Chrome blanks an off-store ExtensionInstallForcelist entry on an unmanaged machine exactly as Edge does - the qualifying states are AD domain join, Entra join, or Chrome Enterprise Core enrolment, and this box is none of them. The guard now covers every browser and refuses up front, with the three ways forward, instead of skipping Edge alone and letting Chrome fail the same way. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>