Remove the extension from a client's computers

For technicians taking the Lemhi AI Usage extension off a client's computers. When you're done, the browser policy is gone and each browser has uninstalled the extension and deleted its local data.

The removal script deletes the forcelist entry and the 3rdparty\extensions\<id> key for both browsers. Nothing in it is per-client, so one copy works for every client.

Steps

1. Disable or delete the client's scheduled deploy job in your RMM. If it keeps running, it puts the extension back.

2. Create a new script in your RMM from the removal script below.

3. Run it as SYSTEM on the client's computers.

4. Each browser uninstalls the extension on its next start or policy refresh.

5. Run the read-only check from Check that a computer has the extension. Expect forcelist=False clientKeyLength=0 for both browsers. Removed computers stay listed in Engage and show Stopped reporting after 30 days without a check-in.

For Intune, remove the ids from the settings catalog profile (or delete the profile), remove the platform script assignment, then run this script once as a new platform script.

The removal script

# Lemhi browser extension: remove from Chrome and Edge. Writes registry policy only.
$Browsers = @(
  @{ Root = 'HKLM:\SOFTWARE\Policies\Google\Chrome';  Id = 'kkjkfiijligobjmfghkheppbpmbngicl' },
  @{ Root = 'HKLM:\SOFTWARE\Policies\Microsoft\Edge'; Id = 'kkijfgcaljdkipkaehbgkihkopbmigjm' }
)

foreach ($b in $Browsers) {
  $list = Join-Path $b.Root 'ExtensionInstallForcelist'
  if (Test-Path $list) {
    $entries = Get-ItemProperty -Path $list
    (Get-Item -Path $list).Property |
      Where-Object { (($entries.$_) -split ';')[0] -eq $b.Id } |
      ForEach-Object { Remove-ItemProperty -Path $list -Name $_ }
  }
  Remove-Item -Path (Join-Path $b.Root "3rdparty\extensions\$($b.Id)") -Recurse -Force -ErrorAction SilentlyContinue
}

Related

• Check that a computer has the extension

• How extension deployment works