Block file downloads in Chrome

[Stephen1]

Hi,

 

I've changed our ICT suite over to Chrome from IE and have got it setup exactly how I want, except Pupils are able to download files and there seems to be no setting in the Chrome ADMX/ADM files to prevent this. I've changed the download directory to a share they don't have access to, but all it does is then prompt them to select a save location.

 

I've also tried adding URLS to the blacklist setting, which I found elsewhere...something like http://*/*.exe but it hasn't worked.

 

So, can anybody help me prevent Chrome from downloading files, especially .exe and .msi

 

Thank you for any help.

[smithson83]

You should be able to use FSRM to block saving .exe, .msi etc to certain locations for certain user groups, in fact I would recommend it see Cryptolocker Prevention.

 

But I recently rolled chrome out and set %HOMESHARE%%HOMEPATH%\Downloads as the downloads destination and that prevented staff from downloading, albeit accidently.

[6Foot2]

Our Chrome download location is the same as Internet Explorer's location [Documents/Downloads] We have used FSRM to block access to EXE, and other 'undesirable' file types in Documents. Works well enough for us.

 

HTH.

[Stephen1]

Thanks for the help.

 

I haven't used FSRM before and it's pretty good, so thanks for that.

 

As I just wanted to control Chrome downloads in the ICT Suite for now, for 2 types of user (pupils and staff) I set the download directory in the pupil GPO to a designated, new share on the server and set the file screening to block .exe etc, so now when a pupil clicks a link to an .exe and so on, or tries to right click, save link as, it says in the Chrome download bar "Failed - Insufficient permissions" which is perfect. It doesn't prompt them to save elsewhere either, which is great.

 

For staff, I've just set their download directory in their GPO to another, new, designated share as I don't want them continually downloading to the local computer, downloads folder (and I couldn't find a way to prompt the user with a dialog box asking them where they wanted to save their file (within the GPO or work arounds), just like you can if you went into Chrome settings and ticked the box on a stand alone Chrome install!). Will probably change the default download directory in time to their home drive, but for now, it's fine, as staff will probably just load IE anyway, main one was the pupils!