From: David Mulder Date: Wed, 8 Sep 2021 13:45:56 +0000 (-0600) Subject: gpo: Test Chromium Group Policy X-Git-Tag: ldb-2.5.0~731 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1047acce9d4d04d41ea7e1ba8f58633c8df98a70;p=thirdparty%2Fsamba.git gpo: Test Chromium Group Policy Signed-off-by: David Mulder Reviewed-by: Jeremy Allison --- diff --git a/python/samba/gp_chromium_ext.py b/python/samba/gp_chromium_ext.py new file mode 100644 index 00000000000..05a1065ce33 --- /dev/null +++ b/python/samba/gp_chromium_ext.py @@ -0,0 +1,29 @@ +# gp_chromium_ext samba gpo policy +# Copyright (C) David Mulder 2021 +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +from samba.gpclass import gp_pol_ext + +class gp_chromium_ext(gp_pol_ext): + def process_group_policy(self, deleted_gpo_list, changed_gpo_list, + policy_dir=None): + pass + + def rsop(self, gpo): + output = {} + return output + +class gp_chrome_ext(gp_chromium_ext): + pass diff --git a/python/samba/tests/gpo.py b/python/samba/tests/gpo.py index 4efa50d1a35..05f12312c6e 100644 --- a/python/samba/tests/gpo.py +++ b/python/samba/tests/gpo.py @@ -43,6 +43,7 @@ from samba.vgp_access_ext import vgp_access_ext from samba.gp_gnome_settings_ext import gp_gnome_settings_ext from samba.gp_cert_auto_enroll_ext import gp_cert_auto_enroll_ext from samba.gp_firefox_ext import gp_firefox_ext +from samba.gp_chromium_ext import gp_chromium_ext import logging from samba.credentials import Credentials from samba.gp_msgs_ext import gp_msgs_ext @@ -1884,6 +1885,4953 @@ firefox_json_expected = \ } """ +chromium_reg_pol = \ +b""" + + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AbusiveExperienceInterventionEnforce + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AccessibilityImageLabelsEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AdditionalDnsQueryTypesEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AdsSettingForIntrusiveAdsSites + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AdvancedProtectionAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowCrossOriginAuthPrompt + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowDeletingBrowserHistory + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowDinosaurEasterEgg + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowFileSelectionDialogs + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowSyncXHRInPageDismissal + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AllowedDomainsForApps + managedchrome.com,example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AlternateErrorPagesEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AlternativeBrowserPath + ${ie} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AlwaysOpenPdfExternally + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AmbientAuthenticationInPrivateModesEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AppCacheForceEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ApplicationLocaleValue + en + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AudioCaptureAllowed + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AudioProcessHighPriorityEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AudioSandboxEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AuthNegotiateDelegateAllowlist + foobar.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AuthSchemes + basic,digest,ntlm,negotiate + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AuthServerAllowlist + *.example.com,example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AutoLaunchProtocolsFromOrigins + [{"allowed_origins": ["example.com", "http://www.example.com:8080"], "protocol": "spotify"}, {"allowed_origins": ["https://example.com", "https://.mail.example.com"], "protocol": "teams"}, {"allowed_origins": ["*"], "protocol": "outlook"}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AutofillAddressEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AutofillCreditCardEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + AutoplayAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BackgroundModeEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BasicAuthOverHttpEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BlockExternalExtensions + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BlockThirdPartyCookies + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BookmarkBarEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserAddPersonEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserGuestModeEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserGuestModeEnforced + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserLabsEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserNetworkTimeQueriesEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSignin + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherChromePath + ${chrome} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherDelay + 10000 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherExternalGreylistUrl + http://example.com/greylist.xml + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherExternalSitelistUrl + http://example.com/sitelist.xml + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherKeepLastChromeTab + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserSwitcherUseIeSitelist + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowserThemeColor + #FFFFFF + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BrowsingDataLifetime + [{"data_types": ["browsing_history"], "time_to_live_in_hours": 24}, {"data_types": ["password_signin", "autofill"], "time_to_live_in_hours": 12}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + BuiltInDnsClientEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CECPQ2Enabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ChromeCleanupEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ChromeCleanupReportingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ChromeVariations + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ClickToCallEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudManagementEnrollmentMandatory + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudManagementEnrollmentToken + 37185d02-e055-11e7-80c1-9a214cf093ae + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudPolicyOverridesPlatformPolicy + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudPrintProxyEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudPrintSubmitEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CloudUserPolicyMerge + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + CommandLineFlagSecurityWarningsEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ComponentUpdatesEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DNