> ## Documentation Index
> Fetch the complete documentation index at: https://support.i.moneyforward.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Browser extension deployment on Windows

> What to configure when you distribute Admina Extension on Windows devices, and how to choose manual, GPO, or Intune installation.

This page explains how to distribute Admina Extension to Google Chrome or Microsoft Edge on Windows devices.
It also covers linking the extension to your Admina organization.

You can choose from three installation methods depending on your environment: manual, GPO, or Microsoft Intune.

> [!WARNING]
>
> Adjust each installation method to fit your environment.

## Prerequisites

* Devices run Windows 10 or later
* Google Chrome or Microsoft Edge is installed

If you restrict outbound destinations, review the network requirements in [About Admina Extension](https://support.i.moneyforward.com/en/it-management/admina-extension/what-is-admina-extension.md#network-requirements).

Prerequisites for each distribution method (permissions and management tools) are listed on each method's page.

## Configuration goals

When you deploy to Windows devices, configure the following three items.

1. Write install directives to HKLM → the extension installs automatically
2. Write organization and user parameters to HKCU → the extension runs linked to your organization
3. Use a logon script to set `USEREMAIL` at sign-in → step 2's `UserEmail` is filled automatically

How you write these values depends on the distribution method. Each method's page walks through the steps for that method.

When all three are in place, the extension becomes active without action from the user. The delivery channel (GPO, Intune, scripts, and so on) does not matter.

After configuration, you should see the following.

* When the user starts the browser, the extension installs automatically and the user cannot disable or remove it
* The extension reads HKCU parameters and runs linked to the organization, user, and device

## Configuration items

This section summarizes the registry values and environment variables you ultimately set on client devices.
It applies regardless of distribution method (manual, GPO, Intune, and so on). For delivery steps, see each method's page.

The values here follow common behavior on Windows, Google Chrome, and Microsoft Edge. You can set the same values with your own scripts or asset management tools, not only the methods on each method's page.

### Install directive (HKLM)

Set a force-install directive for the extension in the machine registry (HKLM).

| Browser | Key | Value name | Type | Data |
| - | - | - | - | - |
| Chrome | `HKLM\Software\Policies\Google\Chrome\ExtensionSettings\bdeanmdeckegmfjpbnngomallcedjold` | `installation_mode` | REG\_SZ | `force_installed` |
| Chrome | `HKLM\Software\Policies\Google\Chrome\ExtensionSettings\bdeanmdeckegmfjpbnngomallcedjold` | `update_url` | REG\_SZ | `https://clients2.google.com/service/update2/crx` |
| Edge | `HKLM\Software\Policies\Microsoft\Edge\ExtensionSettings\flggmhlpipcopffjfkpgkoljghfkmfcg` | `installation_mode` | REG\_SZ | `force_installed` |
| Edge | `HKLM\Software\Policies\Microsoft\Edge\ExtensionSettings\flggmhlpipcopffjfkpgkoljghfkmfcg` | `update_url` | REG\_SZ | `https://edge.microsoft.com/extensionwebstorebase/v1/crx` |

> [accordion] If you cannot write to ExtensionSettings (use ExtensionInstallForcelist)
>
> If asset management software already manages `ExtensionSettings`, you may not be able to write there.
> Examples include SKYSEA Client View and LANSCOPE. Use `ExtensionInstallForcelist` instead.
> Either approach is enough.
> Choose the other if another product already uses the same mechanism and you see a conflict.
>
> | Browser | Key | Type | Data |
> | - | - | - | - |
> | Chrome | `HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist` | REG\_SZ | `bdeanmdeckegmfjpbnngomallcedjold;https://clients2.google.com/service/update2/crx` |
> | Edge | `HKLM\Software\Policies\Microsoft\Edge\ExtensionInstallForcelist` | REG\_SZ | `flggmhlpipcopffjfkpgkoljghfkmfcg;https://edge.microsoft.com/extensionwebstorebase/v1/crx` |
>
> Value names are sequential numbers. Use the next free number (often `1` if none exist yet).
>
> With this approach, you still need [Extension parameters (HKCU)](#params-hkcu) and [User email address (logon script)](#useremail). If your asset management tool can deploy extensions, you may register the same values there.
>
> For how conflicts work and how to verify them, see [Browser extension policy conflicts and workarounds](https://support.i.moneyforward.com/en/it-management/admina-extension/policy-conflicts.md#workarounds).

### Extension parameters (HKCU)

Set parameters in the user registry (HKCU) so the extension can identify your Admina organization and users.

Registry keys differ by browser.

* Chrome: `HKCU\Software\Policies\Google\Chrome\3rdparty\extensions\bdeanmdeckegmfjpbnngomallcedjold\policy`
* Edge: `HKCU\Software\Policies\Microsoft\Edge\3rdparty\extensions\flggmhlpipcopffjfkpgkoljghfkmfcg\policy`

For both browsers, set the following values under those keys.

| Value name | Type | Data |
| - | - | - |
| `ApiKey` | REG\_SZ | Value shown under **Settings > Browser Extension > Extension policy** in Admina |
| `CreatedDate` | REG\_SZ | Value shown under **Settings > Browser Extension > Extension policy** in Admina |
| `OrganizationID` | REG\_SZ | Value shown under **Settings > Browser Extension > Extension policy** in Admina |
| `UserEmail` | REG\_EXPAND\_SZ | `%USEREMAIL%` |
| `UserPC` | REG\_EXPAND\_SZ | `%COMPUTERNAME%` |

By default, set `UserEmail` (`%USEREMAIL%`) and `UserPC` (`%COMPUTERNAME%`) to reference environment variables. For manual setup on devices and users you already know, you may use fixed values instead of variables. For standard bulk deployment, keep the variables.

### User email address (logon script)

Set the signed-in user's email address in the user environment variable `USEREMAIL`.

| Variable | Type | Value |
| - | - | - |
| `USEREMAIL` | User environment variable | Email address of the signed-in user |

How you set `USEREMAIL` at logon depends on the distribution method.

For how to distribute the scripts, see the page for each method.

The scripts are samples. Change how you obtain email addresses to match your environment.
Examples include Active Directory attributes, Microsoft Entra ID, and fixed lists.

If you set `UserEmail` to `%USEREMAIL%` but `USEREMAIL` is not set, the extension cannot identify the user.
It will not link to your organization. **When you use `%USEREMAIL%`, always deploy a logon script as well.**

## Choose an installation method

> [card] [Install the browser extension (Windows manual)](https://support.i.moneyforward.com/en/it-management/admina-extension/windows-solo-setup.md)
>
> For PCs not managed by Active Directory or MDM, a user with local administrator rights runs scripts to configure the extension.

> [card] [Install the browser extension (Windows GPO)](https://support.i.moneyforward.com/en/it-management/admina-extension/qegqblx598-windows-gpo.md)
>
> Bulk deployment to domain-joined devices managed with Active Directory GPO.

> [card] [Install the browser extension (Windows Intune)](https://support.i.moneyforward.com/en/it-management/admina-extension/windows-intune.md)
>
> Bulk deployment to devices managed by Microsoft Intune (on-premises Active Directory is not required).

If deployment settings reach devices but the extension does not install, see the workaround guide.
See [Browser extension policy conflicts and workarounds](https://support.i.moneyforward.com/en/it-management/admina-extension/policy-conflicts.md).

## Technical notes and FAQ

For HKLM, HKCU, policy conflicts, and permissions, see [Browser extension technical notes and FAQ for Windows](https://support.i.moneyforward.com/en/it-management/admina-extension/windows-technical-notes.md).
That page lists common questions for all distribution methods.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.