New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 755988 link

Starred by 2 users
Status: WontFix
Owner:
█ blumberg@chromium.org
Last visit > 30 days ago
Closed: Aug 2017
Cc:
pastarmovj@chromium.org
kkaluri@chromium.org
ligim...@chromium.org
█ blumberg@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Chrome does not apply GPO.

Reported by afagag...@gmail.com, Aug 16 2017 
UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Steps to reproduce the problem:
1. Install Chrome x64
2. Apply registry GPO

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Update]
"UpdateDefault"=dword:00000000
"AutoUpdateCheckPeriodMinutes"=dword:00000000
"DisableAutoUpdateChecksCheckboxValue"=dword:00000001
"Update{8A69D345-D564-463C-AFF1-A69D9E530F96}"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome]
"AdditionalLaunchParameters"="--enable-media-stream --enable-media-source"
"MetricsReportingEnabled"=dword:00000000

3. Navigate to chrome://policy & chrome://help/

What is the expected behavior?
Chrome should apply the GPO. 

What went wrong?
Chrome still auto-updates, and GPO is not applied.
This worked in previous versions. What is going on?!

Did this work before? N/A 

Chrome version: 60.0.3112.90  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 26.0 r0

Comment 1 by manoranj...@chromium.org, Aug 16 2017

Cc: blumberg@chromium.org pastarmovj@chromium.org ligim...@chromium.org
Components: Enterprise
Labels: Needs-Triage-M60

Comment 2 Deleted

Comment 3 by afagag...@gmail.com, Aug 16 2017 

The example chrome.reg file that is provided with Enterprise Google Chrome does not work as well?

Comment 4 by kkaluri@chromium.org, Aug 17 2017

Cc: kkaluri@chromium.org
Labels: Needs-Feedback
Tested this issue on Win 2K12 with chrome #58.0.3029.54 & #60.0.3112.90, as per steps mentioned in the comment #0.

Observed that in both cases updates are disabled by administrator.

Attaching a screen-cast for reference.

afagagtea@ could you please look into it and let us know any steps i have missed while reproducing the issue.

Thank You...
755988-M58.mp4
1.0 MB View Download
755988-M60.mp4
1.2 MB View Download

Comment 5 by afagag...@gmail.com, Aug 17 2017 

Are you joined in to a Active Directory? I tried directly editing registry.pol and it still will not work. I am using Windows 10 1607.
Project Member

Comment 6 by sheriffbot@chromium.org, Aug 17 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "kkaluri@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 7 by afagag...@gmail.com, Aug 17 2017 

I've tried everything nothing works.
chrome_1.PNG
239 KB View Download
chrome_2.PNG
778 KB View Download
chrome_3.PNG
524 KB View Download
chrome_4.PNG
286 KB View Download
chrome_5.PNG
294 KB View Download

Comment 8 by dskaram@google.com, Aug 17 2017

Owner: blumberg@chromium.org
Status: Assigned (was: Unconfirmed)
Assigning to Matt for Chrome on Windows investgation

Comment 9 by blumberg@chromium.org, Aug 18 2017 

This is for Google update (omaha) not Chrome policy.  Have you tried applying that policy via ADM template or only via .reg?  Wondering if there are formatting/typo issue.

Google Update (auto-update) has its own templates:
https://www.chromium.org/administrators/policy-templates or chrome.com/enterprise - look for Google Update.

Comment 10 by afagag...@gmail.com, Aug 18 2017 

I tried applying that via .reg file as it is shown above images. It's possible to do it via ADM but not practical to apply every single setting at once.

Windows applies GPO no matter if you use gpedit.msc or registry. It does that through gpupdate /force.

Why is Chrome trying to invent it's own mechanism remains to be seen.

Comment 11 by blumberg@chromium.org, Aug 18 2017

Status: WontFix (was: Assigned)
We recommend group policy on Windows or cloud policy on Win+ other platforms.That effectively makes registry entries/modifications but doing that manually is not a best practice for a large fleet of devices as it will be difficult to manage in the future.

Marking as wont-fix as this is working per our internal testing.

Thanks,

Comment 12 by afagag...@gmail.com, Aug 20 2017 

Group policy on Windows DOES NOT work. I did more tests with ADM/ADMX + registry.
Neither works!

Comment 13 by blumberg@chromium.org, Aug 21 2017 

1. The chrome://policy page will only show Chrome policy- not Google Update related policies so this is WIA.

2. It appears the policy is working.  Screen shot #5 shows 62.0.3178 as current on the device and  when I look at https://omahaproxy.appspot.com I see 62.0.3188.4 as the latest  (eg, it did not auto-update).

Comment 14 by afagag...@gmail.com, Aug 22 2017 

How did you apply the GPO on 2K12? Was the OS part of any AD before? If not then the mechanism works differently on 2K12 than it does on W10.

It should say "Updates are disabled by administrator"..

Comment 15 by afagag...@gmail.com, Aug 23 2017 

I found a neat way to go around this using some simple registry tweak.
And yes I will not tell any of you here because then it would be patched in 24 hours.
►

Sign in to add a comment