Suggested Chrome Policies
Chrome offers policies that allow you to restrict what can be done with the Chrome browser installed on a given system.
Quick Install
OS | Install | |
---|---|---|
Linux | Download managed_policies.json, copy to directory /etc/opt/chrome/policies/managed |
|
Mac | Run /bin/bash -c "$(curl -fsSL https://infilter.net/assets/chrome/mac_install.sh)" |
|
Windows | Contact Us |
For more detailed install information, see below.
Policy Information
Below you will find the policies we find Important to use with InFilter, and some Optional Policies that we also recommend, but are not essential to the use of the InFilter tool.
Important Policies
Policy | Setting | Purpose |
---|---|---|
IncognitoModeAvailability | 1 |
Block incognito mode, which could allow for bypass of InFilter |
ExtensionInstallForcelist | ["<infilter plugin id>"] |
Force install InFilter |
DeveloperToolsAvailability | 2 |
Disable developer tools, which could be used to disable InFilter |
ExtensionInstallBlacklist | ["*"] |
Blacklist all other extensions |
AllowDeletingBrowserHistory | false | Do not allow browser history to be removed |
BrowserAddPersonEnabled | false | Disables adding other users to the browser |
BrowserGuestModeEnabled | false | Disable guest mode, which could be used to bypass InFilter |
Optional Policies
Policy | Setting | Purpose |
---|---|---|
ForceGoogleSafeSearch | true | Force Google safe search, should you want to allow your users to use Google |
ForceYouTubeRestrict | 2 |
Set YouTube restrictions to the most strict, should you want your users to use Youtube |
Additional Policy Info
For the full list of Chrome policies, see the Chromium policy list.
Detailed Installation Information
Applying policies to the Windows registry
Load Existing File
- Double click on the file, sign in as administrator if necessary, and the changes will apply to your registry.
Manual Method
- Open Windows registry editor (Start–>Run–>regedit)
- Apply the policy keys above as specified in the Chromium Policy Instructions. In short, booleans are set as follows, true=
0x00000001
, false=0x00000000
. String are set as strings. Arrays are set in sub-registry keys.
Applying policies to Mac
One Step Policy Apply
- Quit Google Chrome
- Open the Terminal app
- Copy and paste the following command:
**
/bin/bash -c "$(curl -fsSL https://infilter.net/assets/chrome/mac_install.sh)"
Manually Download And Apply Policies
- Quit Google Chrome
- Download the Mac Chrome Profile plist file
- Create directory
/Library/Managed Preferences
- For example,
sudo mkdir /Library/Managed Preferences
- For example,
- Move it to your
/Library/Managed Preferences/
directory (this will require sudo)- For example,
sudo mv ~/Downloads/com.google.Chrome.plist /Library/Managed Preferences/
- For example,
- Stop cfprefsd by running the command
sudo killall cfprefsd
- Start Chrome and the policies should be applied
- (Optional) Change file ownership / permissions on plist file to prevent editing/removal.
chown root:wheel /Library/Managed Preferences
chmod /Library/Managed Preferences/chrome.google.Chrome.plist 644