Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=protected-browser-extension-install-microsoft-intune

Bulk install the extension using Microsoft Intune

You can use Microsoft Intune to install the extension on multiple devices.

Requirements

To install Protected Browser using Microsoft Intune, you must have the following accounts:

  • A Microsoft Intune admin account.
  • A Sophos Central admin account.
  • An admin account for all the devices on which you want to install the extension.
  • Google Chrome and Microsoft Edge browsers must have permission to install extensions from external resources.

Download the installer from Sophos Central

To download the installer, do as follows:

  1. In Sophos Central, go to My Environment > Installers.

  2. Under Browser extension, next to Microsoft Intune, click the appropriate installer for your operating system.

    This downloads a .zip file. It includes the installation files. Extract the file to your device.

  3. Copy the extension URL.

Microsoft Intune extension installer.

Configure Microsoft Intune to install the extension

The steps depend on whether you're installing the extension on Windows or Mac devices.

To get step-by-step instructions, click the tab for your device type below.

In the Microsoft Intune Admin Center, do as follows:

  1. Go to Devices > Windows > Configuration profiles > Create > New policy.

  2. Specify the Settings Catalog as follows:

    1. Set Platform to Windows 10 and later.
    2. Set Profile type to Settings catalog.
    3. Click Create and enter a name for the profile.

  3. In Configuration settings, click Add settings.

  4. Add the extension URL for your browser as follows:

    • For Google Chrome, go to Google > Google Chrome > Extensions, turn on Configure the list of force-installed apps and extensions, and enter the extension URL you copied from Sophos Central.
    • For Microsoft Edge, go to Microsoft Edge > Extensions, turn on Configure the list of force-installed apps and extensions, and enter the extension URL you copied from Sophos Central.

  5. Click OK, then click Apply.

  6. Go to Devices > Windows, and click PowerShell scripts.

  7. Upload the PowerShell script you downloaded from Sophos Central for your browser.

    For example, for Google Chrome, upload ChromeExtensions.ps1.

  8. Click Next.

  9. In Assignments, select the devices on which you want to install the extension.
  10. Click Next.
  11. In Review + create, review the details and click Create.

In the Microsoft Intune Admin Center, do as follows:

  1. Go to Devices > macOS > Configuration profiles, and click Create Profile.
  2. Under Profile type, select Templates.
  3. Click Custom, then click Create.
  4. Enter a name for the profile.
  5. Under Deployment channel, select Device channel.

  6. Under Configuration profile file, upload the force installation file for your browser from the ZIP file you downloaded from Sophos Central.

    For example, for Google Chrome, upload the ChromeForceInstallExtension.mobileconfig file.

  7. Click Next.

  8. In Assignments, select the devices on which you want to install the extension.
  9. Click Next.
  10. In Review + create, review the details and click Create.

Repeat this procedure to upload the extension settings file. For example, for Chrome, create another profile and upload the ChromeExtensionSettings.mobileconfig file.

Install the extension utility

To use device posture policy objects in web policies, you must install the extension utility on users' devices. The .zip file you downloaded from Sophos Central includes the ExtensionUtility.exe installer for Windows devices and the ExtensionUtility.pkg installer for Mac devices. Run this installer directly on each device on which you've installed the extension.