Notification

Planning your return to office strategy? See how ChromeOS can help.

Legacy Browser Support (integrated) for Windows

2. Set policies

Chrome browser version 74 and later.

For administrators who manage Chrome browser on Windows for a business or school.

You can use the Google Admin Console or the Group Policy Management Editor to control integrated Legacy Browser Support (LBS) on managed Microsoft Windows computers.

Step 1: Add the Chrome browser policy template (Group Policy only)

You can use Group Policy to control LBS policies that are included in the chrome.admx file. When you load the file, each policy is active with a setting that can be modified at any time.

To add the policy template:

  1. Open the downloaded Chrome browser bundle and go to Configurationand thenadmx.
  2. Copy the google.admx and chrome.admx files to your Policy Definition template folder. (Example: C:\Windows\PolicyDefinitions)
  3. In the admx folder, open the appropriate language folder.
    For example, if you’re in the U.S., open the en-US folder.
  4. Copy the google.adml and chrome.adml files to the matching language folder in your Policy Definition folder. (Example: C:\Windows\PolicyDefinitions\en-US)
  5. Open Group Policy to confirm the files loaded correctly.
    If an error occurs, it’s usually because the files are in an incorrect location.
  6. Check the locations and confirm again.

Step 2: Review policies

Expand to see the full set of policies and descriptions.

Full set of policies and descriptions

 

Policy Description and settings

AlternativeBrowserParameters

Specifies the parameters to be passed to the alternative browser’s executable.

If this policy is turned on, the provided parameters are used when the alternative browser is invoked.

You can use the special placeholder ${url} to specify where the URL should appear in the command line.

You don't have to specify the placeholder if it's the only argument or if it should be appended to the end of the command line.

Unset: Only the URL is passed as a parameter to the alternative browser.

AlternativeBrowserPath

Specifies the program to be used as an alternative browser. You can specify a file location or use one of these variables:

  • ${ie}—Internet Explorer
  • ${edge}—Edge
  • ${chrome}—Chrome browser 
  • ${firefox}—Firefox
  • ${opera}—Opera
  • ${safari}—Safari

Unset: The default alternative browser is Internet Explorer, ${ie}.
BrowserSwitcherChromeParameters Specifies the parameters to be passed to Chrome browser’s executable. If this policy is turned on, the provided parameters are used when Chrome is invoked. 

You can use the special placeholder ${url} to specify where the URL should appear in the command line.

You don't have to specify the placeholder if it's the only argument or if it should be appended to the end of the command line.​

Unset: Only the URL is passed as a parameter to Chrome browser when returning from the alternative browser.
BrowserSwitcherChromePath

Specifies the executable of Chrome browser to be launched when returning from the alternative browser.

You can specify a file location or use the variable ${chrome}, which is the default installation location for Chrome browser.

Unset: The default installation of Chrome browser, ${chrome}, is used when returning from the alternative browser.

BrowserSwitcherDelay

 Specifies the length of time, in milliseconds, that it takes to open the alternative browser. During this time, users see an interstitial page that lets them know they're switching to another browser. If there are issues, users see an error message on the page.
 
Unset: The URL immediately opens in the alternative browser without showing the interstitial page.

BrowserSwitcherEnabled

Enables the Legacy Browser Support feature.

If this policy is turned on, users can open some URLs in an alternative browser, such as Internet Explorer.

If this policy is turned on, you must configure at least one of these policies:

Unset: Chrome browser will not open URLs in an alternative browser.
BrowserSwitcherExternalGreylistUrl

Specifies the URL of the XML file that contains the list of URLs that do not trigger a browser switch.

Unset: Chrome browser doesn’t use an XML file to control which URLs do not trigger a browser switch.

BrowserSwitcherExternalSitelistUrl

Specifies the URL of the XML file that contains the list of URLs that open in an alternative browser.

You can review this sample XML file.

Unset: Chrome browser doesn’t use an XML file to control whether URLs open in an alternative browser.

BrowserSwitcherKeepLastChromeTab

Specifies whether to close Chrome browser after the last tab in the window switches to the alternative browser.

Chrome browser tabs automatically close after switching to the alternative browser. If this policy is turned off and the last tab is open in the window before switching, Chrome browser closes completely.

Unset: After switching to the alternative browser, at least one tab stays open in Chrome browser.

BrowserSwitcherParsingMode

Controls how Chrome browser interprets the LBS sitelist and greylist policies that you set:

  • BrowserSwitcherUrlList
  • BrowserSwitcherUrlGreylist
  • BrowserSwitcherUseIeSitelist
  • BrowserSwitcherExternalSitelistUrl
  • BrowserSwitcherExternalGreylistUrl

If this policy is turned on, URL matching is more strict. Rules that do not contain / only match at the end of the hostname. They must also be at a domain name boundary. Matching the path component of a URL is not case-sensitive. This makes URL matching more compatible with Internet Explorer  and Edge.

Unset: URL matching is less strict.

BrowserSwitcherUrlGreylist

Specifies a list of website URLs that open in Chrome browser or an alternative browser and do not trigger a browser switch.

Unset: URLs open in Chrome browser, unless specified in BrowserSwitcherExternalSitelistUrl, BrowserSwitcherUrlList , or BrowserSwitcherUseIeSitelist.
BrowserSwitcherUrlList

Specifies a list of website URLs that open in an alternative browser.

Unset: No URLs are listed in the Chrome policy.
BrowserSwitcherUseIeSitelist

Use your Internet Explorer site list to control whether URLs open in Chrome browser or Internet Explorer.

Unset: Chrome doesn’t use the Internet Explorer site list.

Step 3: Configure LBS

Click below for the steps, based on how you want to manage these policies.

Admin console
Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Devicesand thenChromeand thenSettings. The User & browser settings page opens by default.

    If you signed up for Chrome Browser Cloud Management, go to Menu and then Chrome browserand thenSettings.

  3. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. Go to Legacy Browser Support.
  5. To open URLs in an alternative browser, such as Microsoft Internet Explorer:
    1. Click Legacy Browser Support.
    2. Select Enable Legacy Browser Support.
    3. Click Save.
  6. (Optional) To open specific URLs in an alternative browser:
    1. Click Websites to open in alternative browser.
    2. Enter the URLs of pages to open in an alternative browser.
    3. Click Save.
  7. (Optional) To use your Internet Explorer site list to specify which URLs open in Internet Explorer:
    1. Click Use Internet Explorer site list.
    2. Select Use Internet Explorer’s Sitelist policy as a source or rules.
    3. Click Save.
  8. (Optional) To use an XML file to specify which URLs open in an alternative browser:
    1. Click Legacy Browser Support site list.
    2. Enter the URL of the XML file.
    3. Click Save.
Windows

Applies to Windows users who sign in to a managed account on Chrome browser.

  1. Open Group Policy and go to Administrative Templatesand thenGoogleand thenGoogle Chrome.
  2. Turn on Enable the Legacy Browser Support feature.
  3. (Optional) To open specific URLs in an alternative browser:
    1. Turn on Websites to open in alternative browser.
    2. Under Options, specify the URLs of pages to open in an alternative browser.
  4. (Optional) To use your Internet Explorer site list to specify which URLs open in Internet Explorer, enable Use Internet Explorer's SiteList policy for Legacy Browser Support.
  5. (Optional) To use an XML file to specify which URLs open in an alternative browser:
    1. Enable URL of an XML file that contains URLs to load in an alternative browser.
    2. Under Options, specify the URL of the XML file.

Step 4: (Recommended) Enable Browser Helper Object

The first time that LBS switches browser and opens a URL from Internet Explorer back to Chrome browser again, users are prompted to enable the Browser Helper Object (BHO). As an admin, you can use Group Policy to automatically enable BHO so that users don’t have to manually enable it.

Applies to Windows users who sign in to a managed account on Chrome browser.

  1. Open Group Policy and go to Administrative Templatesand thenWindows Componentsand thenInternet Explorerand thenSecurity Featuresand thenAdd-on Management.
  2. If Add-on List isn’t already turned on, select Enabled.
  3. Under Options, click Show.
  4. For Value name, enter the Globally Unique Identifier (GUID), {08B5789A-BD8E-4DAE-85DF-EF792C658B86}. Include the brackets.
  5. For Value, enter 1. The add-on is enabled and users can’t change it.

Step 5: (Optional) Customize LBS

Click below for the steps, based on how you want to manage these policies.

Admin console
Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Devicesand thenChromeand thenSettings. The User & browser settings page opens by default.

    If you signed up for Chrome Browser Cloud Management, go to Menu and then Chrome browserand thenSettings.

