You've set up your infrastructure to provide the most productive work environment possible for your users. You adhered to company management and IT policies and created a system to control access to the Internet for the company's and user's protection. Then you discover someone found a way to bypass those controls. Welcome to today's world in IT administration. Managing your users is not too different from parenting your children. They are going to test the boundaries. If they can, they will.
I recently had been tasked with preventing users from installing and running Google Chrome. This company had an extensive Group Policy system in place to control how users are able to access the web via Internet Explorer. Whether or not it was because an astute user discovered they could bypass those controls using Google Chrome, or it was just 'automagically installed', it was against the company's IT security policy. These users do not have local administrator permissions on their machines, but alas, that is not necessary to install Chrome. Standard users can install it. Google Chrome installs to the user profile, in the AppDataLocal folder rather than the Program Files folder. Users have full administrative rights to their profiles folder, so therein lies the problem for us hall monitors. This is where Group Policy Software Restriction Policies come to the rescue to block Google Chrome from installing and running.
How to configure the policy to block installation of Google Chrome.
Dec 03, 2020 Download Google Chrome (64-bit) for Windows to explore the Web using Google's super-efficient, personalized, synced, and secured browser. Google Chrome (64-bit) has had 19 updates within the past. The process for creating the test case for Chrome is very similar to that of Firefox. Google no https. Basically, we use the NuGet manager to install the Chrome.Webdriver, and then we add a new test case. Here are the steps for installing the Chrome.Webdriver. Right-click on the project (or the solution) Select ‘Manage NuGet Packages for Solution'. Nov 04, 2017 Tech support scams are an industry-wide issue where scammers trick you into paying for unnecessary technical support services. You can help protect yourself from scammers by verifying that the contact is a Microsoft Agent or Microsoft Employee and that the phone number is an official Microsoft global customer service number. Among the first things we usually want to do right after we've installed a brand-new Windows Server is to also install Google Chrome. Doing that won't always be easy, though, because Internet Explorer Enhanced Security – which is activated by default in Windows Server – won't allow to download the required setup package.
- Edit or create a new GPO contain the settings to disable Chrome.
- Navigate to User Configuration -> Windows Settings -> Security Settings
- Right-click Software Restriction Policies, and select New Software Restriction Policies.
- Right-click Additional Rules, and choose New Path Rule
- In the Path field, type exe.
- Select Disallowed in the Security level drop down menu, and click OK to save the rule.
- Add the following rules by repeating steps 4-6:
- Chrome.exe
- Gears-Chrome-Opt.msi
- Chrome_Installer.exe
- GoogleUpdate
- C:Program FilesGoogleChromeApplication
- C:Program Files (x86)GoogleChromeApplication
- C:Users%username%AppDataLocalGoogleChromeApplicationChrome.exe
- When complete, this is how the Additional Rules in your Software Restriction Policy should look:
- Link the GPO to the domain, or for more refined restriction, to a specific OU.
- If you should need to also block Mozilla Firefox, you'll need to create 2 rules with these Paths:
- Firefox exe
- Firefox Setup*.exe
Installation of Google Chrome will now be disabled, and users will receive a notification that their system administrator has blocked the program. But now what do you do for admins or web designers who have permission to run Chrome, or other web browsers – for testing or whatever the need may be? Fortunately, you can control how Group Policies are applied by filtering the scope of the Group Policy Object. I need to point out that this process should be performed using group membership rather than individuals to simplify administrative overhead of keeping the filtering up to date. The following steps contain additional configuration for allowing Chrome access for specific groups.
How to allow Chrome access for specific groups.
- To exempt a group from being blocked, for example, Domain Admins, delegate permissions.
- In the GPO, on the Delegation tab, click on the Advanced
- Select the target group in the top window, and scroll down to Apply group policy in the bottom window, and check the box under Deny. Click OK.
- In the example above, I also created an AD security group, Google Chrome Block Exception, and added it by clicking the Add button. Then, I denied the policy from applying by checking the box. This group allows us to add members who need to use Chrome, but we don't have to make them a Domain Admin.
You have now disabled Google Chrome for all users that are not specifically allowed access to it. At the end of the day, it's just another tool we system admins have in our arsenal to combat the introduction of unauthorized applications into our network. That could compromise the security and productivity we've implemented in our network, which might make the end of the day come much later.
Donny Hilbern is a network and systems consultant specializing in analyzing, designing, and implementing network and enterprise systems. Donny has been working in the IT field for over 25 years, with nearly 20 years of that time invested in network and system administration and infrastructure technology. He has experienced a number of undocumented or lightly documented issues during that time. His desire is to leverage that experience in sharing about some of those issues and how they were resolved to make IT work for his clients.
The web browser is arguably the most important piece of software on your computer. You spend much of your time online inside a browser: when you search, chat, email, shop, bank, read the news, and watch videos online, you often do all this using a browser.
Google Chrome is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Use one box for everything--type in the address bar and get suggestions for both search and Web pages. Thumbnails of your top sites let you access your favorite pages instantly with lightning speed from any new tab. Desktop shortcuts allow you to launch your favorite Web apps straight from your desktop. Chrome has many useful features built in, including automatic full-page translation and access to thousands of apps, extensions, and themes from the Chrome Web Store.
Google Chrome is one of the best solutions for Internet browsing giving you high level of security, speed and great features.
Important to know! The offline installer links do not include the automatic update feature.
Download web installer: Google Chrome Web 32-bit | Google Chrome 64-bit | Freeware
Download: Google Chrome Offline Installer 32-bit | 46.9 MB
Download: Google Chrome Offline Installer 64-bit | 47.3 MB
Download: Google Chrome MSI Installers for Windows
View: Chrome Website | v67.0.3396.99 Release Notes
Chrome 2017 Version
Chrome Download 2017 Setup
NOTE: An updated version of Chrome is now available. Please check the following link:
Get alerted to all of our Software updates on Twitter at @NeowinSoftware
