+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 27 of 27
Windows 7 Thread, users can download and install google chrome in Technical; Originally Posted by SYNACK But it is against the way Windows was intended to handle such things, it behaves like ...
  1. #16


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,033 Times in 813 Posts
    Rep Power
    341
    Quote Originally Posted by SYNACK View Post
    But it is against the way Windows was intended to handle such things, it behaves like malware and why should Windows be Linux. For the environment it is targeted at it is skirting the rules and the mere fact they targeted it to get around the wishes of the organsations that own the computers in the first place is a tad less than ethical.
    Its for home users. There's an MSI and group policy for organisations

    Quote Originally Posted by SYNACK View Post
    Block the whole temp folder (for limited users), it is a security risk anyway as it is where half of the malware nests.
    That would be against how windows is intended to handle things.

  2. #17

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,819
    Thank Post
    881
    Thanked 685 Times in 454 Posts
    Rep Power
    505
    Quote Originally Posted by SYNACK View Post
    Rename to MyCoolNotAWebBrowser.exe and run, done. Block the whole temp folder (for limited users), it is a security risk anyway as it is where half of the malware nests.

    Not with a hash policy - you can name it anything you want - but it wont change the hash value, so will still be blocked!

  3. #18

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by CyberNerd View Post
    That would be against how windows is intended to handle things.
    But nessisary for limited users when programs blatently abuse the privilage, just restoring the natural order and making sure that users don't stuff their profiles full of malware and cack then come complaining that they can't use CoolSmileyFaceBrowserX to do their rolls and complaining that their email has been hacked.

    If the goal is to have a standard working system that people can actually use to get their work done you want to exert at least some control. If you just want to provide your users with whatever baubels they can be tricked into installing then that is your perogative.

    Quote Originally Posted by Gatt View Post
    Not with a hash policy - you can name it anything you want - but it wont change the hash value, so will still be blocked!
    As above chrome updates every few days so the hash will change each time, you'll spend your whole life chasing file hashes for their latest capitilisation or logo change.
    Last edited by SYNACK; 22nd March 2013 at 02:08 PM.

  4. #19
    maark's Avatar
    Join Date
    Feb 2006
    Location
    leicester
    Posts
    488
    Thank Post
    92
    Thanked 78 Times in 69 Posts
    Rep Power
    39
    not had problem with updates - though it is supposed to update automatically.
    It does work with impero - on workstation settings on groups - take tick out of only filter internet explorer traffic.

  5. Thanks to maark from:

    timbo343 (22nd March 2013)

  6. #20

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,985
    Thank Post
    735
    Thanked 559 Times in 374 Posts
    Blog Entries
    3
    Rep Power
    206
    Quote Originally Posted by timbo343 View Post
    Im not sure impero works with it? @russdev

    We tried blocking the internet with impero as a group and they could still access the net.

    I personally think they are looking at trying to get around our filtering. I have also blocked dl.google.com for users too.
    Impero will work with chrome have to in group settings turn offf Filter Only Internet Explorer.

    Russ

  7. Thanks to russdev from:

    timbo343 (22nd March 2013)

  8. #21

    Join Date
    Feb 2013
    Posts
    6
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    What you can do is hire me or my company. http://www.nutechanswers.com/

  9. #22
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    355
    Thank Post
    5
    Thanked 38 Times in 33 Posts
    Rep Power
    25
    Setting the SRP to white list and allow things like %program files% and %windir% only, blocking everything else will do what you want. This will block anything in their profiles, flash drives, and temp folders. This way your not chasing a hash or wondering if the user renamed it.

    We are a Google apps school so chrome is recommended. I push out the MSI and use the adm files to set the homepage and block automatic updates.

    All these settings have worked well for me.

  10. #23
    ass17's Avatar
    Join Date
    Feb 2013
    Posts
    365
    Thank Post
    5
    Thanked 40 Times in 37 Posts
    Rep Power
    27
    We have installed the network MSI version, for everyone to use.

    Don't worry about it they can't use it to bypass any web filtering, as it uses IE proxy.

  11. #24
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    445
    Thank Post
    105
    Thanked 49 Times in 45 Posts
    Rep Power
    22
    We set up a software restriction policy to prevent any executable running from C:\Users\%USERNAME%\ so even if they do manage to install Chrome, they cannot run it.

    We do have the networked version already installed on our image with gpos controlling some parts of it, so I am not too sure why some of users try to download it again!

  12. #25

    Join Date
    Apr 2009
    Location
    Essex
    Posts
    40
    Thank Post
    3
    Thanked 6 Times in 3 Posts
    Rep Power
    13
    I dislike Google Chrome for this, I have been trying for a while to stop Students from installing other Browsers..

    I have added all the executables like Chrome.exe to the 'Don't run specified Applications' GPO.. This works most of the time unless they rename it..

    Now we have quick computers with Windows 7 and IE9 in the majority of the school, students don't bother as much to install 'quicker' browsers. Plus everything we have in school like OWA and Frog etc is designed to run on Internet Explorer so this puts them off too.

    It still really annoys me when they install any software that isn't something we put on and I don't want to install alternative browsers on the computers because it conflicts with IE and causes problems (I've tried).

    Grrr.

  13. #26

    Join Date
    May 2012
    Location
    USA
    Posts
    7
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    You guys are hardcore, who cares what browser they use? I for one love Chrome, far better and faster than IE. We have to run IE, Firefox and Chrome due to all the compatibility issues with websites these days. Some work better in IE some Chrome.. Google has a Chrome for business download and you can configure the master preferences file to make it do what you want.

  14. #27
    neilault's Avatar
    Join Date
    Apr 2008
    Location
    Newton Abbot
    Posts
    47
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0
    We don't currently install Google Chrome as it is not compatible with all sites (such as Frog VLE). Therefore to aid the calls to our office we'd rather not install it until FrogOS comes out.

    To stop the installation of Chrome Frame we use the Google Update GPO template, which I have attached:




SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. [iPad] Using Apple Configurator to lock down iPAD and only install Google Chrome
    By kennysarmy in forum Netbooks, PDA and Phones
    Replies: 6
    Last Post: 6th December 2012, 02:59 PM
  2. The difference between Download and Install....
    By elsiegee40 in forum General Chat
    Replies: 3
    Last Post: 19th May 2011, 09:04 PM
  3. Student installed google chrome!
    By mrbios in forum Windows 7
    Replies: 8
    Last Post: 18th May 2011, 07:34 PM
  4. Installing google chrome
    By fafster in forum How do you do....it?
    Replies: 5
    Last Post: 10th February 2010, 10:27 AM
  5. Can I just download and install SMART Board software 9.7
    By kennysarmy in forum Educational Software
    Replies: 2
    Last Post: 17th September 2009, 10:24 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •