New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 759982 link

Starred by 1 user

Issue metadata

Status: Archived
Owner:
Closed: Nov 8
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Google Chrome version management within an MOE

Reported by affili...@techtamed.com, Aug 29 2017

Issue description

Version of Google Chrome (Wrench-> About Google Chrome):60.0.3112.780
Version of MSI (if applicable):
Using group policy settings? Yes/No YES

[Please enter what issue you are encountering here.  Please do not post any private URLs or data.  If you are having problems with policy settings, please post the contents of "about:policy" with any private data removed.]

We have a Managed Operating Environment with a controlled recent version of Google Chrome deployed to thousands of VM and physical endpoints using the GC enterprise MSI's. 
On most endpoints we prohibit GC updates via GPO however many of those endpoints do still have users who can update their own machines and they update Chrome to versions LATER than the next MOE tested version. 
When these machines get the MOE version pushed to them as part of fleet-wide  updates, they fail (because theirs are slightly later versions than the next tested MOE Google Chrome release)
 
How can we force the MOE version to install OVER later versions so as to maintain a standard (recent) version across the MOE for application regression assurance purposes?
 
Cc: blumberg@chromium.org pastarmovj@chromium.org ligim...@chromium.org
Labels: Needs-Triage-M60
Looping to enterprise folks for updates.
Downgrading Chrome can only be achieved by uninstalling the existing version beforehand. In most cases you will also need to clear the User data directory of Chrome because it won't be backwards compatible with the older version and this can lead to errors or crashes.
Labels: Needs-Feedback
affiliate@ could you respond to the comment #2
Labels: Enterprise-Triaged
Owner: georgesak@chromium.org
Assigned to George for prioritization.
Responding to Comment #2
We first run a GC uninstall before attempting to lay down the MOE version of GC and think we have fully uninstalled, yet SOMETHING (a reg key we suspect) is being left behind and this is causing the new install to fail because "a later version is already installed" - so something about the uninstall is not completely removing the later version of GC.  
Project Member

Comment 6 by sheriffbot@chromium.org, Sep 5 2017

Cc: kkaluri@chromium.org
Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "kkaluri@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
BTW - thanks for the responses :-)
I hope to do more triage on the problem today (time permitting) so may be able to provide more detail about how the uninstall is being executed and which reg key we believe is stopping the re-install
Regards Col. Sanders
Cc: grt@chromium.org
+grt who might have some insight.

Comment 9 by grt@chromium.org, Sep 5 2017

Hi. Some questions that come to mind:
- What policies have you configured?
- Do you have any idea how users are upgrading Chrome in light of the policies you've configured?
- In cases where an uninstall->install fails, could you provide C:\Windows\Temp\chrome_installer.log and %TEMP%\chrome_installer.log? It's unexpected that you'd see "This computer already has a more recent version of Google Chrome." after a successful uninstall.
Thanks.
Hello all
So much water has passed under the bridge since the 5th September, this whole Google deployment at my client's site has been a trial-by-fire!

In summary we hit a raft of challenges:

1. Citrix streaming was failing with one of two scenarios;
(i) an untitled tab with a sad face and an empty frame
- cause: Chrome being streamed from an LMG server OTHER-THAN the one supplying the user's desktop, incidence reduced by ensuring streams were published for all LMG desktop servers
(ii) an "Untitled" tab with a sad-face icon, attached to a white-filled frame with Aw-Snap! displayed
- cause: incorrectly configured security sandbox settings or application "hooking" by Citrix and was ultimately fixed by Disable Citrix API hooks for Chrome https://support.google.com/chrome/a/answer/7380899?vid=0-702684258334-1496298029205

2. Update lockdown policy not applying
 - cause: client-applied registry preferences reliant upon Google/Chrome key that is not always present. Not immediately fixed but will use Google template policy control for v61 deploy

3. UAC elevation prompt when using Help-About Google Chrome
 - cause: client removal of Google Update services. Not immediately fixed but will use Google template policy control of updates for v61 deploy and leave services intact.

4. Side-by-side failure warning following end-point-restarts after upgrade deployment.
 - cause: Root Cause unknown but New_Chrome.exe found to exist for v60 in conjunction with retained v56 install in C:\Program Files (x86)\Google\Chrome\Application. Administrator execution of this new_chrome.exe completes the upgrade successfully.

5. This one is NASTY!!!
Chrome v60 deploys showing as later versions of Chrome after deployment!!!
 - cause: The Google supplied msi product description fields for the v60 msi has v67 or 66 as the descriptor!

6. Unable to re-deploy MOE v60 install over "later version" updates that got through due to failed blocking policy.
TWO causes:
- cause: an msi switch which inhibits downgrade
- cause: a locked Google/Chrome policy key which needed to be removed to allow downgrading
Although this issue can be closed because we have identified the root cause for failed policy application, I would love to know at what point the HKLM\Software\Google\Chrome key (see *note) gets created? , because out of 3800 deploys only 1901 had the Chrome key portion (which the client was using to detect the need to apply lockdown policy!) whereas the HKLM\Software\Google portion was present for ALL deployments 
(*or HKLM\Software\Wow6432Node\Google for 64 bit)

Comment 12 by grt@chromium.org, Nov 8 2017

HKEY_LOCAL_MACHINE\SOFTWARE\[WOW6432Node\]Google is created by Google Update during installation before Chrome's installer is run because it maintains state in the ...\Google\Update key.

What keys/values do you see in HKLM\Software\[WOW6432Node\]Google\Chrome? I can't think of anything within Chrome that would create that key in HKLM. Chrome will read from this key to discover Native messaging hosts (https://developer.chrome.com/apps/nativeMessaging#native-messaging-host-location) and extensions (https://developer.chrome.com/apps/external_extensions#registry).
Project Member

Comment 13 by sheriffbot@chromium.org, Nov 8

Status: Archived (was: Unconfirmed)
Issue has not been modified or commented on in the last 365 days, please re-open or file a new bug if this is still an issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment