You can create a separate group policy that deploys the extension that you're talking about in Group

You can create a separate group policy that deploys the extension that you're talking about in Group Policy Management.

Then you can link that policy only to the users that require the extension, eg. via an AD Security group or OU.

Tim