Cakewalk Browser Extension

The Browser Extension powers App Discovery across your organization. It helps IT and Security teams uncover shadow IT and track real app usage while protecting employee privacy and company data.

🔎 What Does It Do?

The browser extension automatically detects which SaaS apps your users are signing into from their browsers and reports this back to Cakewalk.

This enables:

• App Discovery: Uncover every app used across the company, including unmanaged and unapproved ones.
• Access Visibility: Identify which users have access to which apps and when they last accessed them.
• Security Insights: Detect risky or unsanctioned apps, duplicate accounts and orphaned access.
• Governance Automation: Link discovered accounts to users and trigger onboarding/offboarding or review workflows.

---

⚙️ How Does It Work?

The extension runs passively in the background and detects when users visit URLs that are only accessible after login for supported SaaS applications. This allows Cakewalk to identify that a user has access to an app, without ever capturing passwords or session data.

• It detects access to supported apps.
• It maps those events to users in Cakewalk.
• It syncs this data securely to your organization's Cakewalk environment.
• Admins and App Owners can then see which apps are being accessed, when they were last accessed and by whom.

💡 The extension never reads, stores or transmits personal data, passwords or session tokens.

How the browser extension records access: The browser extension records current access that users already have, which is added directly to Cakewalk without going through the Access Request process. Access Requests are for new access that users want to have. Use the Source column in each app's User table to distinguish between access granted through requests versus discovered by the browser extension.

---

📚 Which Apps Are Supported?

Cakewalk's browser extension recognizes and maps 6,000 apps, covering:

• Major business apps: Google Workspace, Slack, Notion, HubSpot, Figma, Salesforce, etc.
• Common developer and cloud platforms: AWS, GCP, Azure, Linear, GitHub, etc.
• AI apps and agents: ChatGPT, Claude, Lovable, Cursor, ElevenLabs, etc.

Supported apps are continually updated as Cakewalk expands its app catalog. No configuration is required as the extension automatically syncs with the latest supported app list.

---

🛠️ Configuration Options

Admins can control how the extension operates across the organization:

Setting	Description
Enforce browser extension installation	Create a mandatory task for all users to install the Cakewalk browser extension.
Manage browser notifications	When disabled, the browser extension automatically tracks all accesses. If enabled, the browser extension only tracks applications after employee confirms their access.

All settings can be managed under Settings → Account → Browser Extension in the Cakewalk Admin Panel.

---

🌍 Supported Platforms

The Cakewalk Browser Extension works on:

• Google Chrome (latest versions)
• Microsoft Edge (Chromium based)
• Mozilla Firefox (latest versions)
• All other Chromium based browsers (Arc, Brave, Opera, etc.)

---

🔒 How Does It Keep My Data Safe?

Cakewalk's browser extension is designed with privacy and security first:

• All App Discovery is performed locally on the user's device. No browsing history is collected or sent to Cakewalk.
• It only collects metadata about app access (domain, timestamp and user identity).
• It does not capture or transmit content, credentials or cookies.
• All data is encrypted in transit and at rest, following industry standards (TLS 1.2+ / AES-256).
• Data is processed only within Cakewalk's secure infrastructure.
• If you wish to exclude an app from the browser extension, make sure to mark it as Ignored in the App Governance table.
• Optional user consent: Admins can enable browser notifications. With this mode, users must explicitly approve each app or access detection before any data is sent to Cakewalk.

💡 Employees retain full transparency and control. They can always see which apps are tracked in their profile.

Read our Privacy Policy for more information on how Cakewalk stewards your data.

---

🚀 How Can I Roll It Out?

There are two main rollout methods:

Roll Out via Cakewalk Tasks

• Admins can assign "Install Browser Extension" tasks to all users.
• Each user receives a task in Cakewalk (and a Slack notification, if connected).
• If the user is logged into Cakewalk, the extension automatically authenticates with their profile upon installation.

Roll Out via MDM or Managed Browsers

• Distribute the extension across the organization using your Mobile Device Management (MDM) solution (e.g. Intune, Kandji, Jamf) or Managed Browsers (e.g. Google Workspace).
• See rollout instructions for select platforms below.

💡 Cakewalk automatically detects who has installed the extension and displays coverage metrics in the Admin Dashboard

Microsoft Intune

Google Chrome

Extension link: Chrome Web Store – Cakewalk Browser Extension

Extension ID: mmndpdobkmoodjjapihanaaddehhfcaj

Update URL: https://clients2.google.com/service/update2/crx

Deployment (Windows via Intune Settings Catalog)

1. Go to Microsoft Intune admin center.
2. Navigate to Devices → Configuration profiles → Create profile.
3. Select Platform: Windows 10 and later, Profile type: Settings catalog.
4. Name the profile (e.g. Cakewalk-Chrome).
5. Add setting:

   • Search for Google Chrome → Extensions → Configure the list of force-installed apps and extensions.
   • Enable it.
   • Enter:

     mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx

6. Assign the profile to target groups.
7. Create and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx</string>
  </array>
</dict>
</plist>

Domain: com.google.Chrome

---

Microsoft Edge

Extension link: Edge Add-ons – Cakewalk Browser Extension

Extension ID: oldilaangbgeaagcpipiephobfhajmoh

Update URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

Deployment (Windows via Intune Settings Catalog)

1. In Intune admin center, create a new Windows 10 and later → Settings catalog profile.
2. Name the profile (e.g. Cakewalk-Edge).
3. Add setting:

   • Search for Microsoft Edge → Extensions → Control which extensions are installed silently.
   • Enable it.
   • Enter:

     oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx

4. Assign to target groups and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx</string>
  </array>
</dict>
</plist>

Domain: com.microsoft.Edge

---

Mozilla Firefox

Extension link: Direct download: https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi

Extension ID (from manifest.json): [e-mail]

⚠️ The .xpi must be served with MIME type:

application/x-xpinstall

Deployment (Windows via Intune ADMX / Imported templates)

1. Import the latest Firefox ADMX & ADML into Intune.
2. Create a new profile: Windows 10 and later → Templates → Imported Administrative Templates (Preview).
3. Configure:

   • Navigate to Mozilla → Firefox → Extensions → ExtensionSettings.
   • Set JSON:

     {
       "[e-mail]": {
         "installation_mode": "force_installed",
         "install_url": "https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi"
       }
     }

4. Assign and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>policies</key>
  <dict>
    <key>ExtensionSettings</key>
    <dict>
      <key>[e-mail]</key>
      <dict>
        <key>installation_mode</key>
        <string>force_installed</string>
        <key>install_url</key>
        <string>https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi</string>
      </dict>
    </dict>
  </dict>
</dict>
</plist>

Domain: org.mozilla.firefox

---

✅ Once deployed, the Cakewalk Browser Extension is silently installed and locked in Chrome, Edge and Firefox for all scoped users and devices.

Jamf

Google Chrome (Mac)

Extension link:

Chrome Web Store – Cakewalk Browser Extension

Extension ID:

mmndpdobkmoodjjapihanaaddehhfcaj

Update URL:

<https://clients2.google.com/service/update2/crx>

Configuration Profile (Jamf)

• Domain: com.google.Chrome
• Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "<http://www.apple.com/DTDs/PropertyList-1.0.dtd>">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>mmndpdobkmoodjjapihanaaddehhfcaj;<https://clients2.google.com/service/update2/crx></string>
  </array>
</dict>
</plist>

---

Microsoft Edge (Mac)

Extension link:

Edge Add-ons – Cakewalk Browser Extension

Extension ID:

oldilaangbgeaagcpipiephobfhajmoh

Update URL:

<https://edge.microsoft.com/extensionwebstorebase/v1/crx>

Configuration Profile (Jamf)

• Domain: com.microsoft.Edge
• Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "<http://www.apple.com/DTDs/PropertyList-1.0.dtd>">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>oldilaangbgeaagcpipiephobfhajmoh;<https://edge.microsoft.com/extensionwebstorebase/v1/crx></string>
  </array>
</dict>
</plist>

---

Mozilla Firefox (Mac)

Extension link:

Direct XPI hosting (Cakewalk managed):

<https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi>

Extension ID (from manifest.json):

[e-mail]

⚠️ Note: The .xpi must be served with MIME type application/x-xpinstall.

