Device Control

Browser Management

Browser Management enables IT administrators to centrally manage browser settings, enforce security policies, control extensions, configure preferences, and ensure a secure, consistent browsing experience across all managed endpoints.

1 min
July 24, 2026

What You'll Learn

How to create a Browser Policy for a specific browser type (Chrome or Edge)
How to control extension installs and block specific extensions by name
How to block specific browser permissions and configure native messaging access
How to deploy a Browser Policy to specific endpoints
How to track a browser policy deployment through to completion

Frequently Asked Questions

Which browsers can a Browser Policy target?

A Browser Policy applies to a single Browser Type per policy, selectable from a dropdown that includes Chrome and Edge. Each policy also has a Name and an optional Description alongside this setting.

Can I allow extension installs but still block specific ones?

Yes. Turning on Allow Users to Install Extensions reveals a Blocked Extensions field where individual extensions can be added by name, so users can keep installing extensions generally while specific ones remain blocked.

What can Blocked Permissions restrict?

Blocked Permissions lets you select specific browser API permissions to deny, such as History, Cookies, Debugger, Desktop Capture, Declarative Content, Declarative Net Request, Context Menus, Content Settings, and Downloads.

What is the Native Messaging Action setting for?

It controls how the browser handles native messaging requests (for example, leaving it as Not Configured applies no restriction). Native Messaging Allowed Hosts can then be used to list specific host domains permitted to use native messaging.

How do I push a Browser Policy to specific machines?

From Browser Policy Deployments, create a new deployment, set the Scope to Specific Endpoints, choose the target endpoint(s), then select the Browser Management Policy, a Deployment Policy, and who to notify before publishing.

How do I confirm a browser deployment succeeded?

The Browser Policy Deployments list shows each deployment's Stage (for example Completed) and Progress (such as 1/1). Opening the deployment's Tasks view shows the Status per targeted endpoint, such as Ready to Deploy or Completed.