Chrome Enterprise General Discussions

Our students have discovered that if you use the split tab feature in Google Chrome, it hides some tabs from teachers monitoring via classroom management tools. There is no way to configure the split tab view feature in the Admin Console. School districts need the ability to control or disable the new split tab feature. Every time Google makes a new feature available to Workspace users, they need to make it configurable by the administrator.

Ever since ManagedAccountsSigninRestriction was deprecated, the new replacement settings ProfileSeparationSettings and ProfileSeparationDataMigrationSettings do not seem to have the intended effect I require.I previously had it setup so that a user with data in chrome(logged in a unmanaged profile or not) would get the option of migrating data from their existing profile into the new managed profile when signing in. It appears that does not happen.When a user goes to add a profile, they sign in using their managed profile and it simply signs them in with no offer of data migration. This was working with the now deprecated policy with the below setting Force separate profile and forbid secondary managed accounts—The managed account is the primary account. The profile has no secondary accounts. When the profile is created, importing existing browsing data is allowed. The replacement policies do not appear to work. They are applied at the browser/machine level before a user is logged in s

We (the schools district I am employed by) want to block AI Mode and AI Overviews for students in our organization to prevent them from using the AI built into the Google Search Bar to cheat since they can just highlight a question “right-click” and click “search google” any question from their online school homework/quiz content, the AI Overview in the resulting tab will then provide them the answer. We have already implemented all the Enterprise policies related to GenAI and AI Mode and set them to disabled, here is a short list (for reference):GenAiDefaultSettings AIModeSettings DevToolsGenAiSettings GenAIInlineImageSettings GenAILocalFoundationalModelSettings HelpMeWriteSettings SearchContentSharingSettings SmartTabSharingSettings TabCompareSettings VoiceTypingSettings GoogleSearchSidePanelEnabled LensOverlaySettings (depreciated) LensRegionSearchEnabled (depreciated) DnsOverHttpsMode GeminiSettingsEven with all these policies in place to prevent students from accessing any GenAI f

Hello, My name is Stefanos Zisopoulos. I just wanted you to share your experiences with me about google business profiles etc. Ive made Google business profiles for other companies as Im an owner of a company helping other businesses grow.I just wanted to ask if I can get a certificate from Google or anything so I can show to my customers :D. I just hope any of you have any experience in this as Im a new guy here and Im trying to learn .Thank you all!  

Downloads folder is redirected to serverdefault save location is set correctlyusers has full rights on folderchanging setting to not prompt for save has no impact

Hello everyone , is there any bottlenecks with chrome I should work on? Would love feedback before i start building. 

Hello,I am trying to configure managed client certificate support for Chrome on iOS using Chrome Enterprise Core.My environment is: Chrome Enterprise Core is enabled Chrome for iOS version 151.0 “Apply supported user settings to Chrome on iOS” is enabled The user is signed in to Chrome with a managed Google Workspace account I am checking: Devices → Chrome → Settings → User & browser settings According to the Chrome Enterprise policy documentation, ProvisionManagedClientCertificateForUser supports Chrome on iOS and iPadOS starting with version 147.The Chrome Enterprise release notes also state that administrators should configure the following policies: ProvisionManagedClientCertificateForUser ProvisionManagedClientCertificateForBrowser AutoSelectCertificateForUrls However, ProvisionManagedClientCertificateForUser and ProvisionManagedClientCertificateForBrowser do not appear in the Google Admin console. I searched using both the English policy names and the localized po

Allow my device to install other apps and uninstall 

Good day,We’ve got an odd issue I'm hoping someone can assist us with. Issue description:Unable to download a file from a specific part of a site. When attempting to do so a brief loading symbol appears before nothing happens. Download’s from other areas work as expected. Tech stack:EMM: SOTI MobiControlDevice Type: Mix of Samsung devices tested running between android 14 and 16.Managed config in use: Yes, specifically the “Allow access to a list of URLs “ and “Block access to a list of URLs” with Block access set too: ["*"]. (i can’t show the contents of allow access for privacy reasons but its working as expected other than this issue described here)Chrome app version:  147.0.7727.101 Note: This was not an issue in version 134.0.6998.135 of the app which we reproduced and verified. Investigated so far:Removing the whitelist/allow access in managed config results in the download working as expected. Its quite clear therefore that the allow access list is playing a major role here. Ens

Hi all,I'm giving you a brainteaser about the tablets we manage.The pentest conducted by our red team required us to disable the translation features in Google Chrome.Currently, when the TranslateEnabled policy is set to false, Chrome for Android correctly removes "Translate" from the overflow menu (⋮) and the long-press context menu. However, the Adaptive Toolbar Shortcut (the dynamic button next to the Omnibox) remains active or selectable, allowing users to bypass the restriction.Google Chome Android with Translation button recommandationLogically, if the Toolbar Shortcut was previously set to "Translate" (either manually or via "Based on your usage") before the policy was applied, the button must be hidden or replaced by the default shortcut once the policy is active. Or other behaviour such as should trigger a "Feature disabled by your administrator" message or simply perform no action.Unfortunately, there is no policy for managing the toolbar shortcut. Do you have any idea how to

My email is not working I lkhow my account name and my password and code backup how can I resolve this problem???? 

