When users browse in incognito mode, Chrome bypasses extensions. You should disallow incognito mode for managed Google domains.
- In the Google Admin console, go to Devices > Chrome management > User & browser settings.
- On the left, select the organization that contains the desired users or enrolled browsers. To select all users and browsers, select the top-level organization. Otherwise, select a child.
- Under Security, set Incognito mode to Disallow incognito mode.
- Click Save.