How to deploy NordPass extension through Group Policies

Introduction

This guide explains how to deploy the NordPass browser extension across Chrome, Firefox, and Edge using Active Directory Group Policy Management. It covers adding browser policy templates and configuring force-install policies so the extension installs automatically for users.

Before you start:

• Use Active Directory Group Policy Management on your domain controller.
• Have access to C:\Windows\PolicyDefinitions and C:\Windows\PolicyDefinitions\en-US on the domain controller.

Here's what to do

Add browser policy templates

• Chrome
  1. On your domain controller, go to https://chromeenterprise.google/download/ 
  2. Download the 32- or 64-bit zip bundle.
  3. Copy chrome.admx from:
     • 64-bit: \GoogleChromeEnterpriseBundle64\Configuration\admx to C:\Windows\PolicyDefinitions
     • 32-bit: \GoogleChromeEnterpriseBundle\Configuration\admx to C:\Windows\PolicyDefinitions
  4. Copy chrome.adml from:
     • 64-bit: \GoogleChromeEnterpriseBundle64\Configuration\admx\en-US to C:\Windows\PolicyDefinitions\en-US
     • 32-bit: \GoogleChromeEnterpriseBundle\Configuration\admx\en-US to C:\Windows\PolicyDefinitions\en-US

• Firefox
  1. On your domain controller, go to https://github.com/mozilla/policy-templates/releases. 
  2. Download the Firefox policy template file.
  3. Copy firefox.admx from \policy_templates_v.(version)\windows to C:\Windows\PolicyDefinitions.
  4. Copy firefox.adml from \policy_templates_v.(version)\windows\en-US to C:\Windows\PolicyDefinitions\en-US.

• Edge
  1. On your domain controller, go to: https://www.microsoft.com/en-us/edge/business/download  
  2. Download the Microsoft Edge policy template file.
  3. Copy msedge.admx from \windows\admx to C:\Windows\PolicyDefinitions.
  4. Copy msedge.adml from \windows\admx\en-US to C:\Windows\PolicyDefinitions\en-US.

Create or configure your browser policy

1. Open Group Policy Manager on your domain controller and go to Group Policy Objects.
   • If you don’t have a Group Policy created for browser policies, right-click Group Policy Objects and create a New Policy.
2. Name your browser policy something relevant (for example, “NordPass for Chrome”) and click OK.
3. Right-click your new policy and select Edit.
4. Go to your desired browser policy. For Chrome: NordPass for Chrome -> Computer Configuration -> Policies -> Administrative Templates -> Google Chrome -> Extensions.
5. Right-click “Configure the list of force-installed apps and extensions” and select Edit.
6. Choose Enabled and select Show….
7. Add the appropriate line, then click OK:
   • Chrome: eiaeiblijfjekdanodkjadfinkhbfgcd;https://clients2.google.com/service/update2/crx
   • Firefox: https://addons.mozilla.org/firefox/downloads/latest/nordpass-password-management/latest.xpi
   • Edge: eiaeiblijfjekdanodkjadfinkhbfgcd;https://clients2.google.com/service/update2/crx
8. Select Apply and then OK.
9. Exit the Group Policy Management Editor, right-click the organizational unit of your choice (containing your Computers or Users), and select “Link an Existing GPO.”
10. Choose your domain and select the policy you created.
11. The NordPass extension will be installed automatically.
    
    Note: You may need to run gpupdate /force in an elevated command prompt to apply the new group policy to PCs.

Additional tips

Turning off Chrome’s built-in password manager

1. Go to Google Chrome -> Password manager and right-click “Enable saving passwords to the password manager,” then choose Edit.
2. Choose Disabled, select Apply, and click OK.
3. To turn off Chrome’s autofill, edit “Enable AutoFill for addresses” and “Enable AutoFill for credit cards,” and set both to Disabled.

Preventing extensions from being disabled or removed in Firefox

1. In Extensions within Firefox, right-click “Prevent extensions from being disabled or removed” and select Edit.
2. Choose Enable, select Show, and add: https://addons.mozilla.org/firefox/downloads/latest/nordpass-password-management/latest.xpi

Turning off Firefox’s built-in password manager

1. In Firefox, within Administrative Templates: Policy definitions, right-click and edit both “Offer to save logins” and “Offer to save logins (default)” and set them to Disabled.
2. When done, select Apply, then OK.