Skip Edge on unmanaged devices instead of writing a dead policy

Unmanaged Edge installs extensions from the Microsoft Store and nowhere else:
it reads ExtensionInstallForcelist, blanks the value to [BLOCKED]<id>, and
reports an invalid extension id forever after. Writing that key buys nothing
and costs a permanent policy error plus a "Managed by your organization"
badge, so the script now checks dsregcmd and skips Edge with the two ways
round it. -Force writes it anyway.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Brandon Li
2026-08-31 13:25:39 -05:00
co-authored by Claude Opus 5
parent 8f00d8c547
commit e42e729189
3 changed files with 59 additions and 6 deletions
+3 -1
View File
@@ -145,7 +145,9 @@ sudo scripts/install-extension-policy.sh
```
No administrator rights on Windows, where it goes into the user's own policy
hive; root on Linux, where Chrome only reads policy from `/etc`. See
hive; root on Linux, where Chrome only reads policy from `/etc`. **Not Edge** —
an unmanaged Edge refuses to install anything that is not from the Microsoft
Store, so use Chrome or Brave, or run the unpacked copy there. See
[deploy/README.md](deploy/README.md). Either way the extension notices when
the dashboard is running newer code than it is: a policy install asks Chrome to
fetch the new CRX, an unpacked one reloads itself from disk. Clicking the reload