MDM deployment

InputGuard enrollment scripts distribute cleanly through device management platforms such as Jamf, Microsoft Intune, Kandji, Mosyle, and RMM. They write only InputGuard’s extension-specific managed configuration and do not write Chrome-wide ExtensionSettings or ExtensionInstallForcelist policy.

First install or assign the Chrome Web Store extension through your normal channel. Then download the enrollment script from a deployment profile in the portal (Deploy… → Download enrollment script) and run it as an MDM script step, RMM task, or provisioning step to give each device a stable identity. The device then appears on the Devices page just like any other enrolled device.

• Push the enrollment script through your MDM, RMM, or provisioning platform.
• Install or assign the Chrome extension through your browser-management channel.
• Run the enrollment script to configure and enroll devices, with no manual steps for the user.
• Manage enrolled devices through the InputGuard portal.

Native browser-management profiles and stronger platform-level enforcement are planned for a future release. These will build on top of MDM deployment — they are not required to deploy and enroll devices through your MDM today.