any admins find a simple way of stopping users from installing chrome?

[holden j caufield]

What's the easiest way to do this, I find it on a bunch of PCs. Seems like GP and preventing access to certain folders. I remember doing this and some how chrome changed the install folder and now they can still install it.

 

[xSauronx]

What's the easiest way to do this, I find it on a bunch of PCs. Seems like GP and preventing access to certain folders. I remember doing this and some how chrome changed the install folder and now they can still install it.

a user can install it to their profile without it being available to all users.

i think you can use a gpo and/or application locker to restrict certain executables, but iirc it may be a headache for chrome (maybe the exe was based on version number or something)

i started to look into this for a client and then they said they wanted chrome after all, so i gratefully forgot the details

 

[drebo]

Remove them from the local admin's group on the computer.

This may break other shit, though.

 

[seepy83]

Remove them from the local admin's group on the computer.

This may break other shit, though.

Not good enough. Chrome installs without admin privileges.

edit: just to clarify...For example, on Windows 7 it installs to c: \Users\USERNAME\AppData\Local\Google\Chrome. It doesn't write to the Program Files folder or anywhere else that requires elevated privileges.

 

[holden j caufield]

problem is chrome I think has changed it's install file name which I used to have blocked via gp.

 

[seepy83]

You may be able to stop it from installing by running a script at login that creates that C: \Users\%username%\AppData\Local\Google\Chrome folder if it doesn't exist, and then deny's access to that folder.


Edit: Confirmed that this works. I didn't take the time to write a script to do it, but I went ahead and created the folder and then set Deny Full Control on it. The Google Chrome installer errors out: "The installer couldn't create a temporary directory. Please check for free disk space and permission to install software".

 

[fyb3r]

You may be able to stop it from installing by running a script at login that creates that C: \Users\%username%\AppData\Local\Google\Chrome folder if it doesn't exist, and then deny's access to that folder.


Edit: Confirmed that this works. I didn't take the time to write a script to do it, but I went ahead and created the folder and then set Deny Full Control on it. The Google Chrome installer errors out: "The installer couldn't create a temporary directory. Please check for free disk space and permission to install software".

Genius approach! I never thought of that lol.

 

[TallBill]

You may be able to stop it from installing by running a script at login that creates that C: \Users\%username%\AppData\Local\Google\Chrome folder if it doesn't exist, and then deny's access to that folder.


Edit: Confirmed that this works. I didn't take the time to write a script to do it, but I went ahead and created the folder and then set Deny Full Control on it. The Google Chrome installer errors out: "The installer couldn't create a temporary directory. Please check for free disk space and permission to install software".

Winning

 

[xSauronx]

This may break other shit, though.

that local admin privilieges are still required for some software is infuriating to me. its two thousand fucking thirteen and people are still pulling that shit and its insane.

 

[RadiclDreamer]

I just add its installer and exe to my AV kill list.