title: How to auto-install Chrome Extensions via GPO in Chrome 33+ (Chrome bug or undocumented change for GPO-installed extensions?)
body: <p>We have a Google Chrome extension built for internal corporate use. Up till now it's been deployed using GPO and that worked fine until Chrome 33 came along. Now the extension doesn't appear in the Extensions list and is not active :'(. Has the deploy/install process changed with Chrome 33 for GPO? Do we need to do anything different now, or how does one deploy an extension via GPO in a post-Chrome 33 world?</p>
  
  <p>We install using GPO as advised <a href="https://support.google.com/chrome/a/answer/188453" rel="nofollow">here</a> ('Pre-installing via group policy' section) and detailed <a href="http://dev.chromium.org/administrators/policy-list-3#ExtensionInstallForcelist" rel="nofollow">here</a>. We set GPOs <code>ExtensionInstallForcelist</code>, <code>ExtensionInstallWhitelist</code>, and <code>ExtensionInstallSources</code>. </p>
  
  <p>Our extension and our update xml file is not hosted on the Chrome Web Store. There were planned changes in Chrome 33 (to protect users from malicious extensions) which force extensions to be on the Chrome Web Store, <del>but from all the documentation we can find this shouldn't apply to GPO-installed extensions</del>, as described <a href="http://www.chromium.org/developers/extensions-deployment-faq" rel="nofollow">http://www.chromium.org/developers/extensions-deployment-faq</a>: </p>
  
  <blockquote>
    <p>Users can only install extensions hosted in the Chrome Web store,
    except for installs via <a href="https://support.google.com/chrome/a/answer/188453" rel="nofollow">enterprise policy</a> or developer mode.</p>
    
    <p>...</p>
    
    <p>What are the supported deployment options for extensions after this
    change? ... For Enterprises, we’ll continue to support group policy to
    install extensions, irrespective of where the extensions are hosted.
    <strong>Note that the user's machine has to join a domain for GPO policy
    pushes to be effective</strong>.</p>
    
    <p>...</p>
    
    <p>Extensions that were previously installed, but not hosted on the
    Chrome Web Store will be hard-disabled (i.e the user cannot enable
    these extensions again), except for installs via enterprise policy or
    developer mode.</p>
  </blockquote>
  
  <p>and <a href="http://blog.chromium.org/2013/11/protecting-windows-users-from-malicious.html" rel="nofollow">http://blog.chromium.org/2013/11/protecting-windows-users-from-malicious.html</a>: </p>
  
  <blockquote>
    <p>We’ll continue to support local extension installs during development
    as well as installs via Enterprise policy, and Chrome Apps will also
    continue to be supported normally.</p>
  </blockquote>
  
  <p>Once users upgraded to Chrome 33 the extension disappeared, so it appears that something has changed regarding GPO deployment, but I don't see anything documented about the change (or obviously how to fix my deployment).</p>
  
  <p>We can't host on the Chrome Web Store because our extension uses an NPAPI component, which is no longer allowed for new Chrome Web Store extensions. There's significant effort involved in migrating to a different architecture that doesn't use NPAPI so that's not a short term resolution (although it is planned for the medium term). However, we've tried removing the NPAPI component to check if that's what Chrome 33 doesn't like, and it doesn't seem to be related to that. We've tried only using https in the urls, also doesn't work. </p>
  
  <p>Could be related to <a href="https://code.google.com/p/chromium/issues/detail?can=2&amp;start=0&amp;num=100&amp;q=&amp;colspec=ID%20Pri%20M%20Iteration%20ReleaseBlock%20Cr%20Status%20Owner%20Summary%20OS%20Modified&amp;groupby=&amp;sort=&amp;id=346386" rel="nofollow">Issue 346386</a></p>
  
  <p>Thanks for any suggestions!</p>