I know that google chrome installs to a user's profile without the need for admin priviledges ; my goal is to remove / block the installer from running.  Any help that can be offered is appreciated.

Answer Summary:
Cancel
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Community Chosen Answer

6

You can't really block the install, but you can do one of a couple of things. A GPO would be better to block the install: http://social.technet.microsoft.com/Forums/eu/winserverGP/thread/a7abcfea-8819-4680-9010-d2604a59c9bd

As far as what the KBOX can do:

1. You can use a custom inventory rule in a software inventory item and then a smart label to target a script/MI to uninstall Chrome. Assuming you didn't use the enterprise install the inventory rule for the consumer version would be:

RegistryKeyExists(HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome)

Business version: http://www.google.com/intl/en/chrome/business/browser/

2. There is also a security policy that can keep programs from running and it might work for this.  It's located: Scripting>Security Policy>Disallowed Programs Policy

3. Assuming you can't blacklist the sites, you could change the host file of the system to not resolve google.com/chrome or any of the links to download.

Answered 09/18/2012 by: jknox
Red Belt

  • I started by using the security policy blocking Chrome.exe. I eventually found that my users would just change the name to Chrome1.exe. I then ran a script to verify a file existed (Google Chrome) then uninstalled.
  • This content is currently hidden from public view.
    Reason: Removed by user request
    For more information, visit our FAQ's.
Please log in to comment

Answers

This content is currently hidden from public view.
Reason: Removed by user request
For more information, visit our FAQ's.

0

If you have a Windows 7 environment and Group Policy Objects you may be able to configure AppLocker policies to disallow Google Chrome.

Answered 09/19/2012 by: tmlambert13
Senior White Belt

Please log in to comment
0

I think the GPO idea is a good starting block - and when we move to Windows 7, work with the AppLocker policies idea.  Thanks for all the info - greatly appreciated!

Answered 09/21/2012 by: isolinear
Orange Belt

Please log in to comment
Answer this question or Comment on this question for clarity