  3. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. Go to Legacy Browser Support.
  5. (Optional) To specify which browser to use as an alternative:
    1. Click Alternative browser path.
    2. Enter the location of the browser’s executable file. Or, use one of these variables:
      • ${ie}—Internet Explorer
      • ${edge}—Edge
      • ${chrome}—Chrome browser
      • ${firefox}— Firefox
      • ${opera}—Opera
      • ${safari}—Safari
    3. Click Save.
  6. (Optional) To pass parameters to the alternative browser:
    1. Click Alternative browser parameters.
    2. Enter the parameters that you want to pass on to the alternative browser’s executable file.
    3. Click Save.
  7. (Optional, Windows only) Specify the Chrome browser file to use when returning from the alternative browser:
    1. Click Chrome path.
    2. Enter the location of the Chrome browser executable file. Or, use the variable ${chrome}.
    3. Click Save.
  8. (Optional, Windows only) To pass command line arguments to Chrome browser:
    1. Click Chrome parameters.
    2. Enter the parameters to pass on to the Chrome browser executable file.
    3. Click Save.
  9. (Optional) To allow URLs to open in either browser, such as a single sign-on (SSO) page:
    1. Click Websites to open in either browser.
    2. Enter the URLs that can open in both browsers and don't trigger a transition.
    3. Click Save.
  10. (Optional) To keep Chrome browser open after the last tab in the window switches to the alternative browser.
    1. Click Keep last Chrome tab.
    2. Select Keep at least one Chrome tab open.
    3. Click Save.
  11. (Optional) To use an XML file to specify which URLs do not trigger a browser switch:
    1. Click URL to list of websites to open in either browser.
    2. Enter the URL of the XML file.
    3. Click Save.
Windows

Applies to Windows users who sign in to a managed account on Chrome browser.

  1. Open Group Policy and go to Administrative Templatesand thenGoogleand thenGoogle Chrome.
  2. (Optional) To specify which browser to use as an alternative:
    1. Turn on Alternative browser to launch for configured websites.
    2. Choose an option:
      • Under Options, specify the location of the browser’s executable file.​
      • Use one of these variables:
        • ${ie}—Internet Explorer
        • ${edge}—Edge
        • ${chrome}—Chrome browser
        • ${firefox}—Firefox
        • ${opera}—Opera
        • ${safari}—Safari
  3. (Optional) To pass command line arguments to the alternative browser:
    1. Turn on Command-line parameters for the alternative browser.
    2. Under Options, specify the arguments to pass on to the alternative browser’s executable file.
  4. (Optional) To specify the Chrome browser file to use when returning from the alternative browser:
    1. Turn on Path to Chrome for switching from the alternative browser.
    2. Under Options, specify the location of the Chrome browser executable file. Or, use the variable ${chrome}.
  5. (Optional) To pass command line arguments to Chrome browser:
    1. Turn on Command-line parameters for switching from the alternative browser.
    2. Under Options, specify the arguments to pass on to the Chrome browser executable file.
  6. (Optional) To allow URLs open in either browser, such as a single sign-on (SSO) page:
    1. Turn on Websites that should never trigger a browser switch.
    2. Under Options, list the URLs that can open in both browsers and don't trigger a transition.
  7. (Optional) To use an XML file to specify which URLs do not trigger a browser switch:
    1. Enable URL of an XML file that contains URLs that should never trigger a browser switch.
    2. Under Options, specify the URL of the XML file.
  8. (Optional) To make URL matching more strict, enable Sitelist parsing mode. Set the policy to 1=More compatible with Microsoft IE/Edge enterprise mode sitelists.
  9. (Optional) To prevent Microsoft Edge redirection from interfering with LBS, set the Edge policy RedirectSitesFromInternetExplorerRedirectMode to 0.
    This prevents Edge from installing the IEToEdge add-on in Internet Explorer. This add-on tries to redirect the user from IE to Edge for some sites that are chosen by Microsoft. For details, see Microsoft's documentation for RedirectSitesFromInternetExplorerRedirectMode.

Step 6: Verify policies are applied

Check Chrome browser policies

After you apply any Chrome policies, users need to restart Chrome browser for the settings to take effect. Check users’ devices to make sure the policy was applied correctly.

  1. On a managed device, go to chrome://policy.
  2. Click Reload policies.
  3. Check the Show policies with no value set box.
  4. For the policies that you set, make sure that:
    1. The status is set to OK.
    2. The policy values match what you set in the policy.
Check LBS configuration

For Chrome 76 and later, you can check to see which browser opens specific URLs.

