How to deploy NordPass extension through Group Policies

We recommend using Active Directory Group Policy Management to deploy NordPass extensions for Chrome, Firefox, and Edge across your organization.

Step 1: Adding browser policy templates

Chrome

  1. On your domain controller, enter the following website address into your browser: and download the 32 or 64-bit zip bundle.

  2. Go to the directory where you extracted the Google Chrome Bundle and copy the chrome.admx file located within either:

    64-bit
    \GoogleChromeEnterpriseBundle64\Configuration\admx directory to C:\Windows\PolicyDefinitions

    32-bit
    \GoogleChromeEnterpriseBundle\Configuration\admx directory to C:\Windows\PolicyDefinitions

  3. Go to the directory where you extracted the Google Chrome Bundle and copy the chrome.adml file located within either:

    64-bit
    \GoogleChromeEnterpriseBundle64\Configuration\admx\en-US directory to C:\Windows\PolicyDefinitions\en-US

    32-bit
    \GoogleChromeEnterpriseBundle\Configuration\admx\en-US directory to C:\Windows\PolicyDefinitions\en-US

Firefox

  1. On your domain controller, enter the following website address into your browser: https://github.com/mozilla/policy-templates/releases.

  2. Go to the directory in which you extracted the Firefox Policy Template file and copy the firefox.admx file located within the \policy_templates_v.(version)\windows directory to C:\Windows\PolicyDefinitions

  3. Go to the directory in which you extracted the Firefox Policy Template file and copy the firefox.adml file located within the \policy_templates_v.(version)\windows\en-US directory to C:\Windows\PolicyDefinitions\en-US

Edge

  1. On your domain controller, enter the following website address into your browser: and download the Microsoft Edge policy template file.

  2. Go to the directory where you extracted the Microsoft Edge template and copy the msedge.admx file located within the \windows\admx directory to C:\Windows\PolicyDefinitions

  3. Go to the directory where you extracted the Microsoft Edge template and copy the msedge.adml file located within the \windows\admx\en-US directory to C:\Windows\PolicyDefinitions\en-US

Step 2: Create or configure your browser policy

This is a general guide for configuring browser policies. There could be some differences between various policies.

  1. Open Group Policy Manager on your domain controller and go to Group Policy Objects.

    Note: If you do not have a Group Policy created where you want to utilize browser policies, right-click Group Policy Objects and create a New Policy.
    Screenshot_2023-03-15_at_16.24.53.png

     
  2. Name your browser policy something relevant. i.e., “NordPass for Chrome”. Click OK
    Screenshot_2023-03-15_at_16.56.01.png

  3. Once created, right-click your new policy and select Edit.
    Screenshot_2023-03-15_at_16.58.12.png

  4. Go to your desired browser policy, in this case, Chrome: NordPass for Chrome -> Computer Configuration -> Policies -> Administrative Templates -> Google Chrome -> Extensions.

    Right-click Configure the list of force-installed apps and extensions and select Edit.
    Screenshot_2023-03-15_at_16.59.52.png

  5. Choose Enabled and select Show….
    Screenshot_2023-03-15_at_17.00.30.png

  6. Add the following text line before selecting OK:

    Chrome eiaeiblijfjekdanodkjadfinkhbfgcd;https://clients2.google.com/service/update2/crx


    Firefox

    https://addons.mozilla.org/firefox/downloads/latest/nordpass-password-management/latest.xpi

    Edge

    eiaeiblijfjekdanodkjadfinkhbfgcd;https://clients2.google.com/service/update2/crx
    image-20231110-064048.png

  7. Select Apply and then OK on the next screen.

  8. Exit the Group Policy Management Editor, right-click the OU of your choice, which contains your Computers or Users, and select Link an Existing GPO.
    Screenshot_2023-03-15_at_17.02.13.png

  9. Choose your domain and select the policy you created.
    Screenshot_2023-03-15_at_17.02.49.png

  10. That’s it! The NordPass extension will be installed automatically.
    Screenshot_2023-03-15_at_17.03.22.png
    Note: You may need to run gpupdate /force in an elevated command prompt to apply this new group policy to the PCs.

     

Additional options

Turning off Chrome's built-in password manager

  1. Go to Google Chrome -> Password manager and right-click and choose Edit to Enable saving passwords to the password manager.
    Screenshot_2023-03-15_at_22.45.00.png

     
  2. Choose Disabled, then select Apply, and click OK.
    Screenshot_2023-03-15_at_22.45.40.png

     
  3. Following the same process as the previous steps, directly within Google Chrome Administrative Templates Policy definitions, you can turn off Chrome's autofill by editing Enable AutoFill for addresses and Enable AutoFill for credit cards and setting them to Disabled.
    Screenshot_2023-03-15_at_22.46.15.png

Preventing extensions from being disabled in Firefox

  1. In Extensions within Firefox, right-click Prevent extensions from being disabled or removed and select Edit.
    image-20220412-130655.png

  2. Choose Enable and select Show, and add the below text before selecting OK.
    https://addons.mozilla.org/firefox/downloads/latest/nordpass-beta/latest.xpi

    image-20220412-130818.png

Preventing extensions from being disabled in Firefox

  1. In Extensions within Firefox, right-click Prevent extensions from being disabled or removed and select Edit.
    image-20220412-130655 (1).png

  2. Choose Enable and select Show, and add the below text before selecting OK.
    https://addons.mozilla.org/firefox/downloads/latest/nordpass-beta/latest.xpi 

    image-20220412-130818.png

Turning off Firefox’s built-in password manager

In Firefox within Administrative Templates: Policy definitions, right-click and Edit both Offer to save logins and Offer to save logins (default) and set them to Disabled. When done, select Apply, and then OK.

image-20220412-131130.png