Chrome for IT Administrators: Essential Setup and Configuration

As an IT administrator, ensuring that Google Chrome is set up and configured correctly across your organization is crucial for maintaining a secure and efficient browsing experience. This guide walks through deploying Chrome, setting mandatory policies, managing extensions, and monitoring usage. Policy names below are the captions shown in the Chrome Group Policy templates and the Chrome Enterprise policy list.

How to Deploy Chrome Across an Organization

On Windows, Chrome is usually deployed with the MSI installer and Group Policy. On Macs, use a mobile device management (MDM) tool. On Linux, use your usual deployment tool or script.

1. For Windows: Download the Chrome Enterprise MSI or bundle from the official download page.
2. Install the policy templates (see our ADMX templates guide).
3. Open the Group Policy Management Console (press Win + R and run gpmc.msc).
4. Create a new GPO and link it to the desired organizational unit.
5. In Group Policy Management Editor, go to Computer Configuration > Policies > Administrative Templates > Google > Google Chrome and configure settings.
6. Use the GPO’s software installation settings, or a tool such as SCCM or Intune, to install the MSI. Our deployment guide has the steps.

Deploying via MDM

For macOS, use an MDM solution like Jamf or Workspace ONE:

1. Log in to your MDM console and navigate to the application deployment section.
2. Upload the Chrome installer package and configure deployment settings.
3. Assign the deployment to the appropriate devices or user groups.

On Linux, Google’s Linux quick start has you push the Chrome package and JSON policy files with your preferred deployment tool or script.

Setting Mandatory Policies via Group Policy or MDM

Mandatory policies ensure that Chrome operates within the guidelines set by your IT department. Here’s how to configure them:

1. Access the Chrome policy templates from Google’s Set Chrome browser policies on managed PCs page.
2. Import these templates into your Group Policy or MDM solution.
3. Set policies like the home page URL, the default search engine, and security settings.
4. Use the mandatory policies (not the “Default Settings (users can override)” folder) so users cannot change them.

Managing Extensions for Your Team

Controlling extensions can prevent security risks and improve productivity:

1. In Group Policy Management Editor, go to Computer Configuration > Policies > Administrative Templates > Google > Google Chrome > Extensions.
2. Use Configure the list of force-installed apps and extensions to install extensions users cannot remove, and Configure extension installation blocklist to block extensions.
3. For macOS and Linux, set the same policies (ExtensionInstallForcelist and ExtensionInstallBlocklist) in your configuration profile or JSON policy file.

Security Baselines for Managed Chrome

Security is paramount when managing browsers for an organization:

1. Require two-step verification on the accounts people use to sign in to Chrome.
2. Set Safe Browsing Protection Level by policy so users cannot turn Safe Browsing off.
3. Use Require Site Isolation for every site to make sure site isolation stays on.

Monitoring and Reporting on Chrome Usage

Regular monitoring ensures compliance and helps optimize usage:

1. Enroll browsers in Chrome Enterprise Core, Google’s free cloud management in the Admin console.
2. Turn on managed browser reporting to see each browser’s version, installed extensions and applied policies.
3. Turn on browser event reporting for events such as password reuse, malware downloads and extension installs.

Frequently Asked Questions

How do I update Chrome for all users?

Leave automatic updates on, and manage them with the Google Update policy template or MDM. On a single machine, check for updates at chrome://settings/help.

Can I restrict certain websites in Chrome?

Yes, use the Block access to a list of URLs policy (URLBlocklist) in Group Policy or MDM.

How do I enforce a default homepage for all users?

Set Configure the home page URL in the Google Chrome > Startup, Home page and New Tab page folder of the mandatory policies.

Is it possible to manage Chrome on mobile devices?

Yes, Chrome Enterprise Core and MDM tools can manage Chrome settings and policies on iOS and Android devices.

What are the advantages of using Chrome Enterprise?

Chrome Enterprise offers centralized management, enhanced security features, and robust policy controls for organizations.