Scripting Question

Block Chrome Installing

01/31/2015 4378 views

Is there a way i can block users from opening/launching Chrome on a machine with KACE?  I work at a hospital and due to some of our applications our end users are admins.  They tend to install Chrome and i'd like to either Block this with KACE or stop it from opening.

I'm not on KACE 6.0 yet.  We should be there in the next month.


1 Comment   [ + ] Show comment


  • Looking ahead to v6.0 there is the ability within Kace to blacklist applications. Haven't personally used it to give you any direct feedback - but it's there.

Community Chosen Answer

The GPO route is a good one, as it allows flexibility with AD group scoping.

Whichever route you choose, once you've sorted it, you need to investigate whether the apps really need admin rights - I've only ever come across one which explicitly checked for admin status (and a subsequent release fixed that). Normally, the app just needs write access to the file system and/or the registry. A few minutes with ProcMon will show you what access permissions an app requires.
Answered 02/01/2015 by: VBScab
Red Belt

All Answers

If I recall correctly, Chrome will install in ProgramData for non admin users so being an admin is not necessary to install Chrome. Therefore an enterprise solution such as group policy is realistically the most reliable way to proceed.
Answered 02/01/2015 by: EdT
Red Belt

Are you an Active Directory shop? If so, the game restriction GPO will work. It will prevent chrome.exe from launching

As for the k1000, I've never done this for Chrome but it works for other apps. Go to Scripting - Security Policies - Disallowed Windows Programs and type in chrome.exe and check the box to disallow programs

That will create a script for you from which you can set schedule and login parameters. It's only going to block on a certain schedule so someone may have a more elegant solution.

Another option is a script that targets your machines that have Chrome installed and uninstalls Chrome on them. That won't stop someone from reinstalling prior to your next scheduled script execution.

I will follow this and look forward to others' responses.

Answered 01/31/2015 by: rockhead44
Red Belt


You can also do some research on Microsoft AppLocker : https://technet.microsoft.com/en-us/windows/applocker.aspx

Answered 02/02/2015 by: vjaneczko
9th Degree Black Belt

This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