Applies to macOS users who use managed Chrome browser.
As a Chrome Enterprise administrator, you can use Microsoft Intune to deploy a Chrome Browser Cloud Management enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Apple Mac device.
Before you begin
- Make sure iOS configuration is enabled in Intune and a valid APNS certificate is assigned. For details, see Microsoft documentation.
Enroll browsers
Step 1: Generate the enrollment token
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
Generate an enrollment token. See Generate enrollment token.
-
Copy the token to use in step 2.
Step 2: Prepare the plist template file
- Click here to download the plist template file.
- Edit the downloaded file and replace the ***** string with the enrollment token you generated in Step 1.
Step 3: Add the Google Chrome app
-
Sign into the Microsoft Endpoint Manager Admin center.
-
Instruct your users to manually download Chrome browser on their devices. To automate the deployment process and deploy Chrome browser from your Intune environment, follow the instructions here.
Step 4: Assign the enrollment token to Chrome browser
-
Still in the Microsoft Endpoint Manager Admin center, select Devices
Configuration profiles
-
From Platform, select macOS.
-
From Profile type, select Templates.
-
From Template name, select Preference file.
-
Click Create and name your configuration, for example Chrome Browser Management, then click Next.
-
For Preference domain name, enter com.google.chrome.
-
Click on the folder icon and point to the plist file you prepared in Step 2 and click Next.
-
Select any applicable Included groups and Excluded groups.
-
Click Next
Configuration profiles
Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.