Detections
Analytics

2.4.1 (L1) Ensure 'Blocks external extensions from being installed' is set to 'Enabled'

Information

Enabling this setting blocks external extensions (an extension that is not installed from the Chrome Web Store) from being installed.

The recommended state for this setting is: Enabled (1)

Allowing users to install extensions from other locations (not the Chrome Web Store) can lead to malicious extensions being installed.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Extensions\Blocks external extensions from being installed

Impact:

User will only be allowed to install extension for the Chrome web store.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-10, 800-53|CM-11, 800-53|SC-18, CSCv7|7.2

Plugin: Windows

Control ID: 7bf797c44a321e6384aaf7bba38c04f0b7ea57c8936937f7db2b37b864355dee