Back to Knowledge Base
GenGuard & Shadow IT 5 min read

Enterprise Deployment: GenGuard Extension

Learn how to deploy the Trustity browser agent via Active Directory GPO or MDM (Intune/Jamf).

Overview

The GenGuard agent is a Chromium-based extension compatible with Google Chrome, Microsoft Edge, and Brave. For enterprise environments, we recommend forcing installation via policy to prevent user tampering.

Step 1: Download Policy Templates

Navigate to the Deployment Center in your dashboard and download the ADMX/ADML templates tailored for your Organization ID.

Step 2: Configure Group Policy (GPO)

  1. Open Group Policy Management Editor.
  2. Navigate to Administrative Templates > Google > Google Chrome > Extensions.
  3. Enable "Configure the list of force-installed apps and extensions".
  4. Add the Trustity Extension ID: [Your-Extension-ID];https://clients2.google.com/service/update2/crx

Step 3: Zero-Touch Configuration

To prevent users from manually entering license keys, push the following Registry Key to all endpoints:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\[ID]\policy
"licenseKey"="YOUR_ORG_KEY_HERE"

Last updated: 12/5/2025

Was this helpful?