How to Block chrome://extensions/ URL?

Question

How can you block the Chrome URL: chrome://extensions/, such that extensions cannot be disabled, removed, or disabled in incognito mode by anyone (or without a password)?

What I've Tried (that's failed):

• blacklisting the URL using my xfinity routers parental controls or OpenDNS doesn't work, since it doesn't recognize that format of URL (it expects http://... and using chrome didn't work either).

• I have Windows 7 Home, which prevents me from using Group Policy Editor (gpedit.msc) to blacklist chrome URLs such as chrome://* through the administrative template google provides for Chrome.

• Kiosk mode in chrome accomplishes this but it also limits the user too much (removing the address bar and shortcuts). Also, it can easily be evaded by typing Alt + F4. I would like password protection from access to Chromes internal URLs such as extensions.

• Denying write access to all user's Chrome Extensions directory. This only prevents new extensions from being installed. It doesn't prevent current extensions from being disabled.

• Creating supervised user accounts. Although they prevent extensions from being modified they also do not allow any extensions to be installed in the first place!

Answer 1

Working as of March 11, 2023 on Version 111.0.5563.65

Use Chrome's URLBlocklist policy

On Windows, the Registry key to block sites can be found under Software\Policies\Google\Chrome\URLBlocklist in the HKCU or HLM hive. Refer to the link at the bottom for other systems.

Unlike solutions using the Group Policy Editor, this will work under all versions of Windows (Home, Pro, etc) with admin rights.

1. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\URLBlocklist using the Registry Editor. Create these keys if necessary by right clicking each "folder" and selecting New > Key
2. Create a REG_SZ string value with an integer as the title and a value of chrome://extensions by right-clicking and selecting "string value"
3. To force a refresh, navigate to chrome://policy and click the "Reload policies" button at the top of the page.

The documentation for this feature has the following note:

Note: Blocking internal chrome://* and chrome-untrusted://* URLs can lead to unexpected errors or can be circumvented in some cases.

For more information and for other devices, see Google's documentation for this policy.

Here's also a screenshot of my registry editor (I've blocked out irrelevant keys)

Answer 2

You can try with providing the Permission to the Goggle Chrome Extensions ( Allow/ Deny ) for the particular User's.

GOTO this location

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions

To disable write access, Right Click the Extensions -> properties -> security -> edit -> Select the User.

Hit Allow/Deny on check box and they will/ will not be able to install extensions.

Hope this helps.

Answer 3

Try extension StayFocused, or Cold Turkey Blocker. The former is capable of doing that by default.

Here is a screenshot of StayFocused's function.