Locking Down Google Chrome

[wroberts]

Hi All,

 

We are going to be rolling out chrome to the school, we are looking for a method to disable the ability to go into the "Settings" panel within chrome

 

Any Ideas ?

 

Regards

 

Will

[TronXP]

Google provide a Group Policy object you can use to control what chrome does.

[wroberts]

Google provide a Group Policy object you can use to control what chrome does.

 

Hi TronXP, i have looked in the ADM policy file and was unable to find the option to do this ? Are you able to provide any more information ?

 

Cheers

 

Will

[Arthur]

If you add chrome to the Disable URL protocol schemes GPO, this will block the Settings page (in addition to everything else that is accessed via a chrome:// URL).

 

I don't block the Settings page for our students because it's easy enough to grey out the individual settings you do not want them changing by configuring them through Group Policy.

[jonnykewell1]

we do exactly that, it might be that you need to get to the settings just to see what is configured even if you can't actually change it as staff or students.

[wroberts]

If you add chrome to the Disable URL protocol schemes GPO, this will block the Settings page (in addition to everything else that is accessed via a chrome:// URL).

 

I don't block the Settings page for our students because it's easy enough to grey out the individual settings you do not want them changing by configuring them through Group Policy.

 

How would i go about blocking this URL via the GPO ?

 

Regards

 

Will

[Arthur]

How would I go about blocking this URL via the GPO?

It looks like Google have deprecated that setting now, so you would need to add chrome to the URLBlacklist policy instead.

 

Computer Configuration » Administrative Templates » Google » Google Chrome » Block access to a list of URLs » Enabled » click [b]Show[/b] » add [b]chrome[/b] to the list

 

If it has worked, you'll see the following message if you go to Settings after restarting Chrome.

 

http://i.imgur.com/calmqnE.png

[wroberts]

It looks like Google have deprecated that setting now, so you would need to add chrome to the URLBlacklist policy instead.

 

Computer Configuration » Administrative Templates » Google » Google Chrome » Block access to a list of URLs » Enabled » click [b]Show[/b] » add [b]chrome[/b] to the list

 

If it has worked, you'll see the following message if you go to Settings after restarting Chrome.

 

http://i.imgur.com/calmqnE.png

 

Cheers arthur ! However I dont seem to have that option in the adm pack I have any chance you have a copy of your adm package or could you export yours ?

[Arthur]

I don't seem to have that option in the adm pack I have

I am using the latest Chrome ADMX & ADML files from here since we have Windows 7 on our PCs.

 

There's also an .adm file in the zip file for older versions of Windows.

[wroberts]

I am using the latest Chrome ADMX & ADML files from here since we have Windows 7 on our PCs.

 

There's also an .adm file in the zip file for older versions of Windows.

 

I have added the selection as requested and it doesn't appear to work ! ?

[wroberts]

This is now working!

 

I had to add the following in to prevent settings from opening !

 

chrome://*

 

Thank you all for your Help !

[jehutyzzz]

@wroberts can you teach me step by step what you did in disabling chrome settings? thank you

[kennysarmy]

Our policy states:

 

Block access to a list of URLs

chrome://*

chrome://

chrome://settings/

 

But when the users try to print they get a website blocked message!

[skell]

Look at chrome://about

 

Thats a list of internal Chrome URL's

 

If you block them all, you'll also block chrome://print, which stops users being able to print.

[kennysarmy]

I've now just blocked these:

 

chrome://appcache-internals

chrome://accessibility

chrome://apps

chrome://blob-internals

chrome://cache

chrome://chrome

chrome://chrome-urls

chrome://components

chrome://conflicts

chrome://copresence

chrome://crashes

chrome://device-log

chrome://devices

chrome://discards

chrome://dns

chrome://extensions

chrome://flags

chrome://flash

chrome://gcm-internals

chrome://gpu

chrome://help

chrome://histograms

chrome://indexeddb-internals

chrome://inspect

chrome://invalidations

chrome://local-state

chrome://media-internals

chrome://memory

chrome://memory-internals

chrome://nacl

chrome://net-internals

chrome://omnibox

chrome://password-manager-internals

chrome://plugins

chrome://policy

chrome://predictors

chrome://profiler

chrome://quota-internals

chrome://serviceworker-internals/

chrome://settings

chrome://signin-internals

chrome://suggestions

chrome://sync-internals

chrome://system

chrome://terms/

chrome://thumbnails

chrome://tracing/

chrome://translate-internals

chrome://user-actions

chrome://version

chrome://view-http-cache

chrome://voicesearch

chrome://webrtc-internals

chrome://webrtc-logs

 

But it's blocked users getting to chrome://history !!!

[skell]

Have you still got the * one on?

[kennysarmy]

Have you still got the * one on?

 

No, I removed it.