Set Chrome policies for users or browsers

For administrators who manage Chrome policies from the Google Admin console.

Not managing Chrome browser? Sign up for Chrome Enterprise Core today.

You can enforce Chrome policies from your Admin console that apply to:

  • User accounts to sync policies and preferences across a user's devices. Settings apply whenever the user signs in to Chrome browser with their managed account on any device.
  • Enrolled browsers to enforce policies when users open Chrome browser on managed Microsoft Windows, Apple Mac, or Linux computers. Signing in is not required.

Step 1: Understand when settings apply

Exactly when your Chrome policies are enforced depends on whether you set them for user accounts or enrolled browsers.

Step 2: Configure settings in your Admin console

Before you begin: If needed, learn how to apply the setting to a department or group.

  1. Sign in with an administrator account to the Google Admin console.

    If you aren’t using an administrator account, you can’t access the Admin console.

  2. Go to  Menu and then Devices > Chrome > Settings. The User & browser settings page opens by default.

    Requires having the Mobile Device Management administrator privilege.

    If you signed up for Chrome Enterprise Core, go to Menu and then Chrome browser > Settings.

  3. (Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

    Group settings override organizational units. Learn more

  4. Click the setting you want to configure. Learn about each setting.

    Tip: Quickly find a setting by entering text in the search box at the top.

    You see Inherited if a setting is inherited from a parent. Or, you see Locally applied if the setting is overridden for the child.

  5. Click Save. Or, you might click Override for an organizational unit.

    To later restore the inherited value, click Inherit (or Unset for a group).

    Settings typically take effect in minutes, but can take up to 24 hours to apply for everyone.

Learn about each setting

Many settings allow you to enforce a policy that users cannot change or set a default that users can change. For example, you can specify a homepage that everyone must use or let people set their own homepage.

Most policies apply to both affiliated and unaffiliated users on ChromeOS. A user is affiliated if they are managed by the same domain that manages the ChromeOS device they are signed into. A user is unaffiliated if they are signed into their device as a managed user from a different domain, for example if user@domainA.com signs into a device managed by domainB.com or signs into an unmanaged device. The policies that apply only to either affiliated or unaffiliated users are clearly marked in the Admin console.

Tip: Many admins leave the default settings and only configure settings, such as startup pages, new tab pages, apps and extensions, and themes.
 

General

Open all  |  Close all

Sign-in settings

Open all  |  Close all

Mobile

Enrollment controls

Open all  |  Close all

Apps and extensions

The apps and extensions page centralizes all app and extension provisioning. For details, go to View and configure apps and extensions.

  • Allow and block apps
  • Force-install apps
  • Pin apps to the taskbar
The application settings page includes additional app and extension settings. For details, go to Set app and extension policies.
  • Allowed app types
  • Block extensions by permission
  • Chrome Web Store homepage and permissions

Site isolation

Security

Open all  |  Close all

Remote access

Open all  |  Close all

Session settings

Kerberos

Open all  |  Close all

Network

Open all  |  Close all

Android apps

Open all  |  Close all

Startup

Open all | Close all

Import settings

Open all  |  Close all

Content

Open all  |  Close all

Printing

Open all  |  Close all

User Experience

Open all  |  Close all

Connected devices

Open all  |  Close all

Accessibility

Note: By default, the accessibility settings are turned off until the user turns them on in the Chromebook accessibility settings or by using keyboard shortcuts. We strongly advise using caution before disabling any of the accessibility features, as this can cause problems for users with disabilities or particular needs. If a policy is left unset, users can access the feature anytime. However, if you set a policy, users can’t change or override it.

Open all  |  Close all

Power and shutdown

Open all  |  Close all

Omnibox search provider

Open all  |  Close all

Hardware

Open all  |  Close all

Legacy site compatibility

Open all  |  Close all

User verification

Chrome management—partner access

Browser reporting

Open all  |  Close all

Installed App Reporting

Chrome Safe Browsing

Open all  |  Close all

Chrome Enterprise connectors

Open all  |  Close all

Generative AI

Open all  |  Close all

Chrome updates

Open all  |  Close all

Chrome variations

Legacy Browser Support

Open all  |  Close all

Virtual machines (VMs) and developers

Open all  |  Close all

Parallels Desktop

Open all  |  Close all

Setting sources

Open all  |  Close all

Other settings

Open all  |  Close all

Data controls

Open all  |  Close all

Chrome management for signed-in users

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?
8334056463548210445
true
Search Help Center
true
true
true
true
true
410864
false
false
Search
Clear search
Close search
Main menu
false