How to enable the Google Chrome extension with CultureAI
Our Chrome extension allows you to track and monitor your employees security behaviour while using Chrome.
Our browser extension looks for corporate email login attempts using emails and passwords to understand what software applications your people are using, and can then utilise the security notification tools to course correct any potentially risky behaviours real time via email/slack/teams/meta workplace.
In this guide we'll go over how to install the extension directly from your CultureAI dashboard Intune, or Group Policy
Good to know
- You need to be on a minimum of Chrome Version 98 for the extension to function
- The extension only tracks corporate emails. It would track joebloggs@companyname.com, but, it would not track joebloggs@hotmail.com
- If you are using any methods outside of Managed Chrome Profiles to deploy the extension, you will need to be sure to add registry keys. These will allow the extension to update automatically. Please see the needed keys below;
(A guide for installing the keys is at the end of this page)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionSettings]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg]
"override_update_url"="1" - You may see a "Install update" button in your Chrome integration page, please click this to push an update that registry keys weren't able to push
Permissions & Requirements
To setup the extension you will need the following permissions:
- Platform user or above access (e.g. access to login to https://platform.culture.ai)
- Administrative access or equivalent in your chosen deployment solution (e.g. Google Workplace / Intune / Active Directory) where you are rolling out the extension automatically to end-users.
Deploy via managed Chrome Profiles
- Log in to the CultureAI admin dashboard
- Click on the cog symbol along the top bar of your dashboard
- Scroll through and locate the 'Chrome' integration
- Click on the 'Enable' button
A new window should pop up - This will bring up the setup wizard and guide you though the remaining steps, including the deployment URLs required.
- Follow the steps that appear on the wizard
- Once complete, click the 'Confirm Extension Install' button
- You're done!
Deploying via Intune
Installing Registry Keys
Registry keys allow your extension to update automatically, this is an important step if you're using Intune or Group Policy to install the Chrome extension, rather than installing it directly. Skipping this step may cause your extension to not work correctly.
- Open a text editor such as notepad or VSCode.
- Create a new file and paste the following script:
if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionSettings") -ne $true) { New-Item "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionSettings" -force -ea SilentlyContinue };
if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg") -ne $true) { New-Item "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg' -Name 'override_update_url' -Value '1' -PropertyType String -Force -ea SilentlyContinue;
- Save the file with the extension .ps1 e.g CAIRegKeys.ps1
- Go to intune.microsoft.com
- Go to Devices -> Scripts & Remediations -> Platform Scripts -> Add -> Windows 10 or Later
- Name the object e.g CultureAI Chrome Extension Reg Keys, click Next
- Upload the script created earlier, all 3 switches should be set to 'No' and then click Next
- Assign to desired device or user groups, click Next, then Add to Finish
Enabling the extension
- Log in to the CultureAI admin dashboard
- Click on the cog symbol along the top bar of your dashboard
- Scroll through and locate the 'Chrome' integration
- Click on the 'Enable' button
A new window should pop up - Copy the Extension ID & the URL, save this somewhere as you will need it later
- Click 'Confirm Extension install'
- Browse to Microsoft Endpoint Manager, devices, and configuration profiles: https://endpoint.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/configurationProfiles
- Click create profile:
- Select target platform, typically "Windows 10 and later" and a profile type of "Settings catalog" and click create.
- Provide a profile name, for example "CultureAI Browser Security Extension" and click next.
- Click "Add settings"
- Select the policy for the browser(s) you want to deploy to:
- Browse to Computer Configuration > Policies > Administrative Templates > Google Chrome > Extensions and select "Configure the list of force-installed apps and extensions"
- Enter the Extension ID followed by a semi-colon ; and then the URL taken from the wizard in step 5 for each extension policy enabled and click next.
e.g. abcdefghijk;https://example.com/chrome.xml
- Select scopes where you have these configured and click next:
- Assign it to the users/groups in scope and click next:
- Review settings and click "Create":
- Once this has been applied, the extension will be rolled out and appear in Chrome under extensions:
Deploying via Group Policy
- Open Group Policy Management Console (Start -> Run -> spmc.msc)
- Either edit an existing policy or create a new one, against the OU where the computer or users being targeted are located.
- Edit the Policy and go to. Computer or User Configuration -> Preferences -> Windows Settings -> Registry.
- Right Click Registry and click New -> Registry Item
- Set Action to: Create
- In Path type: SOFTWARE\Policies\Google\Chrome\ExtensionSettings
- Click Default, then OK to add the key
- Right Click Registry and click New -> Registry Item
- Set Action to: Create
- In Path type: SOFTWARE\Policies\Google\Chrome\ExtensionSettings\ogkdhibldgmpgajkhddgpbophcjilljg
- Set the value name to: override_update_url
- Set the value type to : REG_SZ
- Set the value data to: 1
Deploying the Extension
- Log in to the CultureAI admin dashboard
- Click on the cog symbol along the top bar of your dashboard
- Scroll through and locate the 'Chrome' integration
- Click on the 'Enable' button
A new window should pop up - Copy the extension ID and URL from the Chrome setup wizard and click "Confirm Extension Install"
- To deploy the extension to Chrome, download the administrative policies from the following URL, extracting the chrome.admx and chrome.adml into your policies folder:
https://support.google.com/chrome/a/answer/12578231?hl=en - Open Group Policy Management and either create a new policy or update an existing policy which covers the hosts you wish to deploy to.
- Select the following policies:
- Chrome, browse to Computer Configuration > Policies > Administrative Templates > Google Chrome > Extensions and select "Configure the list of force-installed apps and extensions"
- Click "Enabled" and "Show" and enter the application id followed by a semi-colon ; and the URL taken from the wizard.
- Click "OK".
- Once this has been applied, the extension will be rolled out and appear in Chrome under extensions: