Skip to main content
Manage

Check that a computer has the extension

Confirm a deployment from the script's output, the client's Deployment tab in Engage, or the computer itself.

Written By The Lemhi Product Team

Last updated 10 days ago

For technicians confirming that the Lemhi AI Usage extension landed on a computer. Start with Engage. Only go to the computer when it isn't listed there.

1. In Engage (fastest)

  1. Open the client. In the left menu under Compass, open Shadow AI Usage, then the Deployment tab.

  2. Find the computer. The Checked in column shows its latest check-in, a few minutes after its browser starts with the policy in place.

  3. Open the Health tab. It shows one row per browser, with the extension version and Reporting / Stopped reporting.

If the computer is there, you're done.

2. The script's output

Open the run's output in your RMM. Each browser gets a line like Chrome: forcelist entry 3, key starts lemhi_dk_Ab1, computer FRONTDESK-01, ingest https://ingest.lemhi.ai, browser installed, then the extension, store and ingest checks.

What you see

What it means

Run failed (exit code 1)

The key isn't a valid Lemhi key, or a value didn't read back

"Extension not installed yet" on a first run

Expected until the browser restarts

"NOT reachable"

A web filter or proxy is in the way

3. On the computer

Restart the browser first. Policy is read at browser start.

Check

Where

Expect

Policy arrived (Chrome)

chrome://policy (click Reload policies)

ExtensionInstallForcelist lists kkjkfiijligobjmfghkheppbpmbngicl, status OK. Under the extension's id, clientKey, computerName and ingestBaseUrl with status OK

Policy arrived (Edge)

edge://policy

ExtensionInstallForcelist lists kkijfgcaljdkipkaehbgkihkopbmigjm, status OK. Edge doesn't show extension (3rdparty) values on this page, so check the registry instead

Installed

chrome://extensions, edge://extensions

Lemhi AI Usage extension listed, "Installed by your organization", no Remove button

Registry

regedit → HKLM\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\<id>\policy (and Microsoft\Edge\…)

The three values present

Read-only check from your RMM

This prints whether each value is present, and only the key's length, never the key.

foreach ($b in @(@{N='Chrome';R='HKLM:\SOFTWARE\Policies\Google\Chrome';Id='kkjkfiijligobjmfghkheppbpmbngicl'},
                 @{N='Edge';R='HKLM:\SOFTWARE\Policies\Microsoft\Edge';Id='kkijfgcaljdkipkaehbgkihkopbmigjm'})) {
  $fl = Get-ItemProperty -Path "$($b.R)\ExtensionInstallForcelist" -ErrorAction SilentlyContinue
  $inList = $fl -and ($fl.PSObject.Properties | Where-Object { $_.Name -match '^\d+$' -and ($_.Value -split ';')[0] -eq $b.Id })
  $p = Get-ItemProperty -Path "$($b.R)\3rdparty\extensions\$($b.Id)\policy" -ErrorAction SilentlyContinue
  "{0}: forcelist={1} clientKeyLength={2} computerName={3} ingestBaseUrl={4}" -f $b.N, [bool]$inList, ($p.clientKey).Length, $p.computerName, $p.ingestBaseUrl
}

Was this helpful?

Still need help? Ask the team