Enterprise support

Visual Studio Code can be used as a development tool for enterprise teams of all sizes. As an IT admin, you can configure VS Code to achieve consistency and compatibility across your organization.

Network: Common hostnames

A handful of features within VS Code require network communication to work, such as the auto-update mechanism, querying and installing extensions, and telemetry. For these features to work properly in a proxy environment, you must have the product correctly configured.

Refer to the network common hostnames list for the required domains.

Configure allowed extensions

Configure the extensions.allowed application-wide setting in VS Code to control which extensions can be installed. If the setting is not configured, all extensions are allowed. If the setting is configured, all extensions not listed are blocked from installing. If you block an extension or version that is already installed, the extension is disabled.

To centrally manage allowed extensions for your organization, use device management like Windows group policies, to create a policy that overrides the VS Code setting on individual devices.

The extensions.allowed setting contains a list of extension selectors that determine which extensions are allowed or blocked. You can specify the following types of extension selectors:

• Allow or block all extensions from a publisher
• Allow or block specific extensions
• Allow specific extension versions
• Allow specific extension versions and platforms
• Allow only stable versions of an extension
• Allow only stable extension versions from a publisher

The following JSON snippet shows examples of the different extensions.allowed setting values:

"extensions.allowed": {
    // Allow all extensions from the 'microsoft' publisher. If the key does not have a '.', it means it is a publisher ID.
    "microsoft": true,

    // Allow all extensions from the 'github' publisher
    "github": true,

    // Allow prettier extension
    "esbenp.prettier-vscode": true,

    // Do not allow docker extension
    "ms-azuretools.vscode-docker": false,

    // Allow only version 3.0.0 of the eslint extension
    "dbaeumer.vscode-eslint": ["3.0.0"],

    // Allow multiple versions of the figma extension
    "figma.figma-vscode-extension": ["3.0.0", "4.2.3", "4.1.2"],

    // Allow version 5.0.0 of the rust extension on Windows and macOS
    "rust-lang.rust-analyzer": ["5.0.0@win32-x64", "5.0.0@darwin-x64"],

    // Allow only stable versions of the GitHub Pull Requests extension
    "github.vscode-pull-request-github": "stable",

    // Allow only stable versions from redhat publisher
    "redhat": "stable",
}

Specify publishers by their publisher ID. If a key does not have a period (.), it is considered a publisher ID. If a key has a period, it is considered an extension ID. The use of wildcards is currently not supported.

Version ranges are not supported. If you want to allow multiple versions of an extension, you must specify each version individually. To further restrict versions by platform, use the @ symbol to specify the platform. For example, "rust-lang.rust-analyzer": ["5.0.0@win32-x64", "5.0.0@darwin-x64"].

The more specific the selector, the higher the precedence. For example, "microsoft": true and "microsoft.cplusplus": false allows all Microsoft extensions, except for the C++ extension.

Duplicate key values are not supported. For example, including both "microsoft": true and "microsoft": false results in an invalid policy.

If you want to learn more about extensions in VS Code, refer to the extensions documentation.

Centrally manage allowed extensions

Use device management to centrally control which extensions are allowed to be installed in your organization. Configure the AllowedExtensions VS Code policy to override the corresponding extensions.allowed VS Code setting on users' devices. The value of this policy is a JSON string that contains the allowed extensions.

Configure automatic updates

The update.mode VS Code setting controls whether VS Code automatically updates when a new version is released. The updates are fetched from a Microsoft online service.

The setting has the following options:

• none - updates are disabled
• manual - automatic checking for updates is disabled, but users can manually check for updates
• start - only check for updates when VS Code starts, automatic checking for updates is disabled
• default - automatic checking for updates is enabled and runs in the background periodically

Centrally manage automatic updates

Use device management to centrally control how VS Code manages updates across devices in your organization. Configure the UpdateMode VS Code policy, which overrides the corresponding update.mode VS Code setting on users's devices. The value of this policy is a string that contains the update mode.

Configure telemetry level

The telemetry.telemetryLevel VS Code setting controls VS Code telemetry, first-party extension telemetry, and participating third-party extension telemetry. Some third party extensions might not respect this setting. Read more about the data we collect.

• all - sends usage data, errors, and crash reports
• error - sends general error telemetry and crash reports
• crash - sends OS level crash reports
• off - disables all product telemetry

Centrally manage telemetry level

Use device management to centrally control the telemetry level across devices in your organization. Configure the TelemetryLevel VS Code policy, which overrides the corresponding telemetry.telemetryLevel VS Code setting on user devices. The value of this policy is a string that contains the telemetry level.

Configure feedback mechanisms

The telemetry.feedback.enabled VS Code setting is a boolean value that controls whether feedback mechanisms, such as the issue reporter and surveys, are enabled.

Centrally manage feedback mechanisms

Use device management to centrally control the feedback mechanisms across devices in your organization. Configure the EnableFeedback VS Code policy, which overrides the corresponding telemetry.feedback.enabled VS Code setting on users's devices. The value of this policy is a boolean that indicates whether feedback mechanisms are enabled or disabled.

Device management

You can control specific features of VS Code through device management solutions to ensure it meets the needs of your organization.

VS Code currently supports the following admin-controlled features:

Group Policy on Windows

VS Code has support for Windows Registry-based Group Policy. Starting from VS Code version 1.69, each release ships with a policies directory containing ADMX template files that can be added to the following path: C:\Windows\PolicyDefinitions. Make sure to also copy the corresponding adml file to the C:\Windows\PolicyDefinitions\<your-locale> directory.

Once the policy definitions are installed, admins can use the Local Group Policy Editor to manage the policy values.

Policies can be set both at the Computer level and the User level. If both are set, Computer level will take precedence. When a policy value is set, the value overrides the VS Code setting value configured at any level (default, user, workspace, etc.).

Configuration profiles on macOS

Configuration profiles manage settings on macOS devices. A profile is an XML file with key/value pairs that correspond to available policy. These profiles can be deployed using Mobile Device Management (MDM) solutions, or installed manually.

Starting from VS Code version 1.99, each release ships with a sample .mobileconfig file. This file is located within the .app bundle under Contents/Resources/app/policies. Use a text editor to manually edit or remove policy to match your organization's requirements.

String policies

The example below demonstrates configuration of the AllowedExtensions policy. The policy value starts empty in the sample file (no extensions are allowed).

<key>AllowedExtensions</key>
<string></string>

Add the appropriate JSON string defining your policy between the <string> tags.

<key>AllowedExtensions</key>
<string>{"microsoft": true, "github": true}</string>

Other policies, like UpdateMode, accept a string from a set of predefined values.

<key>UpdateMode</key>
<string>start</string>

Boolean policies

Boolean policy values are represented with <true/> or <false/>.

<key>EnableFeedback</key>
<true/>

To omit a given policy, remove its key/value pair from the .mobileconfig file. For example, to not enforce an update mode policy, remove the UpdateMode key and the <string></string> tags that follow it.

Manually install a configuration profile by double-clicking on the .mobileconfig profile in Finder and then enabling it in System Preferences under General > Device Management. Removing the profile from System Preferences will remove the policies from VS Code.

For more information on configuration profiles, refer to Apple's documentation.

Additional policies

The goal is to promote current VS Code settings as policies and closely follow existing settings, so that the naming and behavior are consistent. If there are requests to enact more policies, please open an issue in the VS Code GitHub repository. The team will determine if there is already a corresponding setting for the behavior or if a new setting should be created to control the desired behavior.

Set up VS Code with preinstalled extensions

You can set up VS Code with a set of preinstalled extensions (bootstrap). This functionality is useful in cases where you prepare a machine image, virtual machine, or cloud workstation where VS Code is preinstalled and specific extensions are immediately available for users.

Follow these steps to bootstrap extensions:

1. Create a folder bootstrap\extensions in the VS Code installation directory.

2. Download the VSIX files for the extensions that you want to preinstall and place them in the bootstrap\extensions folder.

3. When a user launches VS Code for the first time, all extensions in the bootstrap\extensions folder are installed silently in the background.

Users can still uninstall extensions that were preinstalled. Restarting VS Code after uninstalling an extension will not reinstall the extension.

Frequently asked questions

Does VS Code support configuration profiles on Linux?

Support for Linux is not on the roadmap. If you're interested in configuration profiles on Linux, open an issue in the VS Code GitHub repository and share details about your scenario.