# Group Policies > Group Policy configuration for the UiPath Extension for Chrome, covering ExtensionInstallForcelist and other policies that affect extension behavior. If your organization uses Group Policies for browser extension management then follow the instructions from this page to ensure that the Extension for Chrome is installed correctly. The list of active policies on your machine can be viewed in Chrome by navigating to `chrome://policy`. ![Studio interface](https://dev-assets.cms.uipath.com/assets/images/studio/studio-docs-image-362349-c7754c50.webp) You can find out more information about Chrome policy management [on this page](https://cloud.google.com/docs/chrome-enterprise/policies/). ## Group Policies that affect the UiPath Extension for Chrome ### ExtensionInstallForcelist The [ExtensionInstallForcelist](https://chromeenterprise.google/policies/#ExtensionInstallForcelist) policy controls which extensions are force-installed in the browser. This policy must contain the ID of the extension for Chrome. * For machines that are joined to a Windows Active Directory, follow the installation steps for the Group Policy [Offline](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome) installation method. For the offline installation method, the [ExtensionInstallForcelist](https://chromeenterprise.google/policies/#ExtensionInstallForcelist) policy must contain the value: `ndmegdjihnhfmljjoaiimbipfhodnbgf;file:///C:/ProgramData/UiPath/UiPath.Common/ChromeExtension_SelfHosted/extension_manifest_chrome.xml` * For machines that are not joined to a Windows Active Directory follow the installation steps for the Group Policy [Online](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome) installation method. For the online installation method, the [ExtensionInstallForcelist](https://chromeenterprise.google/policies/#ExtensionInstallForcelist) policy must contain the value: `pgbnimfaaifjpebleldfhgcjdnaeafdi;https://clients2.google.com/service/update2/crx` ### NativeMessagingBlocklist The [NativeMessagingBlocklist](https://chromeenterprise.google/policies/?policy=NativeMessagingBlocklist) policy prevents the UiPath NativeHost (`ChromeNativeMessaging.exe`) from working. If the `NativeMessagingBlockList` policy is defined with the value of `*`, it means all native messaging hosts are denied, unless they are explicitly allowed through the `NativeMessagingAllowList` policy. ### NativeMessagingAllowlist The [NativeMessagingAllowlist](https://chromeenterprise.google/policies/?policy=NativeMessagingAllowlist) policy specifies which native messaging hosts are not subject to the deny list. A deny list with the value of `*` means all native messaging hosts are denied. You can allow the UiPath NativeHost by adding the value `com.uipath.chromenativemsg_v2` to the `NativeMessagingAllowlist` policy. ### ExtensionInstallBlocklist The [ExtensionInstallBlocklist](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionInstallBlocklist) policy prevents extensions from being installed on the machine. To fix this, you can either: * Install the UiPath Extension using [Group Policy](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome#install-from-group-policy). * Or allow the UiPath Extension to be installed from the Chrome Web Store by adding the value `pgbnimfaaifjpebleldfhgcjdnaeafdi` to the [ExtensionInstallAllowlist](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionInstallAllowlist) policy. ### NativeMessagingUserLevelHosts If the [NativeMessagingUserLevelHosts](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=NativeMessagingUserLevelHosts) policy is set to `false`, it prevents the UiPath Extension from working correctly in the case it was installed without administrator privileges. To fix this, you can either: * Install the UiPath Extension using [Group Policy](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome#install-from-group-policy). * Or set the **NativeMessagingUserLevelHosts** policy to `true`. ### BlockExternalExtensions If the [BlockExternalExtensions](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BlockExternalExtensions) policy is set to `true`, the UiPath Extension can only be installed from Group Policy. To fix this you can either: * Install the UiPath Extension using [Group Policy](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome#install-from-group-policy). * Or set the **BlockExternalExtensions** policy to `false`. ### ExtensionAllowedTypes If the [ExtensionAllowedTypes](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionAllowedTypes) policy is set, it prevents the UiPath Extension from being installed. To fix this, you must add the value `extension` to the **ExtensionAllowedTypes** policy. ### ExtensionSettings If the [ExtensionSettings](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings) policy is set to block all extensions it will prevent the UiPath Extension from being installed. To fix this, you can either: * Install the UiPath Extension using [Group Policy](https://docs.uipath.com/studio/standalone/latest/user-guide/extension-for-chrome#install-from-group-policy). * Or allow the UiPath Extension to be installed from the Chrome Web Store by adding the value `pgbnimfaaifjpebleldfhgcjdnaeafdi` to the [ExtensionInstallAllowlist](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionInstallAllowlist) policy. ### DeveloperToolsAvailabilityAllowlist and DeveloperToolsAvailabilityBlocklist The [DeveloperToolsAvailabilityAllowlist](https://chromeenterprise.google/policies/developer-tools-availability-allowlist/) and [DeveloperToolsAvailabilityBlocklist](https://chromeenterprise.google/policies/developer-tools-availability-blocklist/) policies let you enable Developer Tools only for the UiPath extension ID, while keeping them disabled for all other extensions. This approach preserves your browser hardening posture and is the recommended option for managed or secured environments. Both policies must be set for the change to take effect. If the `DeveloperToolsAvailabilityBlocklist` policy remains unset, the `DeveloperToolsAvailabilityAllowlist` policy value is not considered. When both policies are correctly configured, full UiPath extension functionality is restored even if `DeveloperToolsAvailability=2` (Disallow usage of the Developer Tools). :::important If `DeveloperToolsAvailability` is set to `2`, the `Chromium API` input method does not work. To work around this limitation, use the `Hardware Events` input method. ::: Instead of configuring [DeveloperToolsAvailabilityAllowlist](https://chromeenterprise.google/policies/developer-tools-availability-allowlist/) and [DeveloperToolsAvailabilityBlocklist](https://chromeenterprise.google/policies/developer-tools-availability-blocklist/), you also have the option to set [DeveloperToolsAvailability](https://chromeenterprise.google/policies/developer-tools-availability/) Group Policy to the value `1` (Allow usage of the Developer Tools) to enable the full extension functionality. However, we recommend the allowlist/blocklist policies option, as it enables you to specify only the UiPath extension ID, limiting the scope of the change to the required extension. :::important If neither `DeveloperToolsAvailabilityAllowlist`/`DeveloperToolsAvailabilityBlocklist` nor `DeveloperToolsAvailability` are configured, the [Inject Js Script](https://docs.uipath.com/activities/other/latest/ui-automation/n-inject-js-script) activity will not work. :::