Jump to content

New Google Chrome feature for Windows - Force users to sign in to the browser

Arthur
 Share

Recommended Posts

  • Popular Post
Arthur

Arthur

Posted
  • Popular Post
Posted

Just in case you didn't already know, there's a new feature in Chrome 64 that allows you to force users to sign into the browser on Windows PCs. It has taken Google almost five years to implement this. :)

 

https://support.google.com/chrome/a/answer/7572556

 

Force users to sign in to Chrome

Supported on Chrome 64 and later on Windows computers.

 

As an administrator, you can force users to sign in to a Chrome profile, with a Google Account, before they use Google Chrome on a Microsoft Windows computer. This ensures that the Chrome policies and settings that you set using the Admin console are applied on users’ computers. When a user opens Chrome on a Windows computer, they’re prompted to sign in immediately. If they sign out of Chrome, they’re redirected to the sign-in page. So, users can only use Chrome on a Windows computer when they’re signed in to their Chrome profile.

 

Before you begin

If you want to use group policy settings to control Chrome on users Windows computers, first you need to install the Chrome group policy template. Then, you can use the Group Policy Management Console to apply policies to users.

 

Apply policies to users

You can control which users can sign in to Chrome. You can also specify that certain users must sign in to Chrome before they use it.

 

After you configure policies, users must restart Chrome on their device for the settings to take effect.

 

You can use 2 policies:

 

RestrictSigninToPattern—Specifies which users can sign in to Chrome on Windows, Mac, and Linux devices. For example, you can prevent users from signing in using their Gmail account.

  • Specify *@yourdomain.com to only let users with an @yourdomain.com account sign in.
  • Specify [email protected] to only let a specific user, user-id, sign in.

ForceBrowserSignin—Forces users to sign in to Chrome on Windows computers.

  • For Windows group policy, turn on the Enables force sign in for Google Chrome policy.
  • For Windows registry, set ForceBrowserSignin to 0x00000001.

 

5FT7wu.png

  • Thanks 6
  • 1 month later...
Arthur

Arthur

Posted
  • Author
Posted
I have downloaded the latest templates dated 2nd Jan. Don't see this option.

It's showing up for me. :confused:

 

Computer Configuration > Google > Google Chrome > Enables force sign in for Google Chrome

  • 8 months later...
  • 4 weeks later...
Jaan

Jaan

Posted
Posted

This works for us, however it's causing confusion, as users seem to have to click the "add user" button and add another account, even though one exists called "you".

 

Anybody having issues with this?

  • 3 weeks later...
tj2419

tj2419

Posted
Posted

Has Chrome updated to force this by default? We hadn't changed any settings for this or installed the new adm. Users since Monday are now being prompted to sign in every time they open a new tab.

 

When looking at the GPO you just get Disable sign in, Enable sign in or force sign in. We don't want to prevent users signing in but we also don't want to force them at this stage.

 

Thanks

Arthur

Arthur

Posted
  • Author
Posted
Users since Monday are now being prompted to sign in every time they open a new tab.

Are you seeing the sign in page pictured in the first post or the one below?

 

ILDqyA.png

tj2419

tj2419

Posted
Posted
Are you seeing the sign in page pictured in the first post or the one below?

 

ILDqyA.png

 

It's the one in the image you have uploaded in this post.

  • 2 weeks later...
Arthur

Arthur

Posted
  • Author
Posted
Just tried preventing the welcome screen in chrome but the log in still appears when you make a new tab

Try deploying the Chrome first run and default preference files and then log on as a new user.

 

The PowerShell commands below will do this if you want to test it on one computer.

 

$ChromePrefs = '{"browser":{ "has_seen_welcome_page":true }}'
New-Item -Path "env:SystemDrive\Users\Default\AppData\Local\Google\Chrome\User Data\Default\Preferences" -Value "$ChromePrefs" -ItemType File -Force | Out-Null
New-Item -Path "env:SystemDrive\Users\Default\AppData\Local\Google\Chrome\User Data\First Run" -ItemType File -Force | Out-Null

 

Related thread: www.edugeek.net/forums/enterprise-software/178319-google-chrome-welcome-screen.html#post1572171

  • 1 month later...
Dexterp123

Dexterp123

Posted
Posted

Sorry to grave dig this, but hey.

 

I'm wanting to roll out RM Buzz, we have a mix of Chromebooks and Windows machines. The key to getting Windows machines covered is in forcing users to login, but there's something that just isn't working for me.I can login, but as soon as I log out the username/profile disappears.

 

We don't want students typing in their email addresses to sign in, so I was hoping that after one sign in, it would keep a user name in the same way as a Chromebook. This way they click on their name, type in a password, and done. Does anyone have any ideas on this?

  • 2 weeks later...
mjk

mjk

Posted
Posted

Question:

Suppose a site has ADFS and also uses Google SAML Single Sign on.

Can we use Windows Integrated Authentication so that when the user signs into a workstation the password is automatically passed through to ADFS and this intern logs them into the browser ?Has anyone done this?

 

Sounds like it 'might' be possible but would be interested if anyone has tried:

https://social.technet.microsoft.com/Forums/en-US/0886b8e4-3b46-48be-b00b-358e3327c548/windows-integrated-authentication-adfs-30-any-browser-windows-and-mac?forum=ADFS

  • 2 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...