Example for nginx:

types {
    application/x-xpinstall xpi;
}

Configuration Profile (Jamf)

• Domain: org.mozilla.firefox
• Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "<http://www.apple.com/DTDs/PropertyList-1.0.dtd>">
<plist version="1.0">
<dict>
  <key>policies</key>
  <dict>
    <key>ExtensionSettings</key>
    <dict>
      <key>[e-mail]</key>
      <dict>
        <key>installation_mode</key>
        <string>force_installed</string>
        <key>install_url</key>
        <string><https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi></string>
      </dict>
    </dict>
  </dict>
</dict>
</plist>

---

Deployment Steps (Jamf Pro)

1. In Jamf Pro, go to Computers → Configuration Profiles → New
2. Add a Custom Settings payload
3. Enter the correct Domain:

   • Chrome → com.google.Chrome
   • Edge → com.microsoft.Edge
   • Firefox → org.mozilla.firefox
4. Upload the corresponding plist
5. Scope the profile to the target Macs

---

✅ Once deployed, the Cakewalk Browser Extension will be silently installed and locked in Chrome, Edge and Firefox for all scoped users.

Google Workspace

Extension details

• Extension link: Chrome Web Store – Cakewalk Browser Extension
• Extension ID: mmndpdobkmoodjjapihanaaddehhfcaj
• Update URL: https://clients2.google.com/service/update2/crx

---

Deployment steps (Google Workspace Admin Console)

1. Log in to the Google Admin Console. You must use an account with Super Admin or Chrome management privileges.
2. In the left menu, go to: Devices → Chrome → Apps & extensions → Users & browsers
3. Select the OU (Organizational Unit) where you want to enforce the extension.

   • To enforce it across the whole org, choose the top level OU.
   • To target a subset of users, select a child OU.
4. At the bottom right, click the + (Add) button → Add from Chrome Web Store.
5. Search for Cakewalk Browser Extension or paste the ID: mmndpdobkmoodjjapihanaaddehhfcaj
6. Click Select.
7. Under Installation policy, choose Force install.

   • Optional: You can also select Force install + pin to toolbar if you want it always visible.
8. Click Save at the bottom right.

---

Verification

• Once deployed, the extension will automatically install the next time users sign in to Chrome with their managed Google Workspace account.
• You can confirm enforcement in the Admin Console under: Devices → Chrome → Apps & extensions → Users & browsers → [OU].
• On end user devices, the extension should appear in chrome://extensions/ with the note Installed by enterprise policy.

Kandji

Google Chrome (Mac)

Extension link:

Chrome Web Store – Cakewalk Browser Extension

Extension ID:

mmndpdobkmoodjjapihanaaddehhfcaj

Update URL:

https://clients2.google.com/service/update2/crx

Configuration Profile (Kandji)

1. In Kandji, go to Library → Add New → Custom Profile
2. Name the profile (e.g. Cakewalk Chrome Extension)
3. Domain: com.google.Chrome
4. Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx</string>
  </array>
</dict>
</plist>

1. Assign the profile to target devices or blueprints
2. Save and deploy

---

Microsoft Edge (Mac)

Extension link:

Edge Add-ons – Cakewalk Browser Extension

Extension ID:

oldilaangbgeaagcpipiephobfhajmoh

Update URL:

https://edge.microsoft.com/extensionwebstorebase/v1/crx

Configuration Profile (Kandji)

1. In Kandji, go to Library → Add New → Custom Profile
2. Name the profile (e.g. Cakewalk Edge Extension)
3. Domain: com.microsoft.Edge
4. Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx</string>
  </array>
</dict>
</plist>

1. Assign the profile to target devices or blueprints
2. Save and deploy

---

Mozilla Firefox (Mac)

Extension link:

Direct XPI hosting (Cakewalk managed):

https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi

Extension ID (from manifest.json):

[e-mail]

⚠️ Note: The .xpi must be served with MIME type application/x-xpinstall.

Configuration Profile (Kandji)

1. In Kandji, go to Library → Add New → Custom Profile
2. Name the profile (e.g. Cakewalk Firefox Extension)
3. Domain: org.mozilla.firefox
4. Plist content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionSettings</key>
  <dict>
    <key>[e-mail]</key>
    <dict>
      <key>installation_mode</key>
      <string>force_installed</string>
      <key>install_url</key>
      <string>https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi</string>
    </dict>
  </dict>
</dict>
</plist>

1. Assign the profile to target devices or blueprints
2. Save and deploy

---

✅ Once deployed, the Cakewalk Browser Extension will be silently installed and locked in Chrome, Edge and Firefox for all scoped devices.

Mosyle

Google Chrome (Mac)

Extension link:

Chrome Web Store – Cakewalk Browser Extension

Extension ID:

mmndpdobkmoodjjapihanaaddehhfcaj

Update URL:

https://clients2.google.com/service/update2/crx

Deployment (Mosyle)

1. Log in to Mosyle Business or Manager
2. Go to Profiles → Custom Profiles → Add Profile
3. Name the profile (e.g. Cakewalk Chrome Extension)
4. Upload a .mobileconfig file with the following content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadType</key><string>Configuration</string>
  <key>PayloadVersion</key><integer>1</integer>
  <key>PayloadIdentifier</key><string>com.cakewalk.chrome</string>
  <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
  <key>PayloadDisplayName</key><string>Cakewalk Chrome Extension</string>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>PayloadType</key><string>com.apple.ManagedClient.preferences</string>
      <key>PayloadVersion</key><integer>1</integer>
      <key>PayloadIdentifier</key><string>com.cakewalk.chrome.extension</string>
      <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
      <key>PayloadDisplayName</key><string>Custom: (com.google.Chrome)</string>
      <key>PayloadContent</key>
      <dict>
        <key>com.google.Chrome</key>
        <dict>
          <key>Forced</key>
          <array>
            <dict>
              <key>mcx_preference_settings</key>
              <dict>
                <key>ExtensionInstallForcelist</key>
                <array>
                  <string>mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx</string>
                </array>
              </dict>
            </dict>
          </array>
        </dict>
      </dict>
    </dict>
  </array>
</dict>
</plist>

1. Assign to target devices or groups
2. Deploy

---

Microsoft Edge (Mac)

Extension link:

Edge Add-ons – Cakewalk Browser Extension

Extension ID:

oldilaangbgeaagcpipiephobfhajmoh

Update URL:

https://edge.microsoft.com/extensionwebstorebase/v1/crx

Deployment (Mosyle)

1. Go to Profiles → Custom Profiles → Add Profile
2. Name the profile (e.g. Cakewalk Edge Extension)
3. Upload a .mobileconfig file with the following content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadType</key><string>Configuration</string>
  <key>PayloadVersion</key><integer>1</integer>
  <key>PayloadIdentifier</key><string>com.cakewalk.edge</string>
  <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
  <key>PayloadDisplayName</key><string>Cakewalk Edge Extension</string>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>PayloadType</key><string>com.apple.ManagedClient.preferences</string>
      <key>PayloadVersion</key><integer>1</integer>
      <key>PayloadIdentifier</key><string>com.cakewalk.edge.extension</string>
      <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
      <key>PayloadDisplayName</key><string>Custom: (com.microsoft.Edge)</string>
      <key>PayloadContent</key>
      <dict>
        <key>com.microsoft.Edge</key>
        <dict>
          <key>Forced</key>
          <array>
            <dict>
              <key>mcx_preference_settings</key>
              <dict>
                <key>ExtensionInstallForcelist</key>
                <array>
                  <string>oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx</string>
                </array>
              </dict>
            </dict>
          </array>
        </dict>
      </dict>
    </dict>
  </array>
</dict>
</plist>

1. Assign to target devices or groups
2. Deploy

---

Mozilla Firefox (Mac)

Extension link:

Direct XPI hosting (Cakewalk managed):

https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi

Extension ID (from manifest.json):

[e-mail]

⚠️ Note: The .xpi must be served with MIME type application/x-xpinstall.

