There are no settings out of the box designed for it. Many suggested registry keys and deploying them via GPO. I am not a fan of it unless I am out of options.

Looking through the options to configure extensions using the ExtensionSettings policy, one setting that pops out and caught my attention is called runtime_blocked_hosts, which basically prevents extensions from interacting with or modifying websites that you specify. It’s pretty much exactly what Trust Sites do.

Let’s give it a shot.

First of all, the policy Configure extension management settings is a Computer Configuration policy. So, you will need to set it up on a GPO that controls through a computer, not a user.

Computer Configuration > Administrative Templates > Microsoft Edge > Extensions.

The detailed setting is a JSON-based text string. Make sure to prepare the whole string in Notepad and paste it into the Group Policy Management editor. For me, the following JSON string adds BC government sites and the Purolator website to the Trusted Sites list and forces the extension shown on the toolbar.

{"odfafepnkmbhccpbejgmiehpchacaeak":{"runtime_blocked_hosts":["://.gov.bc.ca","://.purolator.com"],"toolbar_state":"force_shown"}}

And it works flawlessly.

First, download the policy template files here. There are two files for Microsoft Edge,

• msedge.admx for configuring Microsoft Edge settings. There are tons of settings that you can mess up with.
• msedgeupdate.admx for managing Microsoft Edge updates.

The msedge.admx is the one you are after. Copy it to the AD server’s PolicyDefinitions folder and those setting will show up in the Group Policy Editor.

Most Edge settings can be applied to both Computers and Users. If you want to deploy the extensions based on the user, configure that under User Configuration. Otherwise, do that under Computer Configuration.

Now let’s deploy the uBlock Origin extension via Group Policy.

Fire up the Group Policy Manager and open the policy responsible for a User’s OU. Navigate through the following location,

User Configuration > Administrative Templates > Microsoft Edge > Extensions

Double-click the setting called Control which extensions are installed silently.

Select Enable and click on the Show button. Then enter the extension ID into the box and click OK. The extension ID is the last portion of the URL of the official Edge extension page.

And that’s it. The extension will be automatically installed the next time users sign into their computers.