Automation Anywhere 360 Browser Extension Access Issue in Windows 11 Machine.

Hi ​@Vatsy,

we are still on Windows 10 on VM’s.

No idea for now Sorry.🤔🤷

Cheers

Marc

No problem ​@Marc Mueller!

Thanks for your response.

Hi ​@Vatsy ,

Can you try this?

1. Extension Management Restrictions in Windows 11

Windows 11 has stricter security policies for managing browser extensions. Check if the extensions are forced via a policy by running the following command in Command Prompt (cmd):

For Microsoft Edge:

• reg query HKLM\Software\Policies\Microsoft\Edge\ExtensionInstallForcelist

For Google Chrome:

• reg query HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist

Note: the above are powershell queries.

If entries exist, it means extensions are controlled via Group Policy. You may need to remove the registry policies or update them via Group Policy (gpedit.msc)

2. Registry & Group Policy Validation

Your Infrastructure Team checked the Group Policies, but let’s verify Registry Settings to ensure the extension is properly installed.

Check Edge Extension Settings in Registry:

Get-ItemProperty -Path "HKLM:\Software\Policies\Microsoft\Edge"   -- run this PowerShell and look for entries like - ExtensionInstallForcelist, ExtensionAllowedTypes

Check Chrome Extension Settings in Registry: 

Get-ItemProperty -Path "HKLM:\Software\Policies\Google\Chrome" and ensure the extension is listed and allowed.

3. Ensure Proper Extension Installation

For Edge:

1. Go to edge://extensions
2. Find AA360 Extension
3. If you see "Managed by your organization", it means the extension is controlled by policies.

For Chrome:

1. Go to chrome://extensions
2. If Managed by your organization appears, check the registry or policy settings.

4. Fix Policy Conflicts for Extension Permissions

If you cannot edit the extension settings, the issue may be due to Windows 11’s stricter security policies. Try:

1. Check the Local Group Policy (gpedit.msc):

   • Navigate to: Computer Configuration → Administrative Templates → Microsoft Edge → Extensions
   • Ensure:
     • "Control which extensions are installed silently" is Enabled
     • "Allow users to modify extensions" is Enabled

2. For Chrome (gpedit.msc):

   • Go to: Computer Configuration → Administrative Templates → Google → Google Chrome → Extensions
   • Check if extension settings are locked by policies.

5. Check Browser Profiles & User Permissions

If the extensions are installed, but settings are locked, check: or If AA360 is installed for "All Users" instead of "Current User" or If you have Admin rights on the server or If the server enforces strict security settings for extensions

6. Reinstall AA360 Browser Extensions

If all else fails:

1. Uninstall AA360 extensions manually from edge://extensions and chrome://extensions
2. Reinstall AA360 browser extensions via the Automation Anywhere Control Room
3. Restart the browser and check if the issue persists.

Main reasons might be:

1. If policies are controlling the extension, IT may need to modify Group Policy (GPO) settings
2. If Windows 11 is blocking it, a registry fix may be required
3. Reinstalling the extension ensures no corrupt settings

Also, you can try below PS Script to check and fix registry issues automatically:

function Remove-ExtensionPolicies {
    param (
        [string]$browserRegPath, 
        [string]$policyKey
    )

    if (Test-Path $browserRegPath) {
        Write-Host "Checking registry policies for: $browserRegPath" -ForegroundColor Yellow
        $regValue = Get-ItemProperty -Path $browserRegPath -ErrorAction SilentlyContinue
        if ($regValue -ne $null) {
            Remove-Item -Path $browserRegPath -Recurse -Force
            Write-Host "Removed policy restrictions from: $browserRegPath"
        } else {
            Write-Host "No policy restrictions found at: $browserRegPath"
        }
    } else {
        Write-Host "No registry path found for: $browserRegPath"
    }
}

$EdgePolicyPath = "HKLM:\Software\Policies\Microsoft\Edge"
$ChromePolicyPath = "HKLM:\Software\Policies\Google\Chrome"

Remove-ExtensionPolicies -browserRegPath $EdgePolicyPath -policyKey "ExtensionInstallForcelist"

Remove-ExtensionPolicies -browserRegPath $ChromePolicyPath -policyKey "ExtensionInstallForcelist"

Write-Host "Restarting browsers to apply changes..."
Get-Process -Name "msedge" -ErrorAction SilentlyContinue | Stop-Process -Force
Get-Process -Name "chrome" -ErrorAction SilentlyContinue | Stop-Process -Force

Write-Host "Restart Edge/Chrome and check the extension settings." 

Good Luck! Let me know how it goes :) 

​@Vatsy Can you answer a few questions for me?
 

1. Are you able to install/uninstall any extension you want?

2. Do your W11 servers need to belong in any specific OU to operate as bot runners?  And if so, have you verified they were set up in those OUs?
3. Did you get to keep the old IDs to log in to these devices with, or are you on new IDs?  Do these IDs have the same access/permissions as the old IDs?

Hi ​@Matt.Stewart,

Glad to see your response.

Please find below my response to your questions,

1. Yes, except the AA360 extension

2. Yes, the new W11 servers need to be in a specific OU and yes they were set up in those OUs

3. We are using the same old IDs that we are still using in W10 servers as well with all the same settings.

​@Vatsy  I just tested this on my non-work laptop. I installed the Bot Agent and the Extension into Chrome. I was able to disable or enable the extension, and completely remove it.

What you’re probably facing is a policy within Chrome. Yes, there is a set of policies that are just for Chrome that aren’t a part of Microsoft’s regular GPO.

https://chromeenterprise.google/policies/

Hi ​@Vatsy, 

I wanted to share the steps to remove a Chrome extension manually from its local path on a Windows 11 machine:

1. Identify the Extension ID:

   • Open Chrome and go to chrome://extensions/.

   • Enable Developer Mode (top-right corner).

   • Copy the unique ID of the extension you wish to remove.

2. Navigate to the Extension Directory:

   • Open File Explorer by pressing Win + E.

   • Go to: C:\Users\<YourUsername>\AppData\Local\Google\Chrome\User Data\Default\Extensions.

   • Replace <YourUsername> with your actual Windows user name.

3. Delete the Extension Folder:

   • Locate the folder matching the noted extension ID.

   • Delete the folder.

4. Restart Chrome:

   • Close and reopen Chrome to ensure the extension has been removed.

Please proceed with caution, as this will permanently delete the extension files. Let me know if you need further assistance!