Installing the Edge Extension

How to install the Edge extension with CultureAI

Our Edge extension allows you to track and monitor your employees' security behaviour throughout their working day.

The extension can be rolled out in the later versions of the Microsoft Edge browser which utilizes the Chromium engine. This can be via the following deployment paths;

• Intune
• Group Policy

Good to know

1. The extension only tracks corporate emails. It would track joebloggs@companyname.com, but, it would not track joebloggs@hotmail.com
2. If you're not using Edge Profiles, you will need to enable Smart Assumptions (click here to navigate to this setting) This will allow CultureAI to track logins even if you're not logged into browser profiles
3. To install the Edge extension, you will first need to Copy the extension ID and URL from the Chrome setup wizard.  Click on the 'Enable' button in the Chrome page, and this will bring up the ID's you need. You can exit out of the wizard once you've got the ID's. Copy and paste these in a notes page, as you will need them later on.
4. You will need to be sure to add registry keys. These will allow the extension to update automatically. Please see the needed keys below;
   

   [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings]
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg]
   
   "override_update_url"="1"

    

Intune Deployment

Adding Registry keys

Registry keys allow your extension to update automatically, this is an important step if you're using Intune or Group Policy. Skipping this step may cause your extension to not work correctly.

1. Open notepad, VSCode or Powershell ISE
2. Create a new file with the extension .ps1 and paste the following script:

3. if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings") -ne $true) { New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings" -force -ea SilentlyContinue };
   
   if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg") -ne $true) { New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg" -force -ea SilentlyContinue };
   
   New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg' -Name 'override_update_url' -Value '1' -PropertyType String -Force -ea SilentlyContinue;

4. Save the file
5. Go to intune.microsoft.com
6. Go to Devices -> Scripts -> Add -> Windows 10 or Later
7. Name the object e.g CultureAI Edge Extension Reg Keys, click Next
8. Upload the script created earlier, click Next
9. Assign to desired device or user groups, click Next, then Add to Finish

Enabling the extension 

To install the Edge extension via Intune, you will first need to Copy the extension ID and URL from the Chrome setup wizard.  Click on the 'Enable' button in the Chrome page, and this will bring up the ID's you need. You can exit out of the wizard once you've got the ID's. Copy and paste these in a notes page, as you will need them later on.

• Log in to the CultureAI admin dashboard
• Click on the cog symbol along the top bar of your dashboard
  
• Scroll through and locate the 'Edge' integration 
• Click on the 'Enable' button
  A new window should pop up 
• Select 'Intune' and click 'Start' (If you previously had Edge enabled, click 'Skip and enable')
• Browse to Microsoft Endpoint Manager, devices, and configuration profiles: https://endpoint.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/configurationProfiles
• Click create profile:
  
• Select target platform, typically "Windows 10 and later" and a profile type of "Settings catalog" and click create.
  
• Provide a profile name, for example "CultureAI Browser Security Extension" and click next.
  
• Click "Add settings"
  
• Select "Edge\Extension" from the settings panel
  1. Tick both the "Control which extensions are installed silently" settings
  2. Exit out of the settings panel
  3. Toggle both settings to be "Enabled"
  4.  In both settings enter the application id you saved earlier followed by a semi-colon ; and the URL you saved earlier for each extension policy
     It should look something like this;

     abcdefghijk;https://example.com/chrome.xml

• Select any scope tags that you may have configured, if you have none, you can leave this as default and click "Next"

• Assign it to the users/groups in scope and click next:
  
• Review settings and click "Create":

Once this has been applied, the extension will be rolled out and appear in Edge under extensions:

 

Group Policy

Registry keys allow your extension to update automatically, this is an important step if you're using Intune or Group Policy. Skipping this step may cause your extension to not work correctly.

Adding registry keys

1. Open Group Policy Management Console (Start -> Run -> spmc.msc)
2. Either edit an existing policy or create a new one, against the OU where the computer or users being targeted are located.
3. Edit the Policy and go to. Computer or User Configuration -> Preferences -> Windows Settings -> Registry.
4. Right Click Registry and click New -> Registry Item

• Set Action to: Create
• In Path type: SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings
• Click Default, then OK to add the key

1. Right Click Registry and click New -> Registry Item

• Set Action to: Create
• In Path type: SOFTWARE\Policies\Microsoft\Edge\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg
• Set the value name to: override_update_url
• Set the value type to : REG_SZ
• Set the value data to: 1

Enabling the extension 

To install the Edge extension via Intune, you will first need to Copy the extension ID and URL from the Chrome setup wizard.  Click on the 'Enable' button in the Chrome page, and this will bring up the ID's you need. You can exit out of the wizard once you've got the ID's. Copy and paste these in a notes page, as you will need them later on.

1. Log in to the CultureAI admin dashboard
2. Click on the cog symbol along the top bar of your dashboard
   
3. Scroll through and locate the 'Edge' integration 
4. Click on the 'Enable' button
   A new window should pop up 
5. Select 'Group Policy' and click 'Start' 
6. To deploy the extension to Edge, download the administrative policies from the following URL, extracting the msedge.admx and associated adml into your policies folder, select the relevant location file: https://www.microsoft.com/en-us/edge/business/download?form=MA13FJ
7. Open Group Policy Management and either create a new policy or update an existing policy which covers the hosts you wish to deploy to.
8. Select the following policies:
   Edge, browse to Computer Configuration > Policies > Administrative Templates > Microsoft Edge > Extensions and select "Control which extensions are installed silently"
   
9. Click "Enabled" and "Show" and enter the application id followed by followed by a semi-colon ; and the URL taken from the wizard.
   
10. Click "OK".
11. Once this has been applied, the extension will be rolled out and appear in Edge under extensions: