Supreme AdBlock for IT admins

What you need to know first

• No admin settings. The extension has no policy schema and no managed storage. An admin can install it and pin it, but cannot preconfigure it. Every setting is chosen by the user, in the extension's Settings.
• No account, no analytics, no telemetry. Like any download, the filter update reaches our server with the device's IP address and user agent; we do not log these requests. The network requests are listed below and in the privacy policy, where you can check them yourself.
• Not a security product. The malware warning compares an address with URLhaus, a public list of known malicious addresses. It is a warning for known addresses. It is not antivirus, not a web gateway and not a replacement for either.
• Browser. Chrome 121 or newer. Installed from the Chrome Web Store.

Force-install with ExtensionInstallForcelist

Each entry is the extension ID, a semicolon and the update URL. Chrome installs the extension silently, and the user cannot remove or disable it. Removing the entry from the list uninstalls it. This is the value to enter:

chbjbiabkgocfbbfhednpbhfeipjcclk;https://clients2.google.com/service/update2/crx

Source: Google, ExtensionInstallForcelist, checked 23 October 2026. The extension comes from the Chrome Web Store, so the domain, Azure Active Directory or Chrome Enterprise Core requirement that Google lists for installs from outside the store does not apply.

Force-install with ExtensionSettings

Use ExtensionSettings when you also want to pin the icon to the toolbar. Google states that it overrides ExtensionInstallForcelist when both are set. force_installed needs an update_url. Enter the JSON as a single line, with no line breaks:

{"chbjbiabkgocfbbfhednpbhfeipjcclk":{"installation_mode":"force_installed","update_url":"https://clients2.google.com/service/update2/crx","toolbar_pin":"force_pinned"}}

toolbar_pin is optional. Its values are force_pinned, default_pinned and default_unpinned. Drop it if you do not want the icon pinned.

Sources: Configure ExtensionSettings policy and Set Chrome app and extension policies (Windows) for the single-line JSON and the update URL; Google, ExtensionSettings for toolbar_pin. All checked 23 October 2026.

Google Admin console

1. Sign in as an administrator and open Devices > Chrome > Apps & extensions. With Chrome Enterprise Core, open Chrome browser > Apps & extensions.
2. Choose Users & browsers, and select the organisational unit or group on the left.
3. Click Add, then Add Chrome app or extension by ID. Enter chbjbiabkgocfbbfhednpbhfeipjcclk and choose Save.
4. Under Installation policy, choose Force install, then Save.

Sources: View and configure apps and extensions and Automatically install apps and extensions, checked 23 October 2026. Google notes that adding a paid Chrome Web Store item by ID is not available to Google Workspace for Education Fundamentals customers; Supreme AdBlock is free, so this does not apply.

Windows: Group Policy and registry

Group Policy

Import Google's Chrome policy templates first. Then open Administrative Templates > Google > Google Chrome > Extensions and choose Extension management settings. Enable it and paste the one-line JSON from the ExtensionSettings section. If the policy is not listed, download the latest templates.

Source: Set Chrome app and extension policies (Windows), checked 23 October 2026.

Registry

Google documents HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome as the key for Chrome policies set in the registry, and says a Group Policy setting takes precedence over a registry value. We could not find a list-policy example on Google's pages. The layout below, with numbered string values under the policy name, follows common admin practice and is not confirmed by Google's pages. Check the result in chrome://policy.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist]
"1"="chbjbiabkgocfbbfhednpbhfeipjcclk;https://clients2.google.com/service/update2/crx"

Source for the key: Manage Chrome policies with Windows registry, checked 23 October 2026.

Microsoft Intune

Create a Settings catalog profile for Windows 10 and later, choose Add settings and search for “Chrome”. Google's guide lists the category Administrative Templates\Google\Google Chrome\Extensions. An independent Microsoft-ecosystem author describes the setting Configure the list of force-installed apps and extension there, with the sub-setting Extension - App IDs and update URLs to be silently installed (Device). Enter the value from the ExtensionInstallForcelist section.

Sources: Google, Manage Chrome browser with Intune Settings Catalog (Windows) and Peter van der Woude, third party, checked 23 October 2026. Labels may differ in your tenant. We did not test this in Intune.

macOS configuration profile

Policies on a Mac need a device-management tool such as Jamf or Apple Profile Manager. Add the ExtensionSettings key to your Chrome configuration profile:

<key>ExtensionSettings</key>
<dict>
  <key>chbjbiabkgocfbbfhednpbhfeipjcclk</key>
  <dict>
    <key>installation_mode</key>
    <string>force_installed</string>
    <key>update_url</key>
    <string>https://clients2.google.com/service/update2/crx</string>
  </dict>
</dict>

Source: Set Chrome app and extension policies (Mac), checked 23 October 2026. That page shows this structure with another extension's ID. It does not name the preference domain in the text we read, so start from the profile Google links there. We did not verify a Jamf-specific payload.

Check that it worked

1. Restart Chrome on a managed device and open chrome://policy.
2. Choose Reload policies. Find ExtensionInstallForcelist or ExtensionSettings. The status must be OK and the value must not be empty.
3. Open chrome://extensions. Supreme AdBlock must be listed, and the user must not be able to remove it or turn it off.

Source for the chrome://policy steps: Google, checked 23 October 2026. Policies pushed from the cloud can take up to 3 hours to reach a device (Google).

What the extension sends

No account, analytics or telemetry data. The extension makes one automatic request: it downloads filters.json and its signature filters.json.sig from adblock.carbonstealth.eu, about twice a day. The request carries no identifier, no cookie and no browsing data, and the file is data only (domain names, CSS selectors and YouTube field names). Allow-list adblock.carbonstealth.eu on your proxy or firewall. Without it, blocking works with the filters inside the package, but does not receive updates.

If a user adds a filter list by URL, or turns on one of the regional lists we may not redistribute (the Bulgarian list from stanev.org; the Polish, Nordic and Serbo-Croatian lists from raw.githubusercontent.com), the extension downloads it from that address when it is turned on, then about once a day. You see these requests only if users do this. The full list, and how to read the downloaded file yourself, is in the privacy policy.

Microsoft Edge

Supreme AdBlock is not on Edge Add-ons yet. We give no Edge policy values for it. Edge has its own policies under SOFTWARE\Policies\Microsoft\Edge; Microsoft documents them in Use group policies to manage Microsoft Edge extensions (checked 23 October 2026). Do not copy the Chrome paths above into Edge.

Questions from your security team

Write to info@carbonstealth.eu. More on privacy and how we measure: privacy policy, how we measure, status. Everyday help for users: support.