New Intune Google Chrome Administrative Templates

Microsoft has added new Intune Google Chrome administrative templates for MEM admins to manage Google Chrome browser settings. Let’s see how to use Google Chrome Administrative Templates in Intune.

You can now manage Google Chrome settings from Intune Settings Catalog and Administrative Templates for Windows devices.

The Google administrative templates contain the settings for Google Chrome browser using which you manage the browser and its settings.

The Google Chrome settings will be added to Intune Settings catalog very soon. Earlier the admins could manage the Microsoft Edge browser in Intune with Administrative Templates and Intune Settings Catalog policy.

Starting in Intune Service release 2203, Google Chrome settings are included in the Settings Catalog and Intune Administrative Templates (ADMX). You can manage the Google Chrome browser and configure the settings using Administrative templates in Intune (Microsoft Endpoint Manager Admin Center).

Read: How to get ADMX Templates for Microsoft Edge Browser

List of Google Chrome Administrative Templates in Intune (MEM)

The below table lists some newly available Google Chrome Administrative Templates in Intune. You can use each of these Google Chrome Browser setting, configure it and deploy with Intune.

The administrative templates that contain the Google Chrome settings are applicable for both device and user.

Google Administrative Templates Setting NameStateSetting TypeTemplate Path
Abusive Experience Intervention EnforceNot configuredDevice/User\Google\Google Chrome
Action on startupNot configuredDevice/User\Google\Google Chrome\Startup
Add restrictions on managed accountsNot configuredDevice/User\Google\Google Chrome
Additional command line parameters for Google ChromeNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Address or URL of proxy serverNot ConfiguredDevice/User\Google\Google Chrome\Deprecated policies
Ads setting for sites with intrusive adsNot ConfiguredDevice/User\Google\Google Chrome
Allow access to a list of URLsNot ConfiguredDevice/User\Google\Google Chrome
Allow access to sensors on these sitesNot ConfiguredDevice/User\Google\Google Chrome\Content settings
Allow Basic authentication for HTTPNot ConfiguredDevice/User\Google\Google Chrome\HTTP authentication
Allow Chrome to block navigations toward external protocols in sandboxed iframesNot ConfiguredDevice/User\Google\Google Chrome
Allow collection of WebRTC event logs from Google servicesNot ConfiguredDevice/User\Google\Google Chrome
Allow cookies on these sitesNot ConfiguredDevice/User\Google\Google Chrome
Allow default search provider context menu search accessNot ConfiguredDevice/User\Google\Google Chrome – Default Settings (users can override)
Allow Desktop, Window, and Tab capture by these originsNot ConfiguredDevice/User\Google\Google Chrome\Allow or deny screen capture
Allow Dinosaur Easter Egg GameNot ConfiguredDevice/User\Google\Google Chrome
Allow download restrictionsNot ConfiguredDevice/User\Google\Google Chrome
Allow fullscreen modeNot ConfiguredDevice/User\Google\Google Chrome
Allow Google Cast to connect to Cast devices on all IP addressesNot ConfiguredDevice/User\Google\Google Chrome
Allow Google Chrome Frame to handle the listed content typesNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Allow sign in to Google ChromeNot ConfiguredDevice/User\Google\Google Chrome\Deprecated policies
Allow user cloud policies to override Chrome Browser Cloud Management policies.Not ConfiguredDevice/User\Google\Google Chrome
Always render the following URL patterns in Google Chrome FrameNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Block access to a list of URLsNot ConfiguredDevice/User\Google\Google Chrome
Continue running background apps when Google Chrome is closedNot ConfiguredDevice/User\Google\Google Chrome
Continue running background apps when Google Chrome is closedNot ConfiguredDevice/User\Google\Google Chrome – Default Settings (users can override)
Control how Chrome Cleanup reports data to GoogleNot ConfiguredDevice/User\Google\Google Chrome
Default HTML renderer for Google Chrome FrameNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Enable Chrome Cleanup on WindowsNot ConfiguredDevice/User\Google\Google Chrome
Enable chrome://sNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Enable component updates in Google ChromeNot ConfiguredDevice/User\Google\Google Chrome
Enable force sign in for Google ChromeNot ConfiguredDevice/User\Google\Google Chrome\Deprecated policies
Enable the creation of roaming copies for Google Chrome profile dataNot ConfiguredDevice/User\Google\Google Chrome
Google Chrome cloud policy overrides Platform policyNot ConfiguredDevice/User\Google\Google Chrome
Keep last tab open in ChromeNot ConfiguredDevice/User\Google\Google Chrome\Legacy Browser Support
Path to Chrome for switching from the alternative browserNot ConfiguredDevice/User\Google\Google Chrome\Legacy Browser Support
Restrict which Google accounts are allowed to be set as browser primary accounts in Google ChromeNot ConfiguredDevice/User\Google\Google Chrome
Set Google Chrome as Default BrowserNot ConfiguredDevice/User\Google\Google Chrome
Set Google Chrome Frame user data directoryNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Set limit on megabytes of memory a single Chrome instance can use.Not ConfiguredDevice/User\Google\Google Chrome
Show history clusters on the Chrome history pageNot ConfiguredDevice/User\Google\Google Chrome
Skip the meta tag check in Google Chrome FrameNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Suppress the Google Chrome Frame turndown promptNot ConfiguredDevice/User\Google\Google Chrome\Removed policies
Intune Google Chrome Administrative Templates

