How to Deploy Helperbird Using Microsoft Intune

Microsoft Intune lets you force-install Helperbird and push its managed configuration — your enterprise subscription key and admin lock — to Edge and Chrome across your Windows devices.

This guide uses the Settings catalog, which is the current method. (Intune's older Administrative Templates profile type is now read‑only, so new profiles must use the Settings catalog.)

Before You Start

• A Microsoft Intune account with the Policy and Profile Manager role (or higher).
• Windows 10/11 devices enrolled in Intune.

Pick the extension ID that matches the browser you are configuring. Each browser store issues its own ID — they are not interchangeable. This guide leads with Microsoft Edge, the usual choice for Intune-managed Windows fleets; the Chrome steps follow.

Configuring only one browser? Use just that browser's ID and skip the other section.

Deploy to Microsoft Edge

Step 1: Create a Settings catalog profile

In the Intune admin center, go to Devices > Configuration > Create > New policy. Set:

• Platform: Windows 10 and later
• Profile type: Settings catalog

Click Create and name it (e.g. "Helperbird – Force install (Edge)").

Step 2: Add the force-install setting

On the Configuration settings tab, click Add settings. Search for installed silently, then under Microsoft Edge > Extensions select Control which extensions are installed silently.

Step 3: Add Helperbird (Edge ID)

Enable the setting and add the Edge ID:

bkibfggdahioahpokehoiimdmdjefjmd

Helperbird is published on the Microsoft Edge Add-ons store, so the ID alone is enough — Edge resolves it from its own store. Click Next, assign the profile to your target groups, and create it.

Deploy to Google Chrome

Only needed if you also manage Chrome. Repeat the same flow with the Chrome values.

Step 1: Create a Settings catalog profile

Devices > Configuration > Create > New policy → Windows 10 and later → Settings catalog. Name it for Chrome.

Step 2: Add the force-install setting

Add settings, search for force-installed, then under Google Google Chrome > Extensions select Configure the list of force-installed apps and extensions.

Step 3: Add Helperbird (Chrome ID + update URL)

Enable the setting and add the Chrome ID with the Chrome Web Store update URL (Chrome-hosted extensions require it):

ahmapmilbkfamljbpgphfndeemhnajme;https://clients2.google.com/service/update2/crx

Assign to your groups and create.

Activate Helperbird Pro

Force-installing only installs Helperbird Free. To unlock Pro for everyone, push your enterprise subscription key as managed configuration (subKey + isAdminControl).

Chromium reads an extension's managed configuration from the Windows registry under the browser's 3rdparty\extensions\<extension-id>\policy key. Intune has no built-in setting for this, so deliver it with a Platform script.

Step 1: Add a platform script

Devices > Scripts and remediations > Platform scripts > Add > Windows 10 and later. Upload the script below with Run this script using the logged-on credentials = No (runs as system) and Run script in 64-bit PowerShell = Yes.

Step 2: Use this script

Replace YOUR-ENTERPRISE-SUBSCRIPTION-KEY with your actual key. The Edge block is first; keep the Chrome block only if you also manage Chrome.

$key = "YOUR-ENTERPRISE-SUBSCRIPTION-KEY"

# Microsoft Edge  (ID: bkibfggdahioahpokehoiimdmdjefjmd)
$edge = "HKLM:\Software\Policies\Microsoft\Edge\3rdparty\extensions\bkibfggdahioahpokehoiimdmdjefjmd\policy"
New-Item -Path $edge -Force | Out-Null
Set-ItemProperty -Path $edge -Name "subKey"         -Value $key -Type String
Set-ItemProperty -Path $edge -Name "isAdminControl" -Value 1    -Type DWord

# Google Chrome  (ID: ahmapmilbkfamljbpgphfndeemhnajme) — only if you also manage Chrome
$chrome = "HKLM:\Software\Policies\Google\Chrome\3rdparty\extensions\ahmapmilbkfamljbpgphfndeemhnajme\policy"
New-Item -Path $chrome -Force | Out-Null
Set-ItemProperty -Path $chrome -Name "subKey"         -Value $key -Type String
Set-ItemProperty -Path $chrome -Name "isAdminControl" -Value 1    -Type DWord

Notes:

• isAdminControl is the master switch — it must be 1 (true) or none of the admin-managed values (including subKey) take effect.
• Each value is a flat registry entry: strings as REG_SZ, booleans as REG_DWORD (1/0). There is no Value wrapper here — that wrapper is only for the Google Admin console's "Policy for extensions" field.
• Optional keys (same names as the JSON policy): floatingButton (DWORD), disableFeatures (DWORD) with disabledFeatures, excludedDomains (DWORD) with excludedDomainsList, enableTtsWordHighlight (DWORD), ttsWordHighlightColor (String).

Verify Deployment

Step 1: Sync the device

Make sure the device has synced with Intune. New policies can take up to 8 hours; force a sync from Settings > Accounts > Access work or school > Info > Sync.

Step 2: Check the browser policies

On the device, open edge://policy (or chrome://policy) and click Reload policies. You should see ExtensionInstallForcelist listing the Helperbird ID, plus the extension's managed values (subKey, isAdminControl) under its 3rd-party policies.

Helperbird appears in the extensions list marked "Installed by your organization", and Pro features are active.

Step 3: Test functionality

Click the Helperbird icon to confirm it opens and Pro features are unlocked.

Tip: If Pro isn't active, double-check that isAdminControl is 1 and the subscription key is valid. If the extension is missing, reload policies, restart the browser, or force another sync.

References

These steps are based on the official vendor documentation:

• Microsoft Intune – Settings catalog
• Microsoft Edge – Manage extensions with group policy (ExtensionInstallForcelist)
• Chromium – Configuring policy for extensions (3rdparty managed storage)
• Chrome Enterprise policy list – ExtensionInstallForcelist

Video Tutorial

Need Additional Help?

Having trouble with Intune deployment? Reach out to our Helperbird support team and we'll help you get set up!