Configure Microsoft Defender to ignore Chrome extensions

If you don’t properly configure Microsoft Defender, some Chrome extensions might fail to install.

Group Policy Management Editor

1. In the Group Policy Management Editor, go to Computer ConfigurationPoliciesAdministrative TemplateWindows Components Windows DefenderExclusions.
2. Open Path Exclusions.
3. Enable the policy.
4. Under Options, next to Path Exclusions, click Show.
5. For Value name, add the exclusion you want to specify:
   • C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp
6. For Value, enter 0.

After you apply any Chrome policies, users need to restart Chrome browser for the settings to take effect.

To verify that the Defender path exclusion is set, open a PowerShell session and run Get-MpPreference. You should see the new path that you added under ExclusionPath.

Microsoft Endpoint Manager

1. In the Microsoft Endpoint Manager admin center, go to Endpoint Security.
2. Under Manage, click Antivirus.
3. Click Create Policy.
4. For Platform, select Windows 10, Windows 11, and Windows Server.
5. For Profile, select Microsoft Defender Antivirus.
6. Click Create.
7. On the Basics page, name the policy. For example, enter Exclusions for Chrome Extensions.
8. Click Next.
9. On the Configuration settings page, configure the ExcludedPaths setting:
   1. Enable the ExcludedPaths setting.
   2. Enter C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp
10. Click Next.

To check whether the policy has been successfully applied to devices, click the policy you just created and view the Device and user check-in status page.

Related topics

• Add an exclusion to Windows Security

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.