Skip to content
Neon Cyber docs site

Managed Deployment

Administrators of the Neon Cyber platform can deploy the Neon Extension silently through various methods. This article will walk you through the steps, based on your deployment strategy, to silently push out the Neon extension automatically. This is the recommended way to deploy Neon across your organization.

Microsoft Group Policy Steps

Chrome

  1. Ensure you have Microsoft Entra Domain Services or permissions to manage AD through Group Policy
  2. Install the Group Policy Chrome Admin template
    1. Download the Chrome bundle From Google
    Download chrome GPO bundle
    1. Extract the downloaded zip file
    2. Open Group Policy Management Editor
    3. Under the correct Domain select “Computer Configuration” -> “Administrative Templates”
    4. Right click Administrative Templates and select “Add/Remove Templates”
    5. Click “Add”
    6. Navigate to your extracted bundle under <unzipped directory>/adm/language/chrome.adm
    Install adm template for Chrome
    1. Verify the template was added in GPM under Templates/Classic Administrative Templates/Google/Google Chrome
  3. View your Neon Cyber Configuration
    1. In the Neon Platform click “Deployments” -> “Add Users” -> “Managed”
    2. Click “Group Policy”
    3. Select “Chrome” and “Windows”
    4. Find your “Deployment Token”
    5. Update Group Policy Configuration
    6. In Group Policy Management select “Computer Configuration” -> Templates -> “Google Chrome” -> “Extensions”
      1. If you would like to install for select users do the same under User “Configuration”
    7. Select “Configure the list of force-installed apps and extensions”
    Configure Neon force install
    1. Clicked the “Enabled” radio button and click “Show”
    2. Paste in “ojablpjhhnghnemkmpaghanndgoenjpd;https://clients2.google.com/service/update2/crx”
    Create Neon force install
    1. Click “OK” on the current and previous screens
    2. Under “Computer Configuration” -> “Preferences” -> “Windows Settings” select “Registry”
      1. Add Neon to the force install list
        1. Right click in the “Registry” panel and select “New” -> “Registry Item”
        2. Add “SOFTWARE\Policies\Google\Chrome\3rdparty\Extensions\ojablpjhhnghnemkmpaghanndgoenjpd\policy” to “Key Path”
        Create Neon config policy
        1. Click “OK”
      2. Add Neon configuration to extension policy
        1. Right click in the “Registry” panel and select “New” -> “Registry Item”
        Create Neon new registry
        1. Add “SOFTWARE\Policies\Google\Chrome\3rdparty\Extensions\ojablpjhhnghnemkmpaghanndgoenjpd\policy” to “Key Path”
        2. Add “deploymentToken” to “Value name”
        3. Copy/paste the deployment token from the Neon Platform to “Value Data”
        Create Neon deployment key
        1. Click “OK”
    3. To verify check that your settings match the example below Create Neon verify

Edge

  1. Ensure you have Microsoft Entra Domain Services or permissions to manage AD through Group Policy
  2. Install the Group Policy Edge Admin template
    1. Download the policy extensions by From Microsoft and clicking “Download Windows 64-bit Policy”
    Download edge GPO bundle
    1. Extract the downloaded cab (its a zip) file and “MicrosoftEdgePolicyTemplates” zip file
    2. Open Group Policy Management Editor
    3. Under the correct Domain select Computer “Configuration” -> “Administrative Templates”
    4. Right click Administrative Templates and select “Add/Remove Templates”
    5. Click “Add”
    6. Navigate to your extracted bundle under “unzipped directory/windows/adm/language/msedge.adm”
    7. Verify the template was added in GPM under “Templates/Classic Administrative Templates/Microsoft Edge”
  3. View your Neon Cyber Configuration
    1. In the Neon Platform click “Deployments” -> “Add Users” -> “Microsoft Environments”
    2. Click “Group Policy”
    3. Select “Edge” and “Windows”
    4. Find your “Deployment Token”
    5. Update Group Policy Configuration
    6. In Group Policy Management select “Computer Configuration” -> Templates -> “Microsoft Edge” -> “Extensions”
      1. If you would like to install for select users do the same under User “Configuration”
    7. Select “Control which extensions are installed silently”
    8. Clicked the “Enabled” radio button and click “Show”
    9. Paste in “ojablpjhhnghnemkmpaghanndgoenjpd;https://clients2.google.com/service/update2/crx”
    Download edge GPO bundle
    1. Click “OK” on the current and previous screens
    2. Under “Computer Configuration” -> “Preferences” -> “Windows Settings” select “Registry”
      1. Add Neon to the force install list
        1. Right click in the “Registry” panel and select “New” -> “Registry Item”
        2. Add “SOFTWARE\Policies\Microsoft\Edge\3rdparty\Extensions\ojablpjhhnghnemkmpaghanndgoenjpd\policy” to “Key Path”
        Create Neon config policy
        1. Click “OK”
      2. Add Neon configuration to extension policy
        1. Right click in the “Registry” panel and select “New” -> “Registry Item”
        2. Add “SOFTWARE\Policies\Microsoft\Edge\3rdparty\Extensions\ojablpjhhnghnemkmpaghanndgoenjpd\policy” to “Key Path”
        3. Add “deploymentToken” to “Value name”
        4. Copy/paste the deployment token from Neon Cyber platform to “Value Data”
        Create Neon config policy
        1. Click “OK”
    3. To verify check that your settings match the example below
    Create Neon verify

Microsoft Intune Admin Center Steps

Edge

Create Intune Device Policy

  1. Navigate to Microsoft Intune admin center
    1. On the left click “Devices” -> “Configuration”
  2. Under Policies click “Create” -> “New Policy”
    1. Select “Windows 10 and later” under “Platform”
    2. Select “Settings catalog” under “Profile Type”
    3. Click “Create”
  3. On the “Create profile” Screen
    1. Basics
      1. Add a descriptive name such as “Neon Cyber Extension”
      2. Optional Add a description
      3. Click “Next”
    2. Configuration settings
      1. Click “Add settings”
      2. Search for “Edge”
      3. Select “Microsoft Edge\Extensions”
      4. Select “Control which extensions are installed silently”
      Create Neon verify
      1. On the left side switch the setting to “Enabled”
      2. In the box above enter “ojablpjhhnghnemkmpaghanndgoenjpd;https://clients2.google.com/service/update2/crx”
      3. Check the box next to the extension id
      4. Click “Next”
    3. Assignments
      1. Click “Select Group”
      2. Select the Entra group you would like to push the extension too
      3. Click “Select”
      4. Ensure the group is selected before clicking “Next”
    4. Scope tags
      1. Set any scopes you require
      2. Click “Next”
    5. Review + create
      1. Review the settings and policy
      2. Click “Create”

Create Intune Powershell

  1. Navigate to Microsoft Intune admin center
    1. On the left click “Devices” -> “Scripts and remediation”
    2. Click on the “Platform Scripts” tab
  2. Click “Add” -> “Windows 10 and later” to create a new powershell script
    1. Basics
      1. Add a descriptive name such as “Neon Cyber Extension Config”
      2. (Optional) Add a scription
      3. Click “Next”
    2. Script Settings
      1. Navigate to the downloaded file “neon-edge-windows-intune.ps1”
      2. Set “Run this script using the logged in credentials” to “No”
      3. Set “Enforce script signature check” to “No”
      4. Set “Run script in 64 bit PowerShell Host” to “Yes”
      Create Neon verify
      1. Click “Next”
    3. Assignments
      1. Click “Select Group”
      2. Select the Device group you would like to push the extension to
      3. Click “Select”
      4. Ensure the group is selected before clicking “Next”
    4. Review + create
      1. Review the information matches the instructions
      Create Neon verify
      1. Click “Create”

Chrome

Create Intune Device Policy

  1. Navigate to Microsoft Intune admin center
    1. On the left click “Devices” -> “Configuration”
  2. Under Policies click “Create” -> “New Policy”
    1. Select “Windows 10 and later” under “Platform”
    2. Select “Settings catalog” under “Profile Type”
    3. Click “Create”
  3. On the “Create profile” Screen
    1. Basics
      1. Add a descriptive name such as “Neon Cyber Extension”
      2. Optional Add a description
      3. Click “Next”
    2. Configuration settings
      1. Click “Add settings”
      2. Search for “Chrome”
      3. Select “Google Chrome\Extensions”
      4. Select “Configure the list of force-installed apps and extensions”
      Create Neon verify
      1. On the left side switch the setting to “Enabled”
      2. In the box above enter “ojablpjhhnghnemkmpaghanndgoenjpd;https://clients2.google.com/service/update2/crx”
      3. Check the box next to the extension id
      4. Click “Next”
    3. Assignments
      1. Click “Select Group”
      2. Select the Entra group you would like to push the extension too
      3. Click “Select”
      4. Ensure the group is selected before clicking “Next”
    4. Scope tags
      1. Set any scopes you require
      2. Click “Next”
    5. Review + create
      1. Review the settings and policy
      2. Click “Create”

Create Intune Powershell

  1. Navigate to Microsoft Intune admin center
    1. On the left click “Devices” -> “Scripts and remediation”
    2. Click on the “Platform Scripts” tab
  2. Click “Add” -> “Windows 10 and later” to create a new powershell script
    1. Basics
      1. Add a descriptive name such as “Neon Cyber Extension Config”
      2. (Optional) Add a scription
      3. Click “Next”
    2. Script Settings
      1. Navigate to the downloaded file “neon-chrome-windows-intune.ps1”
      2. Set “Run this script using the logged in credentials” to “No”
      3. Set “Enforce script signature check” to “No”
      4. Set “Run script in 64 bit PowerShell Host” to “Yes”
      Create Neon verify
      1. Click “Next”
    3. Assignments
      1. Click “Select Group”
      2. Select the Device group you would like to push the extension to
      3. Click “Select”
      4. Ensure the group is selected before clicking “Next”
    4. Review + create
      1. Review the information matches the instructions
      Create Neon verify
      1. Click “Create”

Google Admin Managed Chrome

Adding the Neon Cyber extension to Chrome

If you are using the Google Admin console to manage your browsers (through Workspace, Enterprise Browser, Browser Cloud Management), you can enroll Neon Cyber in a few short steps.

If you are not currently enrolled, speak with your IT team to discuss how best to proceed with enabling managed Chrome browsers.

To install and configure Neon Cyber across your managed Chrome browsers, first, download your Neon Cyber policy configuration from our platform.

  1. From inside the Neon Cyber console, go to deployments and click “add user” 2. Select and continue on Google Workspace 3. Download your policy config file

Next, log into Google Admin and navigate to the Users & Browsers page.

  1. Select which Organizational Units to target a starting group, or use the “Include All Organizational Units” to deploy across your enterprise.
  2. Click the “Add the Chrome app or extension by ID button”
  3. Enter the Neon Cyber Extension ID: ojablpjhhnghnemkmpaghanndgoenjpd and click save.
  4. Under “Policy for extensions” in the bottom right hand corner, click the upload button.
  5. Add your Neon-google-workspace-policy.json file and then click save.
  6. In the installation policy for Neon Cyber, set the policy to Force install and then click save.

At this point, the Neon Cyber agent will deploy to users in the units that you had selected.

References

Managing Edge browsers with Microsoft 365
Manage Edge extensions
Manage Edge policies with Intune
Deploying powershell scripts through Intune
Configuring extension settings policy