StevieM Posted December 3, 2019 Posted December 3, 2019 I'm looking at deploying Google Chrome as the default browser on our new W10 image and, to save me reinventing the wheel, I was wondering if anyone had a GPO they have used to lock it down that they wouldn't mind sharing. Thanks
Jcx500 Posted December 3, 2019 Posted December 3, 2019 You can Download the enterprise bundle pack which includes the msi and the admx templates, we do it via registry keys here though
StevieM Posted December 3, 2019 Author Posted December 3, 2019 Thanks. I've already downloaded and installed the admx templates. I just wondered, as there are so many settings to trawl through, whether anyone had one I could look at, as least as a starting point.
CyberDrac Posted December 3, 2019 Posted December 3, 2019 Do you use GSuite for Education? If so then you can keep it simple by forcing logging into Chrome, restricting the domains they can login as to your own, and then the rest of the administration is in Google Admin
StevieM Posted December 3, 2019 Author Posted December 3, 2019 Thanks, but we're Office 365 here, not GSuite.
supportman Posted December 3, 2019 Posted December 3, 2019 [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Block access to a list of URLs[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD=colspan: 2][TABLE=class: subtable] [TR] [TH]Block access to a list of URLs[/TH] [/TR] [TR] [TD]chrome.google.com/webstore/[/TD] [/TR] [TR] [TD]file[/TD] [/TR] [TR] [TD]file://[/TD] [/TR] [TR] [TD]file:///c:/[/TD] [/TR] [TR] [TD]file:///[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Continue running background apps when Google Chrome is closed[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [TR] [TD]Enable Google Cloud Print proxy[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [TR] [TD]Enable submission of documents to Google Cloud Print[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [TR] [TD]Incognito mode availability[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Incognito mode availability[/TD] [TD]Incognito mode disabled[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Restrict which users are allowed to sign in to Google Chrome[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Restrict which users are allowed to sign in to Google Chrome[/TD] [TD]*@iamnotadomainiamadummy.stupid[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Set download directory[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Set download directory[/TD] [TD]U:\Downloads[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Show Home button on toolbar[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [/TABLE] Google/Google Chrome - Default Settings (users can override)/Home page [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Configure the home page URL[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Home page URL[/TD] [TD]https://school.sharepoint.com/SitePages/Home.aspx[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Use New Tab Page as homepage[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [/TABLE] Google/Google Chrome - Default Settings (users can override)/Startup pages [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Action on startup[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Action on startup[/TD] [TD]Open a list of URLs[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]URLs to open on startup[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD=colspan: 2][TABLE=class: subtable] [TR] [TH]URLs to open on startup[/TH] [/TR] [TR] [TD]https://school.sharepoint.com/SitePages/Home.aspx[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Google/Google Chrome/Content Settings [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Allow popups on these sites[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD=colspan: 2][TABLE=class: subtable] [TR] [TH]Allow popups on these sites[/TH] [/TR] [TR] [TD]http://www.mymaths.co.uk/[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Google/Google Chrome/Extensions [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Configure extension installation blacklist[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD=colspan: 2][TABLE=class: subtable] [TR] [TH]Extension IDs the user should be prevented from installing (or * for all)[/TH] [/TR] [TR] [TD]*[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Google/Google Chrome/Home page [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Configure the home page URL[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Home page URL[/TD] [TD]https://school.sharepoint.com/SitePages/Home.aspx[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Google/Google Chrome/Proxy server [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Choose how to specify proxy server settings[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Choose how to specify proxy server settings[/TD] [TD]Use system proxy settings[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Google/Google Chrome/Startup pages [TABLE=class: info3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Action on startup[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD]Action on startup[/TD] [TD]Open a list of URLs[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]URLs to open on startup[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD=colspan: 3][TABLE=class: subtable_frame] [TR] [TD=colspan: 2][TABLE=class: subtable] [TR] [TH]URLs to open on startup[/TH] [/TR] [TR] [TD]https://school.sharepoint.com/SitePages/Home.aspx[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] 2
StevieM Posted December 3, 2019 Author Posted December 3, 2019 @supportman - You, sir, are a gentleman of the highest order. That will save me so much time when I'm already up against the clock.
Jawloms Posted December 3, 2019 Posted December 3, 2019 Watch the one about blocking all extensions if you use Impero cos it'll block that one too! 1
mavhc Posted December 3, 2019 Posted December 3, 2019 I whitelist a set of extensions, impero, lastpass, ublock origin And restrict sign in to only the school domain. If you can't sign in you're missing half the greatness of Chrome. The main question is: Allow restore tabs on startup or not? a) it's great, but b) I just know people will end up with 100 tabs, because I do. I don't block Continue running background apps when Google Chrome is closed as that's every web app. 1
jhothersall Posted December 4, 2019 Posted December 4, 2019 (edited) I have setup a folder with managed bookmarks like this - This is in the Managed Bookmarks GPO Option - { "toplevel_name": "Shuttleworth College" } ,{ "name": "Office 365", "url": "login.microsoftonline.com" } ,{ "name": "School Website", "url": "shuttleworthcollege.org" } ,{ "name": "Show My Homework", "url": "showmyhomework.co.uk/calendar/school?all=true" } ,{ "name": "The Day", "url": "theday.co.uk" } ,{ "name": "Lexia Core 5 Reading", "url": "lexiacore5.com/" } ,{ "name": "Lexia Powerup", "url": "lexiapowerup.com" } ,{ "name": "Renaissance Learning", "url": "ukhosted80.renlearn.co.uk" } ,{ "name": "MicroLib", "url": "microlibrarian.net" } ,{ "name": "MathsWatch", "url": "vle.mathswatch.co.uk/vle/" } ,{ "name": "Maths Emporium", "url": "mathsemporium.com" } ,{ "name": "Maths Box", "url": "mathsbox.org.uk" } ,{ "name": "Tassomai", "url": "app.tassomai.com/login" } ,{ "name": "EDLounge", "url": "shuttleworth.edlounge.com" } ,{ "name": "MINTclass", "url": "sc.mintclass.com/login/" } ,{ "name": "SISRA Analytics", "url": "sisraanalytics.co.uk/Account/LogIn" } ,{ "name": "Testing for Schools", "url": "www.testingforschools.com/code" } ,{ "name": "Room Bookings", "url": "roombookingsystem.co.uk" } This is really useful to have links to certain websites on every computer ... Edited December 4, 2019 by jhothersall 2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now