export to create a backup.
Under the Policies key, create a new key named Google, and inside that, create another key named Chrome.
Inside the Chrome key, create a new key named ExtensionInstallBlocklist.
Inside ExtensionInstallBlocklist, create a new String Value:
1*The wildcard * blocks all extension installations. When users try to install an extension, they will see an error message saying extensions are blocked by the administrator.
Full registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist
Under the Policies key, create a new key named Microsoft, then inside that, create Edge.
Inside the Edge key, create a new key named ExtensionInstallBlocklist.
Inside ExtensionInstallBlocklist, create a new String Value:
1*Full registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
Under the Policies key, create a new key named Mozilla, then inside that, create Firefox.
Inside the Firefox key, create a new key named ExtensionSettings.
Inside ExtensionSettings, create a new key named * (asterisk). Inside the * key, create a new String Value:
installation_modeblockedFull registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\ExtensionSettings\*
Registry changes alone are not enough if the user has administrator access. Users with admin rights can reverse these changes.
To fully enforce the restriction:
No system reboot is required. Open each browser and try to install an extension: