+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 27
Windows 7 Thread, users can download and install google chrome in Technical; I was wondering if anyone knows why users can download and install google chrome on our machines? For a start, ...
  1. #1
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,772
    Thank Post
    251
    Thanked 220 Times in 168 Posts
    Rep Power
    87

    users can download and install google chrome

    I was wondering if anyone knows why users can download and install google chrome on our machines?

    For a start, why is smoothwall allowing this through?

    I have found out that it is installing chrome to C:\users\{username}\appdata\google\chrome. Why would google allow this to happen?

    Does anyone have a way to stop this?
    Last edited by timbo343; 22nd March 2013 at 12:29 PM.

  2. #2

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,714
    Thank Post
    269
    Thanked 1,116 Times in 1,012 Posts
    Rep Power
    345
    It installs into the profile not onto the program files etc

    My old hack around it was to setup in the AV software to auto delete anything called chrome.exe

  3. Thanks to glennda from:

    timbo343 (22nd March 2013)

  4. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,686
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by timbo343 View Post
    I was wondering if anyone knows why users can download and install google chrome on our machines?

    For a start, why is smoothwall allowing this through?

    I have found out that it is installing chrome to C:\users\{username}\appdata\google\chrome. Why would google allow this to happen?

    Does anyone have a way to stop this?
    Google actually designed it this way to get around locked down accounts so that users could bypass the wishes of the business that they were emploied by. This I find massivly smarmy to start with. Almost worse is that because it sits in the profile and updates every 26 seconds it can end up using lots of bandwidth and expanding user profile size, users then start wineing that it is slow - their own fault etc.

    There is applocker or program restrictions that you can run through GPO which can prevent programs from running from certain locations or with certain names. This could be a goo way to stop the dirty thing.

  5. Thanks to SYNACK from:

    timbo343 (22nd March 2013)

  6. #4
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,772
    Thank Post
    251
    Thanked 220 Times in 168 Posts
    Rep Power
    87
    Hmm i like the idea of sticking chrome in the AV and delete it... good thinking.

  7. #5


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    338
    Quote Originally Posted by timbo343 View Post
    Hmm i like the idea of sticking chrome in the AV and delete it... good thinking.
    Why not just install it if your users want it?

  8. #6

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,714
    Thank Post
    269
    Thanked 1,116 Times in 1,012 Posts
    Rep Power
    345
    Quote Originally Posted by CyberNerd View Post
    Why not just install it if your users want it?
    I agree with this - technically as it uses IE proxy they shouldn't be able to change this and it shouldn't affect them although compatibility issues could be had.

  9. #7


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    338
    Quote Originally Posted by SYNACK View Post
    Google actually designed it this way to get around locked down accounts so that users could bypass the wishes of the business that they were emploied by.
    Allowing users to install stuff in /home/user is pretty standard practice on anything non-windows. It's not a conspiracy.

  10. #8
    maark's Avatar
    Join Date
    Feb 2006
    Location
    leicester
    Posts
    459
    Thank Post
    86
    Thanked 72 Times in 64 Posts
    Rep Power
    37
    download the msi from chrome - they also have adms you can download to control it in active directory - we give users chrome and internet explorer

  11. #9
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,772
    Thank Post
    251
    Thanked 220 Times in 168 Posts
    Rep Power
    87
    Quote Originally Posted by CyberNerd View Post
    Why not just install it if your users want it?
    Im not sure impero works with it? @russdev

    We tried blocking the internet with impero as a group and they could still access the net.

    I personally think they are looking at trying to get around our filtering. I have also blocked dl.google.com for users too.
    Last edited by timbo343; 22nd March 2013 at 12:54 PM.

  12. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,686
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by glennda View Post
    I agree with this - technically as it uses IE proxy they shouldn't be able to change this and it shouldn't affect them although compatibility issues could be had.
    We do for some individuals but it frankly is a pain compatibility wise, persists in its mental update cycle, tries to build in everything including the kitchen sink. Funny how to make the web browser the answer they have to copy and build in every single answer into it (PDF, Flash, new protocols). It also persists in trying to get you to sign it into google, there is a corporate version but from all accounts it is a pain to get it to push out without it choking over updates or similar.

  13. #11


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    338
    Quote Originally Posted by timbo343 View Post
    Im not sure impero works with it? @russdev

    We tried blocking the internet with impero as a group and they could still access the net.

    I personally think they are looking at trying to get around our filtering. I have also blocked dl.google.com for users too.
    You should block internet access at the network level - on the firewall - client based security isn't such a good plan.

  14. #12

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,539
    Thank Post
    830
    Thanked 609 Times in 412 Posts
    Rep Power
    432
    Software Restriction Policy -> New Hash Policy -> Chrome.exe ?

  15. #13

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,686
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by CyberNerd View Post
    Allowing users to install stuff in /home/user is pretty standard practice on anything non-windows. It's not a conspiracy.
    But it is against the way Windows was intended to handle such things, it behaves like malware and why should Windows be Linux. For the environment it is targeted at it is skirting the rules and the mere fact they targeted it to get around the wishes of the organsations that own the computers in the first place is a tad less than ethical.

  16. #14

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,686
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by Gatt View Post
    Software Restriction Policy -> New Hash Policy -> Chrome.exe ?
    Rename to MyCoolNotAWebBrowser.exe and run, done. Block the whole temp folder (for limited users), it is a security risk anyway as it is where half of the malware nests.

  17. #15
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,604
    Thank Post
    154
    Thanked 205 Times in 190 Posts
    Rep Power
    64
    Quote Originally Posted by CyberNerd View Post
    Why not just install it if your users want it?
    That's fine but with the managed MSI installer, ADMs and internal update source rather than hundreds (or thousands) of machines hammering the Internet connection for auto updates. Skype used to be another culprit of this.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. [iPad] Using Apple Configurator to lock down iPAD and only install Google Chrome
    By kennysarmy in forum Netbooks, PDA and Phones
    Replies: 6
    Last Post: 6th December 2012, 01:59 PM
  2. The difference between Download and Install....
    By elsiegee40 in forum General Chat
    Replies: 3
    Last Post: 19th May 2011, 08:04 PM
  3. Student installed google chrome!
    By mrbios in forum Windows 7
    Replies: 8
    Last Post: 18th May 2011, 06:34 PM
  4. Installing google chrome
    By fafster in forum How do you do....it?
    Replies: 5
    Last Post: 10th February 2010, 09:27 AM
  5. Can I just download and install SMART Board software 9.7
    By kennysarmy in forum Educational Software
    Replies: 2
    Last Post: 17th September 2009, 09:24 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •