GPO

Prerequisites for Deploying by GPO

Adding the Administrative Templates to the Active Directory Domain Controllers

Google provides with the necessary ADM template to customize Chrome for Work setup, see the point 2 of the GPO prerequisites.

ADM file import (for Active Directory Functional Level 2003):

    • Navigate to Start > Run: gpedit.msc

    • Navigate to Local Computer Policy > Computer Configuration > Administrative Templates

    • Right-click Administrative Templates, and select Add/Remove Templates

    • Add the chrome.adm template via the dialog.

    • Once complete, a Google / Chrome folder will appear under Administrative Templates if it's not there already.

ADMX file import (for Active Directory Functional Level 2008 and above):

    • Copy the chrome.admx file to %SystemRoot%\PolicyDefinitions

    • Copy one or more of the language directories, for example en-US, to %SystemRoot%\PolicyDefinitions as well. You should copy all language folders which already exist under the PolicyDefinitions folder.

    • Navigate to Start > Run: gpedit.msc

    • Navigate to Local Computer Policy > Computer Configuration > Administrative Templates

    • A Google / Chrome folder will appear under Administrative Templates if it's not there already.

You must create a new GPO. The new GPO’s will be applied to old and as well to new fresh Chrome installations.

Configure, Apply and Verify the GPO

    • Navigate to Start > Run: gpedit.msc.

    • Go to Computer Configuration > Administrative Templates > Classic Administrative Templates > Google > Google Chrome

    • In the right pane, locate and double click the Extensions Folder

Double Click the policy Configure the list of force installed extensions

On the dialog “Configure the list of force-installed extensions”

    1. Enable the policy by clicking on Enabled

    2. Click on the Show button

On the Show Contents dialog, copy and paste the following value:

aaebjepcfidgkojljbgoilgkgklehldj;https://clients2.google.com/service/update2/crx

These are first, the AwesomeDrive extension ID and the update URL.

Click OK.

Click OK to close the ‘Configure the list of force-installed extensions, and apply the GPO to the group of computers you require.

To verify, on a Windows PC where the GPO should be applied, open Chrome and execute “about:policy

If you see the policy ExtensionInstallForceList with the value “aaebjepcfidgkojljbgoilgkgklehldj;https://clients2.google.com/service/update2/crx”, the GPO is working properly.