Steps to deploy Google Chrome with GPO together with CIS Benchmark v2.0
- Download Google Chrome Enterprise Package
- Copy the Google ChromeStandaloneEnterprise64.msi to \192.168.1.200\Software$
\192.168.1.200\Software is the Share Folder in AD Server for Software Deployment via Group Policy
- Open Group Policy Management Editor and Go to Default Domain Policy – Computer Configuration – Policies – Software Settings – Software Installation. Assign the Chrome to be deployed to all Domain Computers
- Select the UNC Path (Network Path) where the ChromeStandaloneEnterprise64.msi is
- Select Assigned to deploy Chrome to computer
- Google Chrome is configured in Software Installation
- Google Chrome will be installed automatically after Domain Joined Computers restarted and the computer policy is applied
Import Group Policy Template to manage Google Chrome
- Copy the ADMX & ADML Files to C:\Windows\PolicyDefinitions\
Copy-Item C:\Users\Admin\Downloads\GoogleChromeEnterpriseBundle64\Configuration\admx\*.admx -Destination C:\Windows\PolicyDefinitions\
Copy-Item C:\Users\Admin\Downloads\GoogleChromeEnterpriseBundle64\Configuration\admx\en-US\*.adml -Destination C:\Windows\PolicyDefinitions\en-US\
- Configure the Recommended GPO Settings based on CIS-GoogleChrome Benchmark version 2.0
-
You can also download my Backup GPO for CIS-GoogleChrome and restored it with GPMC and extracted it to C:\GPO Backup
-
Right click on Group Policy Object and select New
- Enter a friendly name for this new GPO
- Right click on the new GPO and select Import Settings
- Click Next
- Click Next
- Browse to the C:\GPO Backup
- Click Next
- Verify the settings for Google Chrome
We will try to use Chrome with the new GPO applied in our lab, and update is there is any issues found soon.