Deploy Devolutions Web Login in Chrome using GPO

IMPORTANT NOTE (for Devolutions Web Login versions prior to 2021.2.3.0) The settings deployed with the group policy object (GPO) are only enforced when the extension is used for the first time. This means that the settings will not be enforced and changed if you change the settings in the GPO and the extension has already been used by a user at least once.

Configuring extensions by policy on Windows 10 for Chrome

Open Group Policy Management ( Start - Run - GPMC.msc ).
Right-click on the GPO list and select New
In the New GPO window, create your new object then click on OK
Right-click on your new GPO and select Edit
Select Registry located in Computer Configuration – Preferences – Windows Settings – Registry or User Configuration – Preferences – Windows Settings – Registry according to your needs.
Right-click in the Registry items list and select New – Registry Item
Set the Action parameter to Replace to modify the existing rule or to create it if it does not exist.
Set the Hive parameter to HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER according to your needs.
Enter SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\neimonjjffhehnojilepgfejkneaidmo\policy in the Key Path text field.
Enter Settings in the Value name text field.
Select REG_SZ in the Value type drop-down list.
Write the JSON settings string in the Value data text field. See the Values section below for an example.
Click on OK
In Group Policy Management , configure the GPO Links and Security Filtering according to your needs.

Default settings

All attributes can have their value changed or their key removed.

{
  "activateBeta": false,
  "autoFillEntryOnLoad": false,
  "autoRetrieveCredentials": true,
  "autoSubmitFormOnFill": false,
  "autofillBasicAuthentication": false,
  "destinationGroup": "Devolutions Web Login",
  "disableAnalytics": false,
  "dvlsActivated": false,
  "dvlsAutoFillEntryOnLoad": false,
  "dvlsAutoRetrieveCredentials": true,
  "dvlsAutoSubmitFormOnFill": false,
  "dvlsAutofillBasicAuthentication": false,
  "dvlsDestinationFolder": "Devolutions Web Login",
  "dvlsMatchDetectionType": 2,
  "dvlsShouldIncludePrivate": true,
  "dvlsShowFavicon": false,
  "dvlsSyncAllAvailableVaults": false,
  "dvlsUrl": "",
  "enableContextMenu": true,
  "enableNativeMessaging": false,
  "filledFieldsColor": "#b3d9ff",
  "hubActivated": false,
  "hubAutoFillEntryOnLoad": false,
  "hubAutoSubmitFormOnFill": false,
  "hubAutofillBasicAuthentication": false,
  "hubDefaultLoginUsername": "",
  "hubMatchDetectionType": 2,
  "hubPersonalActivated": false,
  "hubPersonalAutoFillEntryOnLoad": false,
  "hubPersonalAutoSubmitFormOnFill": false,
  "hubPersonalDefaultLoginUsername": "",
  "hubPersonalLucidUrl": "https://login.devolutions.com",
  "hubPersonalMatchDetectionType": 2,
  "hubPersonalServerUrl": "https://hub-server.devolutions.com",
  "hubPersonalShowFavicon": true,
  "hubShouldIncludePrivate": true,
  "hubShowFavicon": true,
  "hubSyncAllAvailableVaults": false,
  "hubUrl": "",
  "lucidUrl": "https://login.devolutions.com",
  "rdmActivated": false,
  "rdmApplicationCode": "",
  "rdmAutoFillEntryOnLoad": false,
  "rdmAutoRetrieveCredentials": true,
  "rdmAutoSubmitFormOnFill": false,
  "rdmAutofillBasicAuthentication": false,
  "rdmDefaultDestinationVaultIsPrivate": true,
  "rdmDefaultPortUsage": true,
  "rdmDestinationFolder": "Devolutions Web Login",
  "rdmEnableNativeMessaging": false,
  "rdmPort": 19443,
  "rdmShowFavicon": false,
  "rdmUseLegacyApi": false,
  "shouldColorFilledFields": false,
  "showIconInFields": true,
  "showSaveSiteDialog": true,
  "theme": 0,
  "useLegacyApi": false
}

Default admin Settings

{
  "adminSettings": {
    "disableSettingsPage": false,
    "setGPOSettings": "OnInstall"
  }
}

Values

disableSettingsPage

Hide the settings button and disable the settings page in Devolutions Web Login for the end-user.
Possible values:

True
False (Default)

setGPOSettings

Set when the GPO settings are used.
Possible values:

OnInstall (default): Set the value the GPO settings when the extension is installed.
AlwaysOverride : Always override the value from the GPO settings when the extension is started.
AlwaysUseDefaultAndOverride : Use the default settings for all settings not in the GPO and override the values from the GPO when the extension is started.

Example

Activate Devolutions Server
Set https://localhost/mydpsurl as Devolutions Server URL.
Disable the settings page.
Always override the settings in the settings section when the extension starts.

{
  "settings": {
    "dvlsActivated": true,
    "dvlsUrl": "https://localhost/mydpsurl"
  },
  "adminSettings": {
    "disableSettingsPage": true,
    "setGPOSettings": "AlwaysOverride"
  }
}

Create a new GPO rule to have the Devolutions Web Login extension automatically pinned on the Chrome toolbar.
Select Registry located in Computer Configuration – Preferences – Windows Settings – Registry or User Configuration – Preferences – Windows Settings – Registry according to your needs.
In the registry properties, set the Action parameter to Replace to change the existing rule or to create it if it does not exist.
Set the Hive parameter to HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER according to your needs.
Enter ExtensionSettings in the Value name text field.
Select REG_SZ in the Value type drop-down list.

Enter the following JSON settings string in the Value data text field:

{
  "neimonjjffhehnojilepgfejkneaidmo": {
    "installation_mode": "force_installed",
    "update_url": "https<area>://clients2.google.com/service/update2/crx",
    "toolbar_pin": "force_pinned"
  }
}

Click on OK and update the GPO rules on your local machine.

References

https://www.chromium.org/administrators
https://www.chromium.org/administrators/complex-policies-on-windows