Microsoft Intune Deployment
Deploy PromptFence to Microsoft Edge browsers across your Windows/macOS fleet using Intune configuration profiles.
⏱️ Estimated Time: 20-30 minutes
👤 Required Access: Intune Administrator or Global Administrator
📦 Deployment Method: Configuration Profile (Settings Catalog)
Prerequisites
- Microsoft Intune subscription (included with Microsoft 365 E3/E5)
- Intune Administrator or Global Administrator role
- PromptFence License Key (from your dashboard)
- Extension ID from Edge Add-ons store (provided after publishing)
- Devices enrolled in Intune with Microsoft Edge 90+ installed
Deployment Options
You can deploy PromptFence to Edge using either:
- Settings Catalog (Recommended): Modern UI-based policy configuration
- Administrative Templates (ADMX): Traditional Group Policy-style deployment
This guide covers Settings Catalog which is the recommended approach for modern management.
Step-by-Step Deployment (Settings Catalog)
1Access Microsoft Intune Admin Center
Navigate to intune.microsoft.com and sign in with your administrator account.
2Create Configuration Profile
- In the left sidebar, go to Devices → Configuration profiles
- Click + Create profile
- Select Platform: Windows 10 and later (or macOS)
- Select Profile type: Settings catalog
- Click Create
3Name the Profile
Enter a descriptive name such as:
PromptFence Extension - Force Install
Click Next
4Add Extension Settings
- Click + Add settings
- Search for: Microsoft Edge
- Expand Microsoft Edge → Extensions
- Check the following settings:
- ✅ Control which extensions are installed silently
- ✅ Configure extension management settings
- Click Close
5Configure Force Install
For "Control which extensions are installed silently":
- Click + Add
- Enter the Extension ID from Edge Add-ons store
- Or use Chrome Web Store format: EXTENSION_ID;https://clients2.google.com/service/update2/crx
⚠️ Extension ID: Replace with the actual Extension ID once PromptFence is published to Edge Add-ons or Chrome Web Store. Edge supports both Edge Add-ons IDs and Chrome Web Store IDs.
6Configure Managed Settings (License Key)
For "Configure extension management settings":
- Click + Add to add a JSON configuration
- Paste the following JSON:
{
"EXTENSION_ID_HERE": {
"license_key": "YOUR_LICENSE_KEY_HERE",
"api_url": "https://promptfence-backend-production.up.railway.app",
"managed_mode": true,
"block_mode": false
}
}
Replace:
- EXTENSION_ID_HERE with the actual PromptFence Extension ID
- YOUR_LICENSE_KEY_HERE with your License Key from the dashboard
7Assign to Devices/Users
- Click Next to go to the Assignments page
- Under Included groups, click + Add groups
- Select the Azure AD groups to deploy to (e.g., "All Users" or "IT Department")
- Click Select
💡 Pilot Deployment: Start with a small test group before deploying organization-wide.
8Review and Create
- Click Next through Applicability Rules (leave default)
- Review your configuration
- Click Create
9Wait for Policy Sync
Intune policies sync automatically:
- ⏱️ Initial sync: Within 8 hours for devices
- ⚡ Force sync: Users can manually sync in Company Portal app
- 🔄 Recurring sync: Every 8 hours automatically
Alternative: Deploy via Registry (Advanced)
For advanced scenarios, you can deploy registry keys directly using PowerShell scripts in Intune:
# Force install PromptFence extension
$RegPath = "HKLM:\Software\Policies\Microsoft\Edge\ExtensionInstallForcelist"
New-Item -Path $RegPath -Force | Out-Null
Set-ItemProperty -Path $RegPath -Name "1" -Value "EXTENSION_ID;https://clients2.google.com/service/update2/crx"
# Configure managed settings
$ExtRegPath = "HKLM:\Software\Policies\Microsoft\Edge\3rdparty\extensions\EXTENSION_ID\policy"
New-Item -Path $ExtRegPath -Force | Out-Null
Set-ItemProperty -Path $ExtRegPath -Name "license_key" -Value "YOUR_LICENSE_KEY"
Set-ItemProperty -Path $ExtRegPath -Name "managed_mode" -Value 1
Deploy this via Devices → Scripts → + Add in Intune.
User Experience
What your users will see:
- ✅ PromptFence automatically installs in Microsoft Edge (no action required)
- ✅ Pre-configured with your organization's License Key
- ✅ Cannot be removed (managed by IT)
- ⚠️ Warning banner appears when visiting AI platforms (ChatGPT, Claude, etc.)
- 🛡️ Sensitive data paste attempts are blocked or warned based on your policy
Verification
Confirm successful deployment:
- Check Policy Status:
- Go to Devices → Configuration profiles
- Click on the PromptFence profile
- View Device status to see deployment progress
- Test on a Device:
- Have a user open Edge and go to edge://extensions
- PromptFence should appear with note: "Managed by your organization"
- Check Dashboard:
Troubleshooting
Extension not installing?
- Wait for sync: Intune can take up to 8 hours for initial policy application
- Force sync: Open Company Portal → Settings → Sync
- Check device compliance: Ensure devices are enrolled and compliant in Intune
- Verify Extension ID: Ensure the Extension ID is correct and published
Extension installed but not activated?
- Check License Key: Verify the key in the JSON matches your dashboard
- Check JSON syntax: Ensure valid JSON with no typos
- View in Edge: Go to edge://policy to see applied policies
Policy shows error?
- Check Edge version: Ensure Edge 90+ is installed
- Review error message: In Device status, click on the device to see specific errors
- Verify group membership: Ensure target users/devices are in the assigned group
Need help?
Contact PromptFence support: [email protected]
✅ Deployment Complete!
Your Windows/macOS fleet is now protected by PromptFence. Monitor activity in your
dashboard.
Multi-Browser Support
To deploy to Chrome alongside Edge in your Intune environment:
- Create a separate configuration profile for Chrome
- Use Settings catalog → Google Chrome instead of Microsoft Edge
- Follow the same force-install process with Chrome-specific settings
Or use the Active Directory GPO guide for domain-joined machines.
Next Steps