Skip to main content
Push the Inviolet extension via the Intune Settings catalog. Two settings, one Configuration Profile. Covers Edge and Chrome on Windows and macOS.
Generate your profile first: App → Settings → MDM → Microsoft Intune downloads inviolet-extension.intune.xml with your org_id, enrollment_token, and config_signature already substituted. See the MDM overview for what the payload contains.

​
Prerequisites

  • Intune administrator access
  • The generated inviolet-extension.intune.xml from Settings → MDM
  • A pilot device group to validate against

​
1. Create the Configuration Profile

In Intune → Devices → Configuration profiles → Create profile:
  • Platform: Windows 10 and later (repeat for macOS if needed)
  • Profile type: Settings catalog
  • Target the browser you deploy — Microsoft Edge or Google Chrome.

​
2. Add the two settings

From the generated payload, add:
  • ExtensionInstallForcelist — the Inviolet extension ID + update URL. This force-installs the extension so users can’t remove it.
  • ExtensionSettings — the JSON block that carries chrome.storage.managed (the signed org.inviolet.extension config). Paste it exactly as shown in the generated file.

​
3. Assign

Assign the profile to a pilot device group first. Expand to the full fleet once verified.

​
4. Verify

On a target device, open chrome://policy/ (or edge://policy/) and confirm ExtensionInstallForcelist and ExtensionSettings are applied. The extension then enrolls into your tenant and begins reporting.