This content is likely not relevant anymore. Try searching or browse recent questions.
How can I prevent Chrome browser single-user (profile) installs, while allowing all-users installs? 0 Recommended Answers 2 Replies 19 Upvotes
Last edited 5/16/19
I don't want to prevent our software management system (SCCM) from installing Chrome Browser as an "all users" installation, but I want to prevent users from installing it in their profiles (C:\users\%username%\AppData\Local\Google\Chrome\Application\Chrome.exe). Currently, Chrome Browser allows these non-administrative single-user installations. These are causing us problems when an "all user" installation is then later installed. Any patching we do updates the "all users" version, but not the (often unused) older version in the profile. This leads to a large number of unpatchable vulnerabilities.
Using GPO Software Restriction policies that prevent the running of "ChromeSetup.exe", "Chrome_Installer.exe" and "C:\users\AppData\Local\Google\Chrome\Application\Chrome.exe" partially works (eliminates running the single-user version). However, when going to the Chrome Browser download site, users can kick-off the installation, which runs successfully as long as they allow the browser to run the downloaded ChromeSetup.exe file (rather than save it). If they save it, they can't run it (unless they rename it). I was hoping for a GPO template that would prevent single-user (profile) installs.
This question is locked and replying has been disabled.
This will remove the reply from the Answers section.
Notifications are off
Your notifications are currently off and you won't receive subscription updates. To turn them on, go to Notifications preferences on your Profile page.
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.
Go to the Legal Help page to request content changes for legal reasons.