/bundles/itninjaweb/img/Breadcrumb_cap_w.png

I know that google chrome installs to a user's profile without the need for admin priviledges ; my goal is to remove / block the installer from running.  Any help that can be offered is appreciated.

Answer Summary:
Cancel
0 Comments   [ - ] Hide Comments

Comments

Please log in to comment

Community Chosen Answer


Answers

6

You can't really block the install, but you can do one of a couple of things. A GPO would be better to block the install: http://social.technet.microsoft.com/Forums/eu/winserverGP/thread/a7abcfea-8819-4680-9010-d2604a59c9bd

As far as what the KBOX can do:

1. You can use a custom inventory rule in a software inventory item and then a smart label to target a script/MI to uninstall Chrome. Assuming you didn't use the enterprise install the inventory rule for the consumer version would be:

RegistryKeyExists(HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome)

Business version: http://www.google.com/intl/en/chrome/business/browser/

2. There is also a security policy that can keep programs from running and it might work for this.  It's located: Scripting>Security Policy>Disallowed Programs Policy

3. Assuming you can't blacklist the sites, you could change the host file of the system to not resolve google.com/chrome or any of the links to download.

Answered 09/18/2012 by: jknox
Red Belt

  • I started by using the security policy blocking Chrome.exe. I eventually found that my users would just change the name to Chrome1.exe. I then ran a script to verify a file existed (Google Chrome) then uninstalled.
  • This content is currently hidden from public view.
    Reason: Removed by user request
    For more information, visit our FAQ's.
Please log in to comment
Answer this question or Comment on this question for clarity

Answers

This content is currently hidden from public view.
Reason: Removed by user request
For more information, visit our FAQ's.

0

If you have a Windows 7 environment and Group Policy Objects you may be able to configure AppLocker policies to disallow Google Chrome.

Answered 09/19/2012 by: tmlambert13
Senior White Belt

Please log in to comment
0

I think the GPO idea is a good starting block - and when we move to Windows 7, work with the AppLocker policies idea.  Thanks for all the info - greatly appreciated!

Answered 09/21/2012 by: isolinear
Orange Belt

Please log in to comment