Where is the Chrome MSI?

[fiza]

I need to deploy Chrome browser via Group Policy. I have followed Googles instructions and gone here https://www.google.com/chrome/browser/index.html?msi=true

 

but the download is an exe file which when run just installed Chrome to my machine instead of downloading the MSI for me to use.

 

Anyone any ideas where I can download the msi?

[linkazoid]

Here - https://www.google.co.uk/intl/en/chrome/business/browser/admin/

[fiza]

@linkazoid - cheers

[Arthur]

When deploying the MSI don't forget to set: NOGOOGLEUPDATEPING=1.

 

The latest Group Policy templates can be downloaded from here if you need them:

 

http://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip

[fiza]

When deploying the MSI don't forget to set: NOGOOGLEUPDATEPING=1.

 

 

If I deploy with Group Policy where would I put NOGOOGLEUPDATEPING=1 ?

[Arthur]

If I deploy with Group Policy where would I put NOGOOGLEUPDATEPING=1 ?

In an MST (which you can create with InstEd or Orca).

[fiza]

In an MST (which you can create with InstEd or Orca).

 

Thanks - running InstEd now and loaded the MSI into it. in which bit do I add the command?

[Arthur]

in which bit do I add the command?

1. Right-click GoogleChromeStandaloneEnterprise.msi, select 'InstEd It!'
   
2. Choose 'New Transform' from the Transform menu.
   
3. Enter a name for the MST like GoogleChromeStandaloneEnterprise.mst. Click Save.
   
4. Go to the Property table (on the left). Right-click in the empty space, select 'Add Row'.
   
5. In the Property box enter: NOGOOGLEUPDATEPING
   
6. In the Value box enter: 1
   
7. Save the MST (File > Save), then close InstEd.
   

[fiza]

1. Right-click GoogleChromeStandaloneEnterprise.msi, select 'InstEd It!'
   
2. Choose 'New Transform' from the Transform menu.
   
3. Enter a name for the MST like GoogleChromeStandaloneEnterprise.mst. Click Save.
   
4. Go to the Property table (on the left). Right-click in the empty space, select 'Add Row'.
   
5. In the Property box enter: NOGOOGLEUPDATEPING
   
6. In the Value box enter: 1
   
7. Save the MST (File > Save), then close InstEd.
   

 

Done all that and deployed again to test machine with mst applied. How can I tell if it has worked? When I am in chrome and go to "about Google Chrome" it still says "checking for updates" and then says "google chrome is up to date".

[Arthur]

If Chrome has installed successfully then there isn't anything else you need to do. The fact that it has installed means that it has worked.

 

What NOGOOGLEUPDATEPING=1 does it prevent the installer from checking for updates during the installation process (which often fails on PCs accessing the Internet through a proxy).

[localzuk]

That MST property only applies to the "during install" update checking.

[fiza]

If Chrome has installed successfully then there isn't anything else you need to do. The fact that it has installed means that it has worked.

 

What NOGOOGLEUPDATEPING=1 does it prevent the installer from checking for updates during the installation process (which often fails on PCs accessing the Internet through a proxy).

 

Thanks. Will it stop Chrome checking for new versions when users launch it? I want to control updates.

Edited September 16, 2014 by fiza

[localzuk]

Thanks. Will it stop Chrome checking for new versions when users launch it? I want to control updates.

 

No, you have to do that using the Group Policy templates for Chrome. I'd caution about controlling Chrome updates though - they update it pretty often!

Edited September 16, 2014 by localzuk

[fiza]

That MST property only applies to the "during install" update checking.

 

I see. I want to control when it updates (after install ) by deploying another MSI.

[localzuk]

You want the GPO stuff then - https://support.google.com/chrome/a/answer/187202?hl=en

[fiza]

ok then - time to wade through the GP templates!!

 

Any pointers on some good settings to lockdown Chrome for student use?

[Arthur]

Will it stop Chrome checking for new versions when users launch it? I want to control updates.

Nope. You can control Google Update through Group Policy. The ADM template for Google Update can be downloaded from here:

 

• http://dl.google.com/update2/enterprise/GoogleUpdate.adm
  
• https://support.google.com/installer/answer/146164?hl=en-GB#Configuring_the_Group_Policies
  

These are the settings I use (to ensure that Chrome is updated automatically).

 

 

I can post a list of the policies we set for students and staff a bit later if interested?

Edited September 16, 2014 by Arthur

[fiza]

 

I can post a list of the policies we set for students and staff a bit later if interested?

 

Yes that would be good. Thanks

[Asgard]

With my tinfoil hat on, has anyone read the NSA document on deploying Chrome in an Enterprise Environment....

 

https://www.nsa.gov/ia/_files/app/deploying_and_securing_google_chrome_in_a_windows_enterprise.pdf

[fiza]

@Arthur

Added the line and created the MST. Wont deploy "Fatal Error occurred". see this thread http://www.edugeek.net/forums/windows-server-2008-r2/142606-deploy-chrome-browser-via-gp-problem.html#post1223345

 

The line I added looks like the one in the attached photo.

 

Have I gone wrong somewhere?