ConfigShield Browser Inventory

ConfigShield Browser Inventory is for organization that manage Chrome centrally. It is installed by an administrator through Google Admin, Group Policy, Intune or Jamf, and it does nothing until that administrator configures it through Chrome policy. A copy installed any other way stays idle: it sets no timer and makes no network request. Once configured, it reports this browser's security-relevant configuration to the ConfigShield console the organization's administrator chose: • Browser brand and version, and the operating system, architecture and OS version • The state of 20 Chrome privacy settings, and whether enterprise policy locks each one or leaves it to the user • The installed extensions and apps: name, ID, version, whether enabled, permissions, how each was installed, and whether it comes from a store. The administrator can limit this to policy-installed extensions or turn it off. • On ChromeOS, the device's directory ID, so the browser can be matched to the organization's device record. Serial number, asset ID, location label and hostname are reported only if the administrator turns them on. • Hardware manufacturer and model, only where the administrator's policy allows it It never reads tabs, browsing history, cookies, page content, the signed-in user's identity or network addresses. It has no user interface, no host permissions and no content scripts. It only reads the privacy settings and never changes any of them, and it never enables, disables or removes another extension. Reports go only to the HTTPS console address the administrator configures. Nothing is sold or used for advertising. Administrators: mint a browser enrollment token on the Browsers page of your ConfigShield console, then force-install this extension and paste the "Policy for extensions" JSON shown there.