This tutorial will use officially created Google OS X security templates and official Apple tools.  These tools were designed for network deployments of OS X.  Other than the complexity of the workaround, the process is not a hack or a patch or anything ultra-scary.

These instructions were designed using OS X 10.10 “Yosemite” and should be applicable up to and including OS X 10.11 “El Capitan”.  Depending on your version of OS X, your experience may differ slightly.  We also have a Windows version of this tutorial.

If you are using macOS 10.12 “Sierra”, macOS 10.13 “High Sierra”, or macOS 10.14 “Mojave”, please contact us – we may have a work-around for you.

If you need help with any of the following concepts, please consult a nerdy friend or your favorite search engine:

• Downloading and opening disk image or zip files
• Finding OS X applications that are not located on the Dock
• Giving OS X permission to install packaged software

1. Download the Apple Workgroup Manager.  It was found here.
• OS X 10.11 “El Capitan” should use above links
• OS X 10.10 “Yosemite” should use above links
• OS X 10.9 “Mavericks” should use above links
• OS X 10.8 “Mountain Lion” should use Workgroup Manager
• Mac OS X 10.7 “Lion” should use Server Admin Tools
• Mac OS X 10.6 “Snow Leopard” should use Server Admin Tools
2. Open the “WorkgroupManager10.9.dmg” disc image that you downloaded.
3. Depending on your OS X version...
• OS X 10.10 “Yosemite” and OS X 10.11 “El Capitan”: you will need to download Pacifist from CharlesSoft.  This is necessary to extract the Workgroup Manager from the install package.  Open “WorkgroupManager.pkg” with Pacifist and select the Install button from the toolbar.  Select whatever buttons are necessary to complete the installation.
• OS X 10.9 “Mavericks” and earlier: open the “WorkgroupManager.pkg” package found in the disc image.  Select whatever buttons are necessary to complete the installation.
4. Open the “Workgroup Manager” from the Applications folder.
5. Enter “localhost” as the Address, and login using an account with administrator priveleges.
   
   If you have run Workgroup Manager before, you can click on the padlock icon below the tabs to authenticate.
6. Select the OK button(s) to dismiss the message about the local configuration database.
7. Select the “Preferences” button from the toolbar, then select the “Details” tab.
8. Select your User Name from the list box on the left.
9. If Google Chrome isn’t in the list box on the right, click the + button and add it.
10. Select “Google Chrome” from the list box on the right.  Select the Pencil button below the list box.
11. Select the arrow next to “Always”, then select the entire “Always” line.
12. Select the New Key button.  You should now see a “New Item” entry.
13. Click on the “New Item” entry and scroll to the bottom of the menu list.  Select the “Edit” menu item.  Change the entry to “ExtensionInstallWhitelist”.  If it changes to “Ephemeral profile”, you can ignore this.  Make sure the “Type” is set to “array”.
    
    You should be able to ignore any CFUtil.cp errors you may see.
14. Select the arrow next to “ExtensionInstallWhitelist” / “Ephemeral profile”, then select the entire “ExtensionInstallWhitelist” / “Ephemeral profile” line.
15. Select the New Key button.  You should now see a new line starting with a number.
16. On the new numbered line, make sure the “Type” column is set to “string”.  Change the “value” to ojmgeoecaejeajjegjmijbcifhkbmgjd.
17. Select the Apply Now button, then select the Done button.  You can now quit “Workgroup Manager”.
18. You must now logout or reboot for the changes to take effect.  Afterwards, you can re-enable or install Options (Full Version) on your Chrome browser(s).