The ADMX Policy "RoamingProfileSupportEnabled" is not working
Reported by
marco.st...@bechtle.com,
Mar 24 2017
|
|||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36 Steps to reproduce the problem: 1. Enable policy "RoamingProfileSupportEnabled" 2. Logon and logoff from Windows 3. Start Google Chrome 4. Check the Appdata\Roaming What is the expected behavior? https://www.chromium.org/administrators/policy-list-3#RoamingProfileSupportEnabled The settings stored in Google Chrome profiles like bookmarks, autofill data, passwords, etc. will also be written to a file stored in the Roaming user profile folder or a location specified by the Administrator through the Google Chrome policy. What went wrong? No data in the users Roaming profile folder (appdata\roaming) Did this work before? No Chrome version: 57.0.2987.110 Channel: stable OS Version: 10.0 Flash Version: Shockwave Flash 24.0 r0
,
Mar 24 2017
@pastarmovj: Julian, would you please take a look? Thanks.
,
Mar 24 2017
,
Mar 24 2017
Chrome://polciy Applies to Level Source Policy name Policy value Status Current user Mandatory Platform AllowDinosaurEasterEgg false OK Current user Mandatory Platform BackgroundModeEnabled false OK Current user Mandatory Platform BrowserAddPersonEnabled false OK Current user Mandatory Platform BrowserGuestModeEnabled false OK Current user Mandatory Platform CloudPrintProxyEnabled false OK Current user Mandatory Platform CloudPrintSubmitEnabled false OK Current user Mandatory Platform DefaultBrowserSettingEnabled false OK Current user Mandatory Platform HardwareAccelerationModeEnabled true OK Current user Mandatory Platform HideWebStoreIcon true OK Current user Mandatory Platform MetricsReportingEnabled false OK Current user Mandatory Platform RoamingProfileSupportEnabled true OK Current user Mandatory Platform ShowAppsShortcutInBookmarkBar false OK Current user Mandatory Platform ShowHomeButton true OK Current user Mandatory Platform SyncDisabled true OK Current user Mandatory Platform WelcomePageOnOSUpgradeEnabled false OK - Currently I don't set the RoamingProfileLocation option. I also did some test with the option with the same results - Profile path I'm looking at: c:\users\username\appdata\roaming - I did check the porfile after logging out / exiting chrome.
,
Mar 27 2017
,
Mar 27 2017
Hi, Thanks for reporting this! Can you please run Chrome with the --enable-logging flag on and also load chrome://sync-internals and check "Local sync backend enabled" status and the "Local backend path" values in the "Local State" section. Those should be set to "True" and the corresponding path to the roaming profile file. Best, Julian
,
Mar 27 2017
Chrome://snyc-internals results: Local State Server Connection not attempted Last Synced Never Sync First-Time Setup Complete false Sync Backend Initialization Not started Syncing false Local sync backend enabled true Local backend path Uninitialized I'm wokring on the logging.
,
Mar 27 2017
Hey sorry you don't have to dig deeper I now checked the full policy list you submitted above. You have "SyncDisabled true" which disables sync but this feature is built on Sync and needs it enabled to run. When local sync is on there is no way sync will talk to google servers as the roaming profile backend completely replaces the server based one. Please remove this policy and try again. Sorry for not spotting this before.
,
Mar 27 2017
Now. It's working. I have a Profile.pb file in ..\Appdata\Roaming\Google\Chrome\userdata\Default. Thank you for helping me with this.
,
Mar 27 2017
Happy that it worked! We are really keen on your feedback as we are rolling this new feature. It still has some limitations but we believe it has huge opportunity to help in corp environments that can't use Google Sync but regularly need to roam users between multiple machines. :) Marking this one fixed for now.
,
Mar 30 2017
I'm a bit confused about this policy description at https://www.chromium.org/administrators/policy-list-3#RoamingProfileSupportEnabled Would you please explain this part: "Google Sync is automatically disabled when this policy is enabled. To prevent accidental data leaks it is advisable to also set the Google Chrome policy to False."? What is "Google Chrome policy"?
,
Mar 30 2017
Sorry this was a mistake caused by an issue with the markup in the source file for this documentation. I corrected the webpage. The text should read "To prevent accidental data leaks it is advisable to also set the SigninAllowed policy to False." in other words disable the signing in to Chrome if you want to be certain no other services that require Google account are enabled. This is not required to use this policy it is also a note for people that are trying to disable all Google services.
,
Mar 30 2017
Thank you! But SigninAllowed policy is "deprecated, consider using SyncDisabled instead" :) It was removed from group policy templates since version 40. IMO, it is not a good advise to disable SigninAllowed there, because RoamingProfileSupportEnabled works only without SyncDisabled (which is worth to mention instead).
,
Mar 30 2017
The sign-in allowed will be revived most probably this comment was put there with this in mind but we will consider changing the text to reduce the chance for misunderstandings. Thanks for the awesome comments! :)
,
Mar 30 2017
Thanks for response, there's more :) I've made some tests and found out that once SyncDisabled was set to Enable, reverting it back to "Disabled" or "Not configured" doesn't restore local sync functionality. Steps to reproduce: 1. Set RoamingProfileSupportEnabled to Enabled 2. Set SyncDisabled to Not configured 3. Delete Chrome user profile (to start from blank) 4. Update & check policy, start Chrome 5. Everything is ok, local sync creates roaming profile file at %AppData%\Roaming\... 6. Set SyncDisabled to Enabled 7. Update & check policy, start Chrome 8. Local sync not working (it is expected): "Local sync backend enabled: true, Local backend path: Uninitialized" 9. Set SyncDisabled back to Not configured (or Disabled) 10. Update & check policy, start Chrome 11. Local sync not working: "Local sync backend enabled: true, Local backend path: Uninitialized" Killing Chrome profile "fixes" this issue. Tested on Chrome 57.0.2987.133 (x64), Windows 7.
,
Mar 31 2017
Thanks for testing this and catching this interesting edge case! I have not considered this test before :) I filed https://bugs.chromium.org/p/chromium/issues/detail?id=707181 to track that particular issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by pmarko@chromium.org
, Mar 24 2017