# Application Policy

Last updated: August 14, 2026

This page covers the Chromebook Apps and Extensions Policy in MDM, which allows IT administrators to control application installations on managed Chromebooks. Using Application Policy, admins can specify approved URLs from which employees are permitted to download applications, automatically blacklisting all other sources. This policy applies to a wide range of app types including Extensions, Themes, Google App Scripts, Hosted Apps, Legacy Packaged Apps, and Chrome Packaged Apps, helping organizations enforce productivity and security standards across their enterprise Chromebook fleet.

With productivity and security at the forefront for enterprise, ensuring only certain apps are installed and that too only from certain websites is one of the primary concerns for any IT admin. Using Application Policy, you can specify those URLs from which you want employees to download applications. This automatically blacklists the other URLs used by employees for downloading applications. This includes Extensions, Themes, Google App Scripts, Hosted Apps, Legacy Packaged Apps, Chrome Packaged Apps, etc.

## Profile Description

| Profile Specification | Description |
|---|---|
| URL | Specify the list of URLs which are to be used for downloading apps. |

## Frequently Asked Questions

- **How does ManageEngine MDM control app and extension installations on Chromebooks?** ManageEngine MDM uses the Apps and Extensions Policy to specify approved URLs from which employees can install Chrome apps and extensions. All other sources are automatically blacklisted.
- **Can administrators force-install specific apps on managed Chromebooks?** Yes, ManageEngine MDM allows administrators to configure force-installed apps and extensions that are automatically deployed to managed Chromebooks without requiring user action.
- **Is it possible to block specific Chrome extensions on managed Chromebooks?** Yes, the Apps and Extensions policy in ManageEngine MDM allows administrators to blocklist specific extension IDs, preventing users from installing restricted extensions.