

The most efficient way is to use a group, rather than individual machines. Under the ‘Security Filtering’, we want to add the machines this GPO will apply to. The new GPO will appear in the list.ĭouble-click the GPO to edit the settings. Select “Create and Link a GPO Here” and enter a name for the GPO, such as “Chrome Installer”. On your domain controller, open Group Policy Management and right-click on the OU that contains the PCs in your domain, typically “Domain Computers”. This way Chrome is available to any user that logs onto any machine. For Chrome, it is best to create the GPO for the machines rather than the users. GPOs can be applied to machines or to users. To do so, create a folder called MSI, assign share permissions for the Domain Computers group of ‘Read’ and assign security permissions of ‘Read/Execute’ for the Domain Computers group. This GPO will require the MSI installer to be located in a network share. For this article, we will be creating a GPO in a Server 2003 domain. ADM is for Windows Server 2003 domains and ADMX is for Windows Server 2008 domains. There are two different types of templates ADM and ADMX. To get started, d ownload the MSI and download the policy templates (Zip file).

GPO templates define settings that affect how a Windows or a specific program, in this case Chrome, functions. A MSI installer is one that can be pushed down to Windows clients and run silently without the user’s knowledge, or interaction. Google offers a Chrome MSI installer and a GPO template to help admins automate widespread installation and control of Chrome. As any system admin will tell you, GPO ends up being a valuable tool because of the ease and time saving features. This is a very useful management tool as it provides granular control into the operations on the workstations. Most system administrators deploy Group Policy Objects (GPO) as a way to control and limit user activity on Windows based PCs. Install Chrome using Group Policy to save time and maintain control over Chrome settings. Install Chrome via GPO and save yourself some time
