Deploy DeepL browser extension with Active Directory Group Policy for Microsoft Edge

As an IT admin you can deploy the DeepL browser extension for Microsoft Edge using Microsoft Group Policy Objects for Active Directory. You can add additional policies to control anonymous access to DeepL and enforce your team members to log in.

Because the installation requires adding administrative template files to your Microsoft Active Directory and modifying your Group Policy configuration, we recommend that you make the changes in a test environment first.

Install Administrative templates

Each browser requires additional administrative templates to be added to Active Directory to deploy configurations through Group Policy Objects. 

The required files can be downloaded from the following location:
https://www.microsoft.com/en-us/edge/business/download?form=MA13FJ

1. Use the Channel option under Looking for an older version of Edge? and select the required platform
   We used Edge Stable 133 to create this documentation.
2. To download the respective policy file, click Get Policy filesA .CAB file is downloaded. 
3. Find the admx folder in the extracted policy files and copy the file with the edge.admx file extension to the following location in your domain controller:

   %systemroot%\sysvol\domain\policies\PolicyDefinitions

4. Find the language folder in the extracted policy files corresponding to your location and copy the file with the edge.admx file extension to the following location in your domain controller:

   %systemroot%\sysvol\domain\policies\PolicyDefinitions\en-US

   You should see the following folder structure. 

   

5. To verify that the template has been successfully installed, open the Group Policy Management Editor and check the folders in Computer Configuration | Policies | Administrative Templates. 

   If you want to deploy the extension to only a subset of users, configure the policies in User Configuration | Policies | Administrative Templates instead.

   

Deploy the DeepL browser extension

1. Open the Group Policy Management Editor and go to the Administrative Templates folder
2. Open the configuration setting Control which extensions are installed silently under Microsoft Edge | Extensions
   
3. Set the policy to Enabled. 

4. Click Show... and paste the following DeepL browser extension ID value into the Value field

   fancfknaplihpclbhbpclnmmjcjanbaf

   You don't need to enter an update URL.

   

5. Confirm with OK.
   The Control which extensions are installed silently setting is displayed as Enabled. The DeepL browser extension is now distributed and silently installed on the computers or for users covered by the Group Policy with the policy. 

Configure additional policies

The DeepL browsers extension uses the storage.managed API, which can be used to set additional policies that control certain behaviors. These extension policies can be applied in the same Group Policy Object used to deploy the DeepL browser extension. The following section describes how to add policies and apply them to users.

1. Open the Group Policy Management Editor and go to Policies | Preferences | Registry
2. Right click in the window and select New | Registry Item. 
   
3. Configure the registry key with the information provided in this article.
   Extension policies are case-sensitive. Make sure you use the correct capitalization.
4. Save the entry with OK. 

Check policies

To check if the policies are applied correctly, use a client computer covered by the Group Policy Object. 

1. To enforce the previous update, run command | gpupdate 

2. Launch Command | Regedit and navigate to

   Software\Policies\Microsoft\Edge\3rdparty\Extensions\fancfknaplihpclbhbpclnmmjcjanbaf\policy

   The DeepL extension policies stored as registry keys are displayed.