Manage Google Chrome Settings using Intune Administrative Templates

Let’s see how to manage Google Chrome Settings using Intune Administrative Templates.

Manage Google Chrome Settings using Intune Administrative Templates
Manage Google Chrome Settings using Intune Administrative Templates

On Create a profile window, specify the following details:

  • Platform: Windows 10 and later
  • Profile Type: Templates
  • Template Name: Administrative Templates

Click Create.

Manage Google Chrome Settings using Intune Administrative Templates
Manage Google Chrome Settings using Intune Administrative Templates

We will create a new Configuration Profile in Intune to manage Google Chrome settings using new Administrative Templates.

In the below example, we will look at blocking or disabling the Easter Egg game in Chrome. I could have picked any other policy, but this was a random choice.

The below example is to demonstrate how you can manage Google Chrome Settings using Intune Administrative Templates.

Enter the profile name as Block Dinosaur Easter Egg Game and you can add a brief description about this setting. Click Next.

Block Dinosaur Easter Egg Game - Intune Google Chrome Administrative Templates
Block Dinosaur Easter Egg Game – Intune Google Chrome Administrative Templates

On the Configuration Settings tab, use the search box to find the Dinosaur Easter Egg game and select the setting Allow Dinosaur Easter Egg Game setting.

Block Dinosaur Easter Egg Game - Intune Google Chrome Administrative Templates
Block Dinosaur Easter Egg Game – Intune Google Chrome Administrative Templates

Allow Dinosaur Easter Egg game – Setting the policy to True allows users to play the dinosaur game. Setting the policy to False means users can’t play the dinosaur Easter egg game when the device is offline.

Leaving the policy unset means users can’t play the game on enrolled Google Chrome OS, but can under other circumstances. This policy setting is made possible by the Chromium open-source project.

To disable or block Dinosaur Easter Egg game, select Disabled. Click OK.

Block Dinosaur Easter Egg Game - Intune Google Chrome Administrative Templates
Block Dinosaur Easter Egg Game – Intune Google Chrome Administrative Templates

Click Next to continue.

Block Dinosaur Easter Egg Game - Intune Google Chrome Administrative Templates
Block Dinosaur Easter Egg Game – Intune Google Chrome Administrative Templates

You may add the scope tags, but this is optional. Click Next.

Scope Tags | Intune Google Chrome Administrative Templates
Scope Tags | Intune Google Chrome Administrative Templates

On the Assignments tab, select the groups or users to whom you want to apply the Chrome browser settings. Click Next.

Policy Assignment Intune Google Chrome Settings
Policy Assignment Intune Google Chrome Settings

The Intune Google Chrome administrative templates that we configured is now active. The Intune settings catalog policy to block Dinosaur Easter egg game is created.

Manage Google Chrome Settings using Intune Administrative Templates
Manage Google Chrome Settings using Intune Administrative Templates

The Configuration Profile that you created in the above steps is now available under Devices > Configuration Profiles.

Once the devices check with Intune for the latest policy update, the Google Chrome browser settings are applied on the client computers.

To monitor the Chrome settings profile assignment status, go to Devices > Select the Configuration Profile and click the Overview tab. Here you can see on how many devices have the policy has been deployed successfully.

Conclusion

This article was an introduction to Intune Google Chrome administrative templates and how admins can manage Google Chrome settings using Intune administrative templates.

There are many other Chrome browser settings that you can manage with Intune using these administrative templates. In my upcoming articles, I will cover more about the Chrome browser management using Intune.

Leave a Comment