Skip to content
AImori

Deployment via Intune

Two ways – both set the same registry values as the ADMX template. ADMX templates and scripts are not part of the extension package; they are in the source code on GitHub in the enterprise/ folder (GitHub); the templates carry the store ID lefajbhockjgdhaohnacgaggfepianjh.

On this page
  1. Intune admin center → Devices → Configuration → "Import ADMX": upload dlx-edge.admx (or dlx-chrome.admx) with the matching en-US ADML.
  2. New profile → Windows 10 and later → Templates → Imported Administrative templates → configure settings under "AImori (Microsoft Edge)".
  3. Assign a device group. Check on the device: edge://policy.

B) Platform script or Win32 app with registry script

  • Package: Deploy-Policy.ps1 from enterprise/, managed_schema.json from extension/ (path via -SchemaPath; without it the script looks for ..\extension\managed_schema.json) and your own policy.json.

Install command (as System):

powershell.exe -NoProfile -File Deploy-Policy.ps1 -ExtensionId lefajbhockjgdhaohnacgaggfepianjh -PolicyJson policy.json -SchemaPath managed_schema.json
  • Detection: Detect-Policy.ps1 -ExtensionId lefajbhockjgdhaohnacgaggfepianjh (exit 0 = present).
  • Uninstall: Remove-Policy.ps1 -ExtensionId lefajbhockjgdhaohnacgaggfepianjh.

The script validates the JSON file against the schema and aborts on errors, backs up previous values (folder readable only by administrators and SYSTEM) and only changes its own key. Review scripts before use and test with a dry run first (Registry scripts).

Install the extension

In the settings catalog (Microsoft Edge or Google Chrome), "Control which extensions are installed silently" (ExtensionInstallForcelist) with lefajbhockjgdhaohnacgaggfepianjh;https://clients2.google.com/service/update2/crx – the extension from the Chrome Web Store, the same in Edge and Chrome.

Several customers (MSP)

scripts/mandanten.mjs creates, from one base policy, the Intune files per customer (value for ExtensionSettings, rows for a custom OMA-URI profile, rollout script for a platform script) and the GPO files, with their own logo. The tool runs locally and uploads nothing. Instructions in the source code (German).

Transparency towards employees

The extension shows "Managed by <company>. No input is stored or reported; this extension has no network access." Inform employees before the rollout (in Switzerland, duty to inform under Art. 19 FADP; for behavioural monitoring, observe Art. 26 ArGV 3 – this extension reports nothing).

Free for Chrome