{"id":47,"date":"2022-07-15T11:19:55","date_gmt":"2022-07-15T10:19:55","guid":{"rendered":"https:\/\/gatlabs.com\/knowledge\/?p=47"},"modified":"2026-03-13T11:11:18","modified_gmt":"2026-03-13T11:11:18","password":"","slug":"how-to-deploy-gat-shield","status":"publish","type":"docs","link":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/how-to-deploy-gat-shield\/","title":{"rendered":"GAT Shield Extension – How to Deploy"},"content":{"rendered":"\r\n

Deploying the GAT Shield Chrome Extension<\/strong><\/h2>\r\n

In this document, we will cover the deployment steps of the GAT Shield extension<\/strong>.<\/p>\r\n

To start navigating and logging in to the Google Admin console<\/a>\u00a0<\/strong><\/p>\r\n

In the Admin Console click on Devices<\/strong><\/p>\r\n

\"\"<\/p>\r\n

From the menu on the left, navigate down to Devices >Chrome >Apps & extensions ><\/strong> click on Users & browsers<\/strong><\/p>\r\n

\"\"<\/p>\r\n

A new page will be displayed.<\/p>\r\n

Install<\/h3>\r\n

To install the GAT Shield extension, choose the root Org Unit<\/strong>\u00a0or a\u00a0sub-OU where you want to deploy Shield into.<\/strong>\u00a0<\/p>\r\n

On the bottom right side, click on the Yellow + button\u00a0<\/strong><\/p>\r\n

\"\"<\/p>\r\n

Select the Add the Chrome app or extension by ID\u00a0<\/strong>option.<\/p>\r\n

NOTE:<\/strong> A pop-up window will be displayed. Select the From a custom URL <\/strong>option.<\/p>\r\n

You’ll find both the ID and the URL required for this step in the GAT Shield application under the Extension deployment\u00a0<\/strong>section.<\/p>\r\n

\"\"<\/p>\r\n

Enter the\u00a0Extension ID<\/b>\u00a0and\u00a0URL<\/b>\u00a0of the extension.<\/p>\r\n

To\u00a0access and view the Extension ID and URL, navigate to\u00a0GAT Shield > Configuration > Extension deployment.<\/strong><\/p>\r\n

\"\"<\/p>\r\n

Click\u00a0Save<\/strong>.<\/p>\r\n

The Shield Extension is now installed.<\/p>\r\n

Click on the newly installed extension. You will see a pop-up window on the side. In the Installation policy,<\/strong> click and select Force install<\/strong>.<\/p>\r\n

\"Clicking<\/p>\r\n

Scroll down on the same window to the bottom of the page to find the Policy for extensions<\/strong>.<\/p>\r\n

\"Policy<\/p>\r\n

Enter the Secret key – taken from\u00a0 GAT<\/strong> Shield<\/strong>\u00a0under\u00a0Configuration \u2013 Extensions deployment<\/strong>.<\/p>\r\n

Under the Permissions and URL access<\/strong> field, click on and select Allow all permissions (2).<\/strong><\/p>\r\n

\"Selecting<\/p>\r\n

After making all the changes, click the Save<\/strong> button on the top right.<\/p>\r\n

Result<\/h3>\r\n

Shield will be installed<\/strong> for the users of the selected Org. Unit. It would depend on Google when the extension will appear on the end-user accounts.<\/p>\r\n

Given that the users are logged in on Chrome browser with their Google Account, it should take a few minutes to be propagated to the end users.<\/p>\r\n

Deploying GAT Shield Extension using Microsoft Group Policy Objects (GPO)<\/strong><\/h3>\r\n

First, apply the Chrome ADMX Group Policy using the steps found at this Google support article<\/a>.<\/span><\/p>\r\n

Navigate to Computer Configuration> Policies> Extension > Configure the list of force-installed apps and Extension<\/strong><\/p>\r\n

You are required to specify which Chrome extensions should be automatically installed (force-installed) for the users via Group Policy settings.<\/p>\r\n

Next, you need to enter each extension ID and installation URL \u00a0into the Group Policy setting.<\/p>\r\n

You’ll find both the ID and the URL in the GAT Shield application under the Extension deployment\u00a0<\/strong>section.<\/p>\r\n

\"\"<\/p>\r\n

After you have configured the Chrome policy to force install the extension in Group Policy, you can assign this policy to particular groups of computers or users within your organization.<\/p>\r\n

\"\"<\/p>\r\n

Recommended settings<\/h3>\r\n

User & Browser settings<\/span><\/strong><\/p>\r\n

We recommend enabling some settings on the domain to prevent Users (students) from interfering with Shield and any extensions.<\/p>\r\n

Enable these settings in Devices<\/strong> > Chrome <\/strong>\u00a0> Settings <\/strong>>\u00a0Users & browsers<\/strong><\/p>\r\n

\"\"\u00a0<\/p>\r\n

Some of these settings are\u00a0mandatory<\/strong>.<\/p>\r\n

Apps and Extensions<\/h4>\r\n

On the above-selected page, scroll down and navigate to the Apps and Extensions<\/strong> area, find the Task Manager<\/strong> settings, and switch it to Block users from ending processes with the Chrome Task Manager<\/strong>.<\/p>\r\n

\"On<\/p>\r\n

Description:<\/strong> Task Manager can be used to tamper with the Chrome browser’s normal operations.<\/p>\r\n

User experience<\/h4>\r\n

The following settings are highly recommended<\/strong> for schools using enrolled Chromebooks.<\/strong><\/p>\r\n

On the same page, scroll down to User Experience\u00a0<\/strong><\/p>\r\n

User & Browser settings > User Experience<\/strong><\/p>\r\n

\"\"<\/p>\r\n

 <\/p>\r\n

These settings prevent<\/strong> students from bypassing the network firewall and installing Android apps like VPNs and other web browsers on their Chromebooks.<\/p>\r\n