FAQ for GCPW

Open all  |  Close all

Can I use other identity providers with Google Credential Provider for Windows (GCPW)?

No. Google Credential Provider for Windows supports only Google as the identity provider.

Can users sign in with GCPW when their devices are offline?

Yes. You can control how long users are allowed to sign in offline after their last online sign-in:

  • If you manage GCPW in the Admin console, go to the Offline access setting, select Enabled, and enter the number of days. Learn how
  • If you manage GCPW with registry keys, set the validity_period_in_days registry key with the number of days. Learn how
Can I require more frequent sign-ins than the default Windows session length?

Yes, if your Google Workspace supports it. You can set the GCPW session length in your Admin console with Google session control. Learn how

Note: The Google session control setting applies to GCPW as well as Google Workspace core services, such as Gmail on the web. You can't set different session lengths for different services. 

Can I enforce 2-Step Verification with GCPW?

Yes, but GCPW doesn't support USB security keys. However, if you enforce security keys, users can still sign in to their device with Android and iOS built-in security keys. You can also let users use other 2-Step Verification methods, such as Google prompt, Google Authenticator, or backup codes.

Can I turn off or delay automatic updates for GCPW?

Yes, you can turn off or delay automatic updates.

In the Admin console (recommended)

In your Admin console, you can turn off updates, but we recommend that you prevent updates after a specific version instead. This setup lets you test new releases in a test environment before your users get them, but keep the ease of automatic updates. Learn how

With Google Update and Group Policy

If you don’t manage GCPW settings in your Admin console and the devices are AD-domain joined, you can use the Group Policy Management Editor to enforce GCPW settings in Google Update. With this method, you can only allow or block updates, you can’t set an allowed latest version.

First, set up an administrative template to install and define policies for Google Update:

  1. Download and extract the administrative template XML-based (ADMX).
  2. Open the GoogleUpdateAdmx folder.
  3. Copy google.admx and GoogleUpdate.admx to your Policy Definitions folder, such as C:\Windows\PolicyDefinitions.
  4. In GoogleUpdateAdmx, open the locale-specific folder, such as en-US or es-ES, and copy the google.adml and GoogleUpdate.adml files to the corresponding locale folder in your Policy Definitions folder, such as C:\Windows\PolicyDefinitions\en-US.
  5. Open the Group Policy app.
  6. Go to Computer Configurationand thenPoliciesand thenAdministrative Templateand thenGoogleand thenGoogle Update and verify that the template loaded correctly.

Then, set the policy:

  1. In Group Policy, go to Computer Configurationand thenGoogleand thenGoogle Updateand thenApplicationsand thenGoogle Credential Provider for Windows (GCPW).
  2. Open Update policy override and enable it.
  3. Click Options and select Updates disabled

    Or, to enable updates, select Always Allow Updates (recommended).

More help


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false