← Back to Deployment

Active Directory GPO Deployment

Deploy PromptFence to all domain-joined Windows machines using Group Policy Objects.

⏱️ Estimated Time: 30-45 minutes
👤 Required Access: Domain Administrator
📦 Deployment Method: Group Policy (GPO)
🖥️ Supported Browsers: Chrome, Edge, Brave (Chromium-based)

Prerequisites

Overview

This guide covers deploying PromptFence to:

Users will not be able to uninstall or disable the extension.

Part 1: Install Administrative Templates

1Download Chrome ADMX Templates

  1. Download from: chromeenterprise.google/browser/download
  2. Click "Download policy bundle"
  3. Extract the ZIP file

2Install ADMX Files to Central Store

On your Domain Controller:

  1. Navigate to: \\DOMAIN\SYSVOL\DOMAIN\Policies\PolicyDefinitions
  2. Copy chrome.admx and edge.admx to this folder
  3. Copy language files (e.g., chrome.adml, edge.adml) to the en-US subfolder
💡 No Central Store? If your domain doesn't have a Central Store, copy ADMX files to:
C:\Windows\PolicyDefinitions on the machine where you run GPMC.

Part 2: Create Group Policy Object

3Open Group Policy Management

  1. Press Win + R, type gpmc.msc, press Enter
  2. Expand your domain in the left pane

4Create New GPO

  1. Right-click Group Policy Objects
  2. Select New
  3. Name it: PromptFence Extension Deployment
  4. Click OK

5Edit the GPO

  1. Right-click the new GPO
  2. Select Edit

Part 3: Configure Chrome Extension Policy

6Navigate to Chrome Policies

In the Group Policy Editor:

Computer Configuration → Policies → Administrative Templates → Google → Google Chrome → Extensions

7Configure Force-Install List

  1. Double-click "Configure the list of force-installed extensions"
  2. Select Enabled
  3. Click Show... next to the extension list
  4. Add a new entry with the following format:
EXTENSION_ID;https://clients2.google.com/service/update2/crx

Replace EXTENSION_ID with the actual PromptFence Extension ID from Chrome Web Store.

⚠️ Extension ID: This will be provided after PromptFence is published to the Chrome Web Store. Contact [email protected] if you need early access.
  • Click OK, then Apply

    • 8Configure Managed Settings (License Key)

    1. In the same Extensions folder, find: "Configure extension management settings"
    2. Double-click and select Enabled
    3. Click Show...
    4. Add the following JSON configuration:
    { "EXTENSION_ID": { "license_key": "YOUR_LICENSE_KEY_HERE", "api_url": "https://promptfence-backend-production.up.railway.app", "managed_mode": true, "block_mode": false } }

    Replace:

    📋 Find Your License Key:
    Log in to app.promptfence.io → Settings → License
  • Click OK, then Apply

    • Part 4: Configure Microsoft Edge (Optional)

    9Configure Edge Extension Policy

    To also deploy to Microsoft Edge, repeat steps 6-8 but navigate to:

    Computer Configuration → Policies → Administrative Templates → Microsoft Edge → Extensions

    Use the same Extension ID and configuration JSON.

    Part 5: Link GPO to Organizational Units

    10Link to Target OUs

    1. In Group Policy Management Console, find your GPO
    2. Right-click the Organizational Unit (OU) containing your computers
    3. Select Link an Existing GPO...
    4. Choose PromptFence Extension Deployment
    5. Click OK
    💡 Pilot Deployment: Start by linking to a test OU with a few machines, then expand to the entire domain.

    11Force Policy Update (Optional)

    To apply the policy immediately instead of waiting for the next refresh cycle:

    gpupdate /force

    Run this on client machines or wait for automatic Group Policy refresh (90-120 minutes).

    User Experience

    What your users will see:

    Verification

    Confirm deployment success:

    1. Check GPO Application:
      gpresult /h gpreport.html
      Open the HTML file and verify PromptFence GPO is listed under Applied GPOs.
    2. Check Extension:
      • Open Chrome/Edge on a domain machine
      • Navigate to chrome://extensions or edge://extensions
      • PromptFence should appear with: "Installed by your organization"
    3. Test Functionality:
      • Visit chatgpt.com
      • You should see the PromptFence warning banner
    4. Check Dashboard:

    Troubleshooting

    Extension not installing?

    Extension installed but not activated?

    GPO not applying?

    Need help?

    Contact PromptFence support: [email protected]

    ✅ Deployment Complete!
    All domain-joined machines now have PromptFence protecting AI interactions. Monitor activity in your dashboard.

    Advanced Configuration

    Registry-Based Deployment (Alternative)

    For environments where ADMX templates aren't available, you can deploy via registry using a logon script:

    @echo off REM Force install PromptFence reg add "HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist" /v 1 /t REG_SZ /d "EXTENSION_ID;https://clients2.google.com/service/update2/crx" /f REM Configure managed settings reg add "HKLM\Software\Policies\Google\Chrome\3rdparty\extensions\EXTENSION_ID\policy" /v license_key /t REG_SZ /d "YOUR_LICENSE_KEY" /f reg add "HKLM\Software\Policies\Google\Chrome\3rdparty\extensions\EXTENSION_ID\policy" /v managed_mode /t REG_DWORD /d 1 /f

    Disable Extension for Specific OUs

    To exclude certain users/computers, create a separate GPO with:

    Extensions → "Configure extension installation blocklist"

    Add the PromptFence Extension ID to block it for that OU.

    Next Steps

    Back to Deployment Overview