+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, Student installed google chrome! in Technical; Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser ...
  1. #1
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,576
    Thank Post
    367
    Thanked 269 Times in 221 Posts
    Rep Power
    101

    Student installed google chrome!

    Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser is old and crap (basically, though they aren't exactly wrong) and it has links to chrome, firefox etc

    Student clicked on the chrome link which took him to google.com/chrome, he clicked install and it poped up asking him for admin permissions, he clicked no and the next thing you know chrome is running!

    Students have no rights what so ever to install things, yet this somehow worked, i've blocked google.com/chrome now but i thought i'd best let others know about this shoddy installer by google, not that it causes much of a problem because it still uses the same settings as IE but it's the principal of the thing!

    anyone come across this before? anything similar i should lookout for with other browsers?

  2. #2
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,031
    Thank Post
    202
    Thanked 153 Times in 110 Posts
    Rep Power
    40
    we had the same issue here
    google chrome installed without admin permissions.

    if google can get installed what about dodgy spyware etc

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,212
    Thank Post
    893
    Thanked 1,773 Times in 1,529 Posts
    Blog Entries
    12
    Rep Power
    461
    Block the students running .exe that will resolve it.

  4. #4


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 433 Times in 352 Posts
    Rep Power
    126
    Quote Originally Posted by mrbios View Post
    Some kids found a game site called canvasrider.com, if you access that site using IE8 it tells you your browser is old and crap (basically, though they aren't exactly wrong) and it has links to chrome, firefox etc

    Student clicked on the chrome link which took him to google.com/chrome, he clicked install and it poped up asking him for admin permissions, he clicked no and the next thing you know chrome is running!

    Students have no rights what so ever to install things, yet this somehow worked, i've blocked google.com/chrome now but i thought i'd best let others know about this shoddy installer by google, not that it causes much of a problem because it still uses the same settings as IE but it's the principal of the thing!

    anyone come across this before? anything similar i should lookout for with other browsers?
    Google Chrome installs into a user's profile.

    Depending on how you've got your profiles setup you might be able to recreate the Chrome target folder and then put some permissions on it to prevent students writing to it.

    Also Sophos has an option to block chrome, you can also add the download site to your filter list.

  5. Thanks to K.C.Leblanc from:

    eejit (18th May 2011)

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,239
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    Yeap, this is designed behaviour. It is so that Googles devotees can take the true Google path and drink the shimmering Kool-Aid even if their evil overloard employers for some reason want to have some form of control over their own computers. You'll have to block exes or take other measures to stop users implmenting their 'Google' given 'right' to do whatever they want to someone elses computers.

  7. #6
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,576
    Thank Post
    367
    Thanked 269 Times in 221 Posts
    Rep Power
    101
    Quote Originally Posted by K.C.Leblanc View Post
    Google Chrome installs into a user's profile.

    Depending on how you've got your profiles setup you might be able to recreate the Chrome target folder and then put some permissions on it to prevent students writing to it.

    Also Sophos has an option to block chrome, you can also add the download site to your filter list.
    Ah that'd explain why the only remains of the install i could find were in the all users folder (an icon file etc), we run mandatory profiles so the install is never stored permanently, quite annoying though.

    I'll look into the sophos route of blocking chrome, sounds like the easiest method for us.

  8. #7

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    Google Earth works the same way I think. Google are a colossal pain in the backside about this sort of thing, many of their product groups seem to have no respect for the "IT department" whether its in business or education; they simply see 'us' as a barrier to people using their products.

  9. #8

    Join Date
    Mar 2011
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Firefox also has this type of pivoting installer. I haven't worked with it yet, but I am told AppLocker takes care of this.

    http://tekjournal.wordpress.com/2010...moving-target/

    Applocker closes the hole… « Tekjournal

  10. #9

    Join Date
    May 2011
    Location
    Alexandria, VA
    Posts
    8
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I blocked Chrome using a combination of Software Restriction polices and Google Update for Enterprise ADM templates (link)

    I created Software Restriction rules to disallow the following:

    Code:
    %LocalAppData%\Google\Chrome\Application\*\Installer\setup.exe
    %LocalAppData%\Google\Chrome\Application\chrome.exe
    %LocalAppData%\Temp\CR_*.tmp\setup.exe
    C:\Documents and Settings\%username%\Local Settings\Application Data\Google\Chrome\Application\*\Installer\setup.exe
    C:\Documents and Settings\%username%\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\documents and settings\%username%\local settings\temp\cr_*.tmp\setup.exe
    chrome.exe
    chrome_installer.exe
    chromesetup.exe
    gears-chrome-opt.msi
    Not perfect solution as a savvy user can download the installer and rename it to circumvent the policy. I also created a 'Chrome Allowed' security and group which is denied access to this policy. This was because we had a small group of users doing web development that needed to have Chrome installed for testing purposes. Adding users to that group prevents the Software Restriction policy from being applied thus allowing Chrome to be installed/run.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 8th May 2011, 01:32 PM
  2. Replies: 0
    Last Post: 4th November 2010, 12:57 PM
  3. Replies: 0
    Last Post: 14th May 2010, 07:45 AM
  4. Google Chrome
    By Face-Man in forum General Chat
    Replies: 81
    Last Post: 29th December 2009, 05:43 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •