how to chrome?

[chazzy2501]

I may be forced to go chrome in the future

 

How to chrome: how do you deploy, auto update (every week) without admin, group policy, FILTERING using SSL interception with RM filtering if you can't spoof google certs.

[Boredguy]

Well with Edge moving over to Chromium as well it's not that much of an issue.

We deploy Chrome via SCCM and it auto-updates as and when it decides.

RM SSL certificate is deployed via GPO exactly the same way as normal for IE and works fine.

 

There is group policy admx files available to lock down Chrome

[6Foot2]

This thread started by @Arthur should help:

 

Link: http://www.edugeek.net/forums/internet-related-filtering-firewall/191496-new-google-chrome-feature-windows-force-users-sign-browser.html

[chazzy2501]

so if a pupil wants they can search for "unlimited boobs" in chrome / google? I assume I can turn off the chrome store as well as configuration options in the GPOs? So the updates don't require administrator elevation or you push them via SCCM

[Boredguy]

Nope they can't find unlimited boobs as the web filter still catches it, as the certificate is machine level not browser.

[DalekSec]

Deployed via SCCM,

Kept up to date via software we use called Heimdal (it always keeps other software updates along with protecting against malware etc.)

Group Policy is limited (try to have as little GP as possible for obvious reasons) simple things like stopping the remember password box pop-up

 

Chrome does have a lot of GP config you can tie to it

[chazzy2501]

All my pupils would have to create a google account for policies to work in chrome? That's stupid.

[Boredguy]

You don't need a google account for the policies to be applied.

 

We've been running Chrome with ADMX files for several years now with no issues. In fact students are *unable* to sign into Google as we have that disabled via gpo

[DJ-1701]

Nope they can't find unlimited boobs...

 

But they may find 1 or 2 in certain departments...

[Katy]

All my pupils would have to create a google account for policies to work in chrome? That's stupid.

No - most of the policies apply whether someone is signed into chrome or not. All we did on ours was lock a few of the settings pages off, things like Proxy Settings it just uses the Internet Explorer/Windows built in screen so that was already restricted through group policy anyway.

[DalekSec]

I'm surprised you don't have chrome installed already, i thought it was a default along with Office and the like nowadays. Always useful having more than one browser on PCs. For combatability (not even spell check can help dyslexics) problems etc.

[chazzy2501]

I've resisted chrome for years. I don't want 3rdparty programs infesting my PCs with weird problems. I lament that I still need adobe pdf reader as the built in option still isn't good enough. All other 3rd party programs are ancient and have no updates (but are not online). Office obviously get updates through wsus and doesn't require elevation. Having a 3rd party browser and a 3rd party updater just seems like inviting a whole new specrum of issues. manually pushing an msi (if you can get an msi) every month sounds like a pain.

[DalekSec]

Well the 3rd party updater isn't just an updater. It's firstly anti-malware and has been extremely useful at spotting things that Defender doesn't pick up. https://heimdalsecurity.com/en/

[atcoates]

I've resisted chrome for years. I don't want 3rdparty programs infesting my PCs with weird problems. I lament that I still need adobe pdf reader as the built in option still isn't good enough. All other 3rd party programs are ancient and have no updates (but are not online). Office obviously get updates through wsus and doesn't require elevation. Having a 3rd party browser and a 3rd party updater just seems like inviting a whole new specrum of issues. manually pushing an msi (if you can get an msi) every month sounds like a pain.

Chrome is really easy to deploy you just put it out and let it take care of itself. I've got it at 9 sites and it's never really given us any hassle. Most people over the years have just naturally switched to Chrome as it just works.

[Primus]

I've resisted chrome for years. I don't want 3rdparty programs infesting my PCs with weird problems. I lament that I still need adobe pdf reader as the built in option still isn't good enough. All other 3rd party programs are ancient and have no updates (but are not online). Office obviously get updates through wsus and doesn't require elevation. Having a 3rd party browser and a 3rd party updater just seems like inviting a whole new specrum of issues. manually pushing an msi (if you can get an msi) every month sounds like a pain.

 

Is this a spoof?!

[Katy]

If you search for chrome enterprise there's a silent install MSI available, and not quite sure how the auto update works but it does, and without admin rights (presumably it's got a service running as system which it uses)