Deployment (Mosyle)

1. Go to Profiles → Custom Profiles → Add Profile
2. Name the profile (e.g. Cakewalk Firefox Extension)
3. Upload a .mobileconfig file with the following content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadType</key><string>Configuration</string>
  <key>PayloadVersion</key><integer>1</integer>
  <key>PayloadIdentifier</key><string>com.cakewalk.firefox</string>
  <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
  <key>PayloadDisplayName</key><string>Cakewalk Firefox Extension</string>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>PayloadType</key><string>com.apple.ManagedClient.preferences</string>
      <key>PayloadVersion</key><integer>1</integer>
      <key>PayloadIdentifier</key><string>com.cakewalk.firefox.extension</string>
      <key>PayloadUUID</key><string>GENERATE-UUID-HERE</string>
      <key>PayloadDisplayName</key><string>Custom: (org.mozilla.firefox)</string>
      <key>PayloadContent</key>
      <dict>
        <key>org.mozilla.firefox</key>
        <dict>
          <key>Forced</key>
          <array>
            <dict>
              <key>mcx_preference_settings</key>
              <dict>
                <key>ExtensionSettings</key>
                <dict>
                  <key>[e-mail]</key>
                  <dict>
                    <key>installation_mode</key><string>force_installed</string>
                    <key>install_url</key><string>https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi</string>
                  </dict>
                </dict>
              </dict>
            </dict>
          </array>
        </dict>
      </dict>
    </dict>
  </array>
</dict>
</plist>

1. Assign to target devices or groups
2. Deploy

---

✅ Once deployed, the Cakewalk Browser Extension will be silently installed and locked in Chrome, Edge and Firefox for all scoped devices.

💡 Note: Remember to generate unique UUIDs for each PayloadUUID field in the .mobileconfig files. You can use uuidgen command in Terminal or an online UUID generator.

Datto RMM

Datto RMM is a remote monitoring and management platform, not an Apple MDM. It enforces the extension by pushing the browser's own enterprise policy to each device. The extension IDs and URLs match the other platforms above.

Windows (fully supported)

Deploy a PowerShell Component that writes the force install policy to the registry. Run it in the SYSTEM context so the keys land under HKLM.

# Cakewalk Browser Extension - force install on Windows
# Deploy as a Datto RMM Component, run as SYSTEM

# Google Chrome
$chrome = "HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist"
New-Item -Path $chrome -Force | Out-Null
New-ItemProperty -Path $chrome -Name "1" `
  -Value "mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx" `
  -PropertyType String -Force | Out-Null

# Microsoft Edge
$edge = "HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist"
New-Item -Path $edge -Force | Out-Null
New-ItemProperty -Path $edge -Name "1" `
  -Value "oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx" `
  -PropertyType String -Force | Out-Null

# Mozilla Firefox
$firefox = "HKLM:\SOFTWARE\Policies\Mozilla\Firefox\ExtensionSettings\[e-mail]"
New-Item -Path $firefox -Force | Out-Null
New-ItemProperty -Path $firefox -Name "installation_mode" -Value "force_installed" -PropertyType String -Force | Out-Null
New-ItemProperty -Path $firefox -Name "install_url" `
  -Value "https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi" `
  -PropertyType String -Force | Out-Null

Deployment steps (Datto RMM)

1. In Datto RMM, go to ComStore → My Components or create a New Component of category Scripts.
2. Paste the PowerShell above and set the run mode to PowerShell.
3. Save the component.
4. Create a Job (or a scheduled Policy) targeting the device group you want covered.
5. Set the job to run as System and deploy.
6. Browsers pick up the policy on next launch. Confirm at chrome://policy, edge://policy or about:policies on a target device.

macOS (not supported via Datto RMM)

Datto RMM cannot silently install configuration profiles on current macOS, because that needs a true Apple MDM. Chrome, Edge and Firefox only honor force install policy from managed preferences delivered by an MDM. For Macs, enforce the extension with a real MDM instead. See the Jamf, Kandji or Mosyle tabs above.

---

✅ Once deployed, the Cakewalk Browser Extension is silently installed and locked in Chrome, Edge and Firefox for all scoped Windows devices.