Google Chrome profile sync - automatically accept the prompts?

[timbo343]

Is there a way to automatically "Turn on sync" and agree to the "Your organisation will manage this policy" that users are shown when they sign into their Google account or via the browser, shown below in the images?

 

 

[Sephiroth]

I can't add anything helpful, other than to say that I haven't yet managed to achieve this. I can't say that I've tried too hard though.

 

Keeping an eye on this thread in case one of you lovely lot has the answer that we need!

[gszech]

I've had a look in Google Admin and can't find an option to force sync. It would be nice to get rid of the prompts. 

[TheHyperTechie]

Following... I know there was a setting you could apply to avoid the "Ad services pop up" that users would get. Unsure on this though, but as others have said - it would be useful. Maybe if enough of us submit this is as a feature idea, they will action it?

[NPostill]

Google? Give you the opportunity to bypass their Ad options/services hahahahahahaha

[dhicks]

Hmm: I wonder if one of the various Chrome automation / testing solutions would work? This is more of a quick guess / random thought than anything more useful.

[aydee]

Following cause im interested to hear if anyone has managed it too!

i'm also dreaming to think that there might be a way to skip the ad privacy menus too that appears every time you log into chrome? even designating a default selected option in the admin panel to just get it to go away!
 

[David44]

To disable and suppress 

1 hour ago, aydee said:

i'm also dreaming to think that there might be a way to skip the ad privacy menus too that appears every time you log into chrome? even designating a default selected option in the admin panel to just get it to go away!
 

 

Try setting all of these values to zero (or false). You will probably need to set these in the Windows registry rather than rely on Google to apply them from the cloud because the user may not actually be signed in to Chrome yet when the Ad privacy screens appear.

 

https://chromeenterprise.google/policies/#PrivacySandboxPromptEnabled

https://chromeenterprise.google/policies/#PrivacySandboxAdMeasurementEnabled

https://chromeenterprise.google/policies/#PrivacySandboxAdTopicsEnabled

https://chromeenterprise.google/policies/#PrivacySandboxSiteEnabledAdsEnabled

 

I am basing this on testing I did some time ago. We haven't actually implemented this here yet so I can't vouch for it other than to conform my tests were successful.

[aydee]

11 minutes ago, David44 said:

I am basing this on testing I did some time ago. We haven't actually implemented this here yet so I can't vouch for it other than to conform my tests were successful.

 

Thank you! Will give this a go on monday and update how it goes.

[timbo343]

26 minutes ago, David44 said:

To disable and suppress 

 

Try setting all of these values to zero (or false). You will probably need to set these in the Windows registry rather than rely on Google to apply them from the cloud because the user may not actually be signed in to Chrome yet when the Ad privacy screens appear.

 

https://chromeenterprise.google/policies/#PrivacySandboxPromptEnabled

https://chromeenterprise.google/policies/#PrivacySandboxAdMeasurementEnabled

https://chromeenterprise.google/policies/#PrivacySandboxAdTopicsEnabled

https://chromeenterprise.google/policies/#PrivacySandboxSiteEnabledAdsEnabled

 

I am basing this on testing I did some time ago. We haven't actually implemented this here yet so I can't vouch for it other than to conform my tests were successful.

I've tried it and got it working - the Privacy Sandbox is this: https://www.eff.org/deeplinks/2023/09/how-turn-googles-privacy-sandbox-ad-tracking-and-why-you-should

 

Someone else on Reddit has posted:

 

https://www.reddit.com/r/sysadmin/comments/15mhkym/comment/kos231l/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

 

I found this searching for a GPO to disable the new Chrome ad stuff machine wide, and this is the actual set of regkeys:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"PrivacySandboxPromptEnabled"=dword:00000000
"PrivacySandboxAdTopicsEnabled"=dword:00000000
"PrivacySandboxSiteEnabledAdsEnabled"=dword:00000000
"PrivacySandboxAdMeasurementEnabled"=dword:00000000

Hope it helps!

 

Seems to be working here.

[Alis_Klar]

Does this affect Chromebooks?

[timbo343]

17 hours ago, Alis_Klar said:

Does this affect Chromebooks?

 

There is a setting in Admin Google Workspace under Devices > Chrome > Settings then choose Users & Browsers. Search for "Sandbox" and you'll get the Privacy Sandbox optiins which can be turned off.

[MatthewL]

We've binned Chrome off, only use Edge.  Less of a security risk too.

[ZeroHour]

7 hours ago, MatthewL said:

We've binned Chrome off, only use Edge.  Less of a security risk too.

As much as I hate a 2 horse web browser engine it was a smart move by Microsoft switching to the chrome engine. Makes it a far more viable option and on the whole it works well ime.

[aydee]

Thanks @timbo343, works a treat here too!

[ZappBrannigan]

Thought I'd bounce this one rather than creating a new thread. We have Chrome starting "clean" - we'd already applied the Sandbox settings (as above) and everything was working great, students could sign in if they wanted to, but it wasn't forced.

However, we're now getting a new prompt for students, essentially confirming they wish to sign in, and asking if they wish to create seperate profiles. We've tried disabling "PromotionsEnabled" (which has replaced the deprecated "PromotionalTabsEnabled") but this makes no difference.

 

The only fix so far has been to disable sign-in completely, but we don't want to do that. Anyone managed to get around these?