Deploy DeepL browser extension with Microsoft Intune for Microsoft Edge

As an IT admin you can deploy the DeepL browser extension for Microsoft Edge using Microsoft Intune. You can add additional policies to control anonymous access to the free version of DeepL and enforce your team members to log in.

Because the installation requires creating policies and deploying a PowerShell script, we recommend that you make the changes in a test environment first.

Create a configuration profile

1. Go to Microsoft Intune
2. Select Devices in the left panel
3. In the Mange devices section, select Configuration
   The Policy tab opens by default
   
4. Click Create
5. In the panel that opens, select the following
   • Platform: Windows 10 and later
   • Profile: Settings catalog
6. In the Basics tab, enter a name and description for the configuration profile
7. Click Next

Configuration settings

1. In the Settings picker search for Edge
2. Select Microsoft Edge\Extensions

3. Select Control which extensions are installed silently

   If you want to deploy the policies on a per-user basis, select Control which extensions are installed silently (User).

   

4. Close the panel
5. Enable Control which extensions are installed silently and enter the following string.

   fancfknaplihpclbhbpclnmmjcjanbaf;https://clients2.google.com/service/update2/crx

   The URL after the extension ID is associated with Google Chrome. This is intentional and should be configured as defined in this documentation to successfully deploy the extension to Microsoft Edge browsers.
6. Click Next

Finish configuration

1. On the Scope tag tab, set the required scope tags and click Next
2. On the Assignment tab, assign the configuration to a target group by clicking Add groups. You can also assign the configuration to all users and groups if necessary.
3. Click Next.
4. On the Review + create tab, review the profile and click Create.

The profile is ready to be distributed and silently install the DeepL browser extension on the computers or users covered by it. You can set additional policies to control the behavior of the extension once it's deployed.

Configure additional policies

The DeepL browsers extension uses the storage.managed API, which can be used to set additional policies to control certain behaviour. You can apply these extension policies in the same Group Policy Object that you are using to deploy the DeepL browser extension. 

Extension policies cannot be configured through configuration profiles in Intune. Therefore, you must create a PowerShell script that runs on each endpoint to apply the configuration. The script will create the necessary registry keys and values containing policy settings for the DeepL browser extension. It's not possible to create these values using administrative templates in Intune. 

Save the script with the file name edge_deepl.ps1. 

For more information about supported policies, see this article. 

Add the PowerShell script to the configuration profile

1. Go to Microsoft Intune
2. Select Devices in the left panel
3. In the Mange devices section, select Scripts and remediations
4. Select the Platform scripts tab
   
5. Click Add and select Windows 10 and laterThe Add Powershell script dialog opens
6. Enter a name and a description and click Next
7. On the Script settings tab, upload the PowerShell script file edge_deepl.ps1 you've created before 
   
8. Select Yes for the option Run script in 64 bit PowerShell Host
9. Click Next.
10. On the Assignments tab, add the groups to which you want to deploy the PowerShell script. You can also assign the script to all users and groups if necessary.
11. Click Next.
12. On the Review + add tab, review the script settings and click Add. 
    

Check policies

To check if policies are applied correctly, use a client computer covered by the configuration policy. 

1. Launch Microsoft Edge and check if the DeepL browser extension is installed
2. Run command | gpupdate 
   

3. Launch Command | Regedit and navigate to the following

   HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge\3rdparty\Extensions\fancfknaplihpclbhbpclnmmjcjanbaf\policy

   The DeepL extension policy and registry items configured before are displayed.