  1. On a managed device, go to chrome://browser-switch/internals.
  2. In the URL Checker box, enter the URL to see which browser opens it.
  3. Under Sitelist, review the list to see which URLs open in the alternative browser.
  4. Under Greylist, review the list to see which URLs open in either browser.

LBS Configuration Options

URL patterns

URL patterns described apply if BrowserSwitcherParsingMode policy is left unset or configured to 0=Default behavior for LBS.

There are three types of rules: hostname rules, prefix rules, and the wildcard rule. A rule of any type can be inverted by prepending a !.

  • Hostname rules: the rule does not contain a /
    • The specified string can be present anywhere in the hostname. For example, the rule acme matches http://foo.acme.com/
  • Prefix rules: the rule contains a /
    • These rules ignore port number. For example, the rule //example.com/ matches http://example.com:8000/
    • They do not match subdomains. For example, the rule //example.com/ does not match http://foo.example.com/
    • Some examples:
      • http://example.com/ (only HTTP)
      • //example.com/ (HTTP and HTTPS, and file://)
      • example.com/ (same as //example.com/)
      • example.com/something
  • Wildcard rule: * (matches everything)
    • * (changes the default: all URLs open in IE)
    • in combination with this, you can use other rules, such as:
      • *
      • !google.com
      • !yahoo.com
    • *.example.com is NOT a valid rule, you can only use a * by itself
  • Inverted rules: ! prefixed in front of a rule
    • Rules in the greylist cannot be negated (only the sitelist)
    • !google.com (all google.com URLs open in Chrome and NOT in the legacy browser)
    • !* (everything opens up in Chrome and NOT in the legacy browser; this effectively switches off LBS)

Important: If multiple rules match the same URL, then the longest rule is used to make the decision. Longest is determined by the rule's string length. This is particularly useful for negated rules.

The <open-in> tag

You can specify URL lists using an XML file, just like Enterprise Mode IE, and they can use either the v1 schema or the v2 schema.

Since Chrome 100, the BrowserSwitcherParsingMode policy affects how Google Chrome interprets an XML file.

BrowserSwitcherParsingMode policy left unset or configured to 0=Default Behavior for LBS

  • In v1 sitelists, the doNotTransition attribute means:
    • true: open in Google Chrome
    • Anything else or unspecified: open in the alternative browser

  • In v2 sitelists, the <open-in> tag means:

    • IE11: open in the alternative browser
    • None: open in Google Chrome
    • Unspecified: open in Google Chrome
    • Anything else: open in the alternative browser

BrowserSwitcherParsingMode policy configured to 1=More compatible with Microsoft IE or Edge enterprise mode sitelists

  • In v1 sitelists, the doNotTransition attribute means:
    • true: open in any browser
    • Anything else or unspecified: open in the alternative browser
  • In v2 sitelists, the <open-in> tag means:
    • IE11: open in the alternative browser
    • None: open in any browser
    • MSEdge: open in Google Chrome
    • Chrome: open in Google Chrome
    • Anything else or unspecified: open in any browser
Wildcards can be used in the Websites to open in either browser policy

Users can browse most of the Internet with the browser they prefer, while still opening certain URLs with the browser that you specify. Negative entries in the URL list specify the pages that open in Chrome browser. Positive entries specify the pages that open in the alternative browser.

In the example, all URLs that contain example.com open in an alternate browser and all URLs that contain google open in Chrome browser. URLs that don't contain example.com or google can open in either browser.

URLs to trigger transition:

  • !google
  • example.com

URLs not to trigger transition:

  • *
How LBS handles conflicting rules

Rules are evaluated by their order of precision. So, mail.yahoo.com will be guaranteed to be evaluated before !yahoo.com.

Support for mixed-case URLs

All URLs are subject to proper normalization. This means that domain names are lowercase, whereas paths are preserved as specified. So,EXAMPLE.COM is the same as example.com but example.com/somefile is not the same as example.com/SOMEFILE.

Prefixes should span at least to the end of the domain name

This means that http://www is assumed to mean http://www/ and will not match any domain starting with www. To match domains by their prefixes only, use a specification such as www.

Related topics

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?

Need more help?

Try these next steps:

Post to the help community Get answers from community members
true
Search
Clear search
Close search
Main menu
12199002861245882034
true
Search Help Center
true
true
true
true
true
410864
false
false