FAQ for GCPW

Open all  |  Close all

Can I use other identity providers with Google Credential Provider for Windows (GCPW)?

No. Google Credential Provider for Windows supports only Google as the identity provider.

Can users sign in with GCPW when their devices are offline?

Yes. You can control how long users are allowed to sign in offline after their last online sign-in:

• If you manage GCPW in the Admin console, go to the Offline access setting, select Enabled, and enter the number of days. Learn how
• If you manage GCPW with registry keys, set the validity_period_in_days registry key with the number of days. Learn how

Can I require more frequent sign-ins than the default Windows session length?

Yes, if your Google Workspace supports it. You can set the GCPW session length in your Admin console with Google session control. Learn how

Note: The Google session control setting applies to GCPW as well as Google Workspace core services, such as Gmail on the web. You can't set different session lengths for different services. 

Can I enforce 2-Step Verification with GCPW?

Yes, but GCPW does not support USB security keys. GCPW supports other 2-Step Verification methods, such as Google prompt, Google Authenticator, and backup codes.

Can I turn off or delay automatic updates for GCPW?

Yes, you can turn off or delay automatic updates.

In the Admin console (recommended)

In your Admin console, you can turn off updates, but we recommend that you prevent updates after a specific version instead. This setup lets you test new releases in a test environment before your users get them, but keeps the ease of automatic updates. Learn how

With Google Update and Group Policy

If you don’t manage GCPW settings in your Admin console and the devices are AD-domain joined, you can use the Group Policy Management Editor to enforce GCPW settings in Google Update. With this method, you can only allow or block updates. You can’t set an allowed latest version.

First, set up an administrative template to install and define policies for Google Update:

1. Download and extract the administrative template XML-based (ADMX).
2. Open the GoogleUpdateAdmx folder.
3. Copy google.admx and GoogleUpdate.admx to your Policy Definitions folder, such as C:\Windows\PolicyDefinitions.
4. In GoogleUpdateAdmx, open the locale-specific folder, such as en-US or es-ES, and copy the google.adml and GoogleUpdate.adml files to the corresponding locale folder in your Policy Definitions folder, such as C:\Windows\PolicyDefinitions\en-US.
5. Open the Group Policy app.
6. Go to Computer ConfigurationPoliciesAdministrative TemplateGoogleGoogle Update and verify that the template loaded correctly.

Then, set the policy:

1. In Group Policy, go to Computer ConfigurationGoogleGoogle UpdateApplicationsGoogle Credential Provider for Windows (GCPW).
2. Open Update policy override and enable it.
3. Click Options and select Updates disabled.

   Or, to enable updates, select Always Allow Updates (recommended).

Can I use GCPW on a proxy network?

To use GCPW on a proxy server, you need to allow the following host names on the proxy server. For details on how to do so, check with your proxy provider.

accounts.google.com:443
accounts.youtube.com:443
android.clients.google.com:443
clients2.google.com:443
clients2.googleusercontent.com:443
clients4.google.com:443
clientservices.googleapis.com:443
deviceenrollmentforwindows.googleapis.com:443
devicemanagementforwindows.googleapis.com:443
devicepasswordescrowforwindows-pa.googleapis.com:443
firebaseperusertopics-pa.googleapis.com:443
fonts.gstatic.com:443
gcpw-pa.googleapis.com:443
lh3.googleusercontent.com:443
m.google.com:443
mtalk.google.com:5228
optimizationguide-pa.googleapis.com:443
play.google.com:443
sb-ssl.google.com:443
secureconnect-pa.clients6.google.com:443
securitydomain-pa.googleapis.com:443
ssl.gstatic.com:443
update.googleapis.com:443
www.googleapis.com:443
www.google.com:443

More help

• FAQ for Windows device management
• Troubleshoot GCPW
• Troubleshoot Windows device management

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}