scloud by Florian Salzmann
ende

Google Chrome Policies with Intune

Since the Intune service release 2203 (March 21, 2022), the Google Chrome policies as we know them from the classic GPOs and the ADMX templates are now integrated into Intune. This finally gives us the possibility to configure policies for Google Chrome in Endpoint Manager / Intune without any detours.

To get you started, I’ve prepared a sample configuration here to show you how this configuration can be done. I distribute the policies as “Basic Security” for Chrome, which in this environment is only available as a secondary browser.

Info

The policies work with both the Google Chrome Enterprise and the Consumer version.

Create Google Chrome policy

You create the policy in Endpoint Manager under “Devices > Windows > Configuration profiles+Create profile. Here you select “Windows 10 and later” as the platform and “Administrative Templates” under Templates.

Create Administrative Templates in Intune

We rightly give the policy a meaningful name and a description.

Intune Google Chrome Administrative Templates

In the next step, we can then make the desired settings. You’ll find these under “Computer Configuration/Google”. Here you see two subfolders. Only use the second one, “Default Settings (user can override)”, if the user is actually allowed to adjust the settings. For my security settings, I don’t want this at all, so I choose the first subfolder.

Google Chrome Intune integrated ADMX

After defining the settings, you still need to assign the policy to at least one group so that it gets applied. Afterwards, an overview of the settings made also appears:

Google Chrome Intune policy

Here are my settings in a table, so you can search for them when creating your own:

SettingOption
Block third party cookiesEnabled
Enable reporting of usage and crash-related dataEnabled
Enable saving passwords to the password managerDisabled
Continue running background apps when Google Chrome is closedDisabled
Allow running plugins that are outdatedDisabled
Allow running plugins that are outdatedDisabled
Enable component updates in Google ChromeEnabled

That’s how easily you can now create and manage Google Chrome policies with Intune. The old, tedious way via OMA-URI is no longer needed at all.

Related posts

DNS Suffixes set via Intune
Microsoft Intune

Set DNS Suffixes via Microsoft Intune

Learn how to configure DNS suffixes via Microsoft Intune with a Settings Catalog profile, deploy them safely, and verify the setup on managed Windows devices.

Intune Autopilot Set Time Zone
Microsoft Intune

Automatically Set the Time Zone in Intune Autopilot

Set the correct time zone during Intune Autopilot using my PowerShell script and IPInfo API. Fast, simple, and no extra services needed.

Custom Compliance Policies in Intune: When and How to Use Them
Intune Starter Series

Custom Compliance Policies in Intune: When and How to Use Them

Use custom compliance in Intune to check services, registry keys, and files. Includes scripts, JSON, and setup tips.