JAMF Deployment (macOS)

Deploy Sherlock to macOS devices managed with JAMF Pro. The extension installs silently into Chrome and enrolls automatically using managed preferences.

Tip: Sign in to the admin dashboard and refresh this page to see your enrollment key pre-filled.

Prerequisites

JAMF Pro with device management enabled

Google Chrome installed on target Macs

Your Enrollment Key from the Sherlock admin dashboard (Settings → General)

Step 1: Create a Configuration Profile

In JAMF Pro, go to Computers → Configuration Profiles → New
Name it Sherlock Extension
Set the level to Computer Level

Step 2: Add the force-install policy

In the profile, click Application & Custom Settings → Custom Schema
Set the preference domain to: com.google.Chrome
Add the following property list content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>ncibbcpcjhieaffkncaeemcfihlhkcdg;https://sherlocksuite.com/extension/extension-update.xml</string>
  </array>
</dict>
</plist>

Step 3: Add managed configuration (silent enrollment)

Add a second Custom Settings payload (or extend the same one) with the managed extension policy.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>3rdparty</key>
  <dict>
    <key>extensions</key>
    <dict>
      <key>ncibbcpcjhieaffkncaeemcfihlhkcdg</key>
      <dict>
        <key>enrollmentKey</key>
        <string>YOUR_ENROLLMENT_KEY</string>
        <key>userName</key>
        <string>$USER</string>
        <key>deviceName</key>
        <string>$HOSTNAME</string>
      </dict>
    </dict>
  </dict>
</dict>
</plist>

Replace YOUR_ENROLLMENT_KEY with the enrollment key from your admin dashboard.

What the variables do:

Variable

Purpose

$USER

Logged-in macOS username for billing and attribution

$HOSTNAME

Machine hostname for device identification

Step 4: Scope and deploy

Under the Scope tab, add the target computers or smart groups
Click Save
The profile pushes on the next JAMF check-in

Step 5: Verify

On the Mac: Open Chrome and go to chrome://policy. Confirm ExtensionInstallForcelist is present
On the Mac: Open chrome://extensions. Sherlock should show as Installed by enterprise policy
In the dashboard: Go to Devices. The Mac should appear within a few minutes

Edge on macOS

To deploy to Microsoft Edge on macOS instead of Chrome, use the preference domain com.microsoft.Edge and the same policy keys.

Incognito and Guest mode

To enable monitoring in Incognito, add the extension ID to the Incognito allow-list in your Chrome managed preferences. To prevent bypass via Guest mode, set BrowserGuestModeEnabled to false in your Chrome configuration profile.

Having issues? See the Troubleshooting page.

Which product are you working with?