Part 1: Install the Microsoft Edge ADMX Templates
You will need the Microsoft Edge ADMX templates before you can configure the Guidde browser extension via GPO.
Download the Microsoft Edge ADMX policy templates from: https://www.microsoft.com/en-us/edge/business/download
Note: Select your Edge version and download the Policy files.
Unzip the download. You will need the following files:
msedge.admxmsedgeupdate.admxmsedge.admlmsedgeupdate.adml
Copy the
.admxfiles to your domain controller's PolicyDefinitions folder:
C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\
4. Copy the .adml files to the language subfolder (e.g., for English):
C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\en-US\
5. Confirm all files are in place before proceeding to Part 2.
Part 2: Configure the Group Policy Object
Open the Group Policy Management Console (GPMC) on your domain controller.
Create a new GPO or select an existing one to edit.
Link the GPO to the relevant Organizational Unit (OU).
Right-click the GPO and select Edit.
Navigate to: Computer Configuration >> Policies >> Administrative Templates >> Microsoft Edge >> Extensions
Open "Control which extensions are installed silently".
Set the policy to Enabled.
Click Show and add the following value:
pldeojbhedianlcaejpfbnckfhkacphe;https://edge.microsoft.com/extensionwebstorebase/v1/crx
9. Click OK to save.
10. Close the Group Policy Management Editor.
To test immediately on a target machine, run:
gpupdate /force
Otherwise, the policy will apply automatically on the next Group Policy refresh cycle.
Note: It can take up to 90 minutes for Group Policy to propagate across the domain. Once deployed, the Guidde extension will appear as installed in Edge.
Silent SSO: Automatic Sign-In for Managed Installations
When the extension is deployed via managed installation, Silent SSO is automatically triggered on the user’s device - no user interaction required.
What happens:
No browser tabs are opened, no prompts or alerts are shown to the user
The extension identifies the org’s SSO domain using the email associated with the user’s Chrome profile
It authenticates the user against the Guidde backend and SSO provider
The auth token is set for both the extension and app.guidde.com
This means users will be signed in and ready to use Guidde without any manual login step.
If the user isn’t logged into the SSO provider yet: The extension will retry authentication every 60 seconds. Once the user signs into any application that triggers an SSO session, the Guidde extension will authenticate automatically.