So I have been going round and round in circles trying to understand how the Helper App works and triggers for End Point Verification and official documentation aswell as Gemini seem to say that in order for the Helper App to trigger a prompt for an end user to install it, you first need a rule in place that requires the visibility of signals only the helper app can see. I have been trying AV requirements in  rules etc but nothing seems to trigger the Helper installation. For context, this is required for BYOD extensions and so deploying the app is not possible. 

As a rsult of the upcoming changes to POP3 compatibility, I’ve been trying to adjust my business email setup. Currently, I have a custom domain from NameCheap which gives me 3 email addresses on one domain for a small amount each year ($40 ish). I then link these domains up to GMail, and mostly manage them and respond to messages through GMail as it’s a much better interface than the native NameCheap Private Email platform. As far as I can tell, the most straightforward way to fully integrate into GMail is to just link the domain and create 3 email addresses, which will cost me around £20/month EACH (so a big markup for me), but I’m somehow justifying that it would be worth it for it all to go through Google and not have to worry about changing systems again if the compatibility changes again for whatever other solution I might find. I’ve got until 12th July before my NameCheap domain renews for another year, so I’ve been trying to make this switch on GMail. I’ve taken family members o

Hi Chrome Community,I am facing a technical issue where a specific website (https://cloudstream.pk) is failing to open or load correctly on the Google Chrome browser. The site either encounters a continuous loading loop, or the layout breaks completely upon opening, whereas it seems to work fine on alternative browsers. I have already tried clearing the Chrome browser cache and cookies, and also checked in Incognito mode, but the issue persists. Could this be related to Chrome's recent security updates regarding SSL/HTTPS enforcement or JavaScript handling? Please suggest what browser settings or site configurations I should look into to resolve this compatibility issue on Chrome.Thank you!

Hi everyone, 👋As the browser increasingly becomes the primary workspace for modern organizations, we wanted to get a clearer, data-driven picture of how IT and security leaders are adapting their strategies. To do this, we partnered with Omdia to co-sponsor a comprehensive survey exploring the current landscape of browser management, application delivery and security trends.The results gave us some fascinating insights into where budgets are shifting, how deployment strategies are evolving, and the double-edged sword of AI in the enterprise.Here are a few of the most striking takeaways from the research:🚨 The Browser is a Top Target (and Priority): Browser security is no longer an afterthought—it is now a top-five priority for 88% of organizations. This shift is largely driven by the reality of the modern threat landscape, with respondents noting that browser-based attacks now account for up to 37% of their total security incidents.   💰 Budgets are Increasing, but Integration is key

Hello everyone! I’m looking to see if there is someone else who manage to deploy the data masking feature successful since is something quite new. I want to apply a DLP rule that masks sensitive information, but I need it to be selective depending on the user's role/level.The main goal is to have the word REDACTED inside a Sheet/Docs file, and if the user who is accessing is not part of an exclusion group previously created the email field should appear REDACTED. Im able to create the rule and make some test, but i was not able to manage the data masking work inside the Docs / Sheets file. Is this not supported ? 

Hello,We have been using a device policy enforcement which leverage Endpoint Verification Chrome Extension, which limits users access to protected apps on Desktop browsers only.Some users are starting to use larger Android devices for their day-to-day (BYOD, managed by Google MDM with Android Work Profile), and sometimes clicking on links forces opening the browser instead of the native apps, which prevents users from being able to do the work.Would using Managed Chrome browser enforcement work here? How would that work with BYOD devices? What would CEL be? How does enrolling Chrome browser work for BYOD Android devices? https://support.google.com/chrome/a/answer/12120610?hl=enhttps://knowledge.workspace.google.com/admin/security/use-case-managed-chrome-browser-enforcementhttps://knowledge.workspace.google.com/admin/security/context-aware-access-examples-for-advanced-modehttps://docs.cloud.google.com/access-context-manager/docs/custom-access-level-spec

Looking forward to contributing and learning in this amazing space!!  Kudos to the team!