Chrome to block policy-installed hijacker extensions on unmanaged devices
Google is adding a Chrome defense that blocks policy-controlled extensions from overriding the New Tab page or default search on unmanaged Windows and macOS devices. When detected, the installation is canceled and the extension ID is blocked for future policy checks; manual extensions remain controllable and a device that loses trusted management will have affected extensions automatically removed. The change is still under review and not yet shipped, but would be enabled by default via the kBlockDseNtpOverrideExtensionsOnUnmanagedDevices flag, with metrics and an escape hatch for legitimate admins.
