+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Student installed google chrome! in Technical; Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser ...
  1. #1
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,541
    Thank Post
    362
    Thanked 263 Times in 215 Posts
    Rep Power
    100

    Student installed google chrome!

    Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser is old and crap (basically, though they aren't exactly wrong) and it has links to chrome, firefox etc

    Student clicked on the chrome link which took him to google.com/chrome, he clicked install and it poped up asking him for admin permissions, he clicked no and the next thing you know chrome is running!

    Students have no rights what so ever to install things, yet this somehow worked, i've blocked google.com/chrome now but i thought i'd best let others know about this shoddy installer by google, not that it causes much of a problem because it still uses the same settings as IE but it's the principal of the thing!

    anyone come across this before? anything similar i should lookout for with other browsers?

  2. #2
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,016
    Thank Post
    199
    Thanked 148 Times in 105 Posts
    Rep Power
    38
    we had the same issue here
    google chrome installed without admin permissions.

    if google can get installed what about dodgy spyware etc

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,054
    Thank Post
    888
    Thanked 1,729 Times in 1,492 Posts
    Blog Entries
    12
    Rep Power
    454
    Block the students running .exe that will resolve it.

  4. #4


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126
    Quote Originally Posted by mrbios View Post
    Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser is old and crap (basically, though they aren't exactly wrong) and it has links to chrome, firefox etc

    Student clicked on the chrome link which took him to google.com/chrome, he clicked install and it poped up asking him for admin permissions, he clicked no and the next thing you know chrome is running!

    Students have no rights what so ever to install things, yet this somehow worked, i've blocked google.com/chrome now but i thought i'd best let others know about this shoddy installer by google, not that it causes much of a problem because it still uses the same settings as IE but it's the principal of the thing!

    anyone come across this before? anything similar i should lookout for with other browsers?
    Google Chrome installs into a user's profile.

    Depending on how you've got your profiles setup you might be able to recreate the Chrome target folder and then put some permissions on it to prevent students writing to it.

    Also Sophos has an option to block chrome, you can also add the download site to your filter list.

  5. Thanks to K.C.Leblanc from:

    eejit (18th May 2011)

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,225
    Thank Post
    874
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780
    Yeap, this is designed behaviour. It is so that Googles devotees can take the true Google path and drink the shimmering Kool-Aid even if their evil overloard employers for some reason want to have some form of control over their own computers. You'll have to block exes or take other measures to stop users implmenting their 'Google' given 'right' to do whatever they want to someone elses computers.

  7. #6
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,541
    Thank Post
    362
    Thanked 263 Times in 215 Posts
    Rep Power
    100
    Quote Originally Posted by K.C.Leblanc View Post
    Google Chrome installs into a user's profile.

    Depending on how you've got your profiles setup you might be able to recreate the Chrome target folder and then put some permissions on it to prevent students writing to it.

    Also Sophos has an option to block chrome, you can also add the download site to your filter list.
    Ah that'd explain why the only remains of the install i could find were in the all users folder (an icon file etc), we run mandatory profiles so the install is never stored permanently, quite annoying though.

    I'll look into the sophos route of blocking chrome, sounds like the easiest method for us.

  8. #7

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    Google Earth works the same way I think. Google are a colossal pain in the backside about this sort of thing, many of their product groups seem to have no respect for the "IT department" whether its in business or education; they simply see 'us' as a barrier to people using their products.

  9. #8

    Join Date
    Mar 2011
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Firefox also has this type of pivoting installer. I haven't worked with it yet, but I am told AppLocker takes care of this.

    http://tekjournal.wordpress.com/2010...moving-target/

    Applocker closes the hole… « Tekjournal

  10. #9

    Join Date
    May 2011
    Location
    Alexandria, VA
    Posts
    8
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I blocked Chrome using a combination of Software Restriction polices and Google Update for Enterprise ADM templates (link)

    I created Software Restriction rules to disallow the following:

    Code:
    %LocalAppData%\Google\Chrome\Application\*\Installer\setup.exe
    %LocalAppData%\Google\Chrome\Application\chrome.exe
    %LocalAppData%\Temp\CR_*.tmp\setup.exe
    C:\Documents and Settings\%username%\Local Settings\Application Data\Google\Chrome\Application\*\Installer\setup.exe
    C:\Documents and Settings\%username%\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\documents and settings\%username%\local settings\temp\cr_*.tmp\setup.exe
    chrome.exe
    chrome_installer.exe
    chromesetup.exe
    gears-chrome-opt.msi
    Not perfect solution as a savvy user can download the installer and rename it to circumvent the policy. I also created a 'Chrome Allowed' security and group which is denied access to this policy. This was because we had a small group of users doing web development that needed to have Chrome installed for testing purposes. Adding users to that group prevents the Software Restriction policy from being applied thus allowing Chrome to be installed/run.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 8th May 2011, 01:32 PM
  2. Replies: 0
    Last Post: 4th November 2010, 12:57 PM
  3. Replies: 0
    Last Post: 14th May 2010, 07:45 AM
  4. Google Chrome
    By Face-Man in forum General Chat
    Replies: 81
    Last Post: 29th December 2009, 05:43 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •