Deploying the SysAid Browser Extension in Chrome via PowerShell (Windows)

Use this guide to deploy the SysAid Browser Extension to Chrome on Windows devices using PowerShell.

This deployment method uses an idempotent script that writes both required values, making it useful for script-based deployment flows such as Microsoft Configuration Manager (SCCM), RMM tools like NinjaOne, Intune Win32 apps, startup scripts, or other tools that can run PowerShell scripts on managed devices.

Before you start

You’ll need your SysAid Browser Extension ID and Token.

To find them:

1. In SysAid, go to License Manager > Applications Discovery.

2. Click Manage Connections in the top right corner.

3. Under Browser Extension, click Setup to see the ID and Token.

Deploy the extension

To deploy the extension:

1. Use this script and replace the ID and Token values with those for your SysAid account. Run it  as SYSTEM/admin:

   $ExtensionId = "YOUR_EXTENSION_ID"
   $Token       = "YOUR_TOKEN_VALUE"
   $Force  = "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist"
   $Policy = "HKLM:\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\$ExtensionId\policy"
   New-Item -Path $Force -Force | Out-Null
   Set-ItemProperty -Path $Force -Name "1" -Value "$ExtensionId;https://clients2.google.com/service/update2/crx" -Type String
   New-Item -Path $Policy -Force | Out-Null
   Set-ItemProperty -Path $Policy -Name "token" -Value $Token -Type String

2. Deploy to the pilot collection/group.

3. Relaunch Chrome on a test device.

Verify the setup

To verify the setup:

1. Open Chrome browser and go to chrome://policy.

2. Look for the ExtensionInstallForcelist policy.

   • If the deployment was successful, it will show the status as "OK" and you will see your 32-character Extension ID listed in the policy value.

3. Go to chrome://extensions.

   • The extension should be present and turned on.

   • It will display a building/enterprise icon next to it, indicating it is managed.

   • The option to "Remove" or toggle it off will be locked out for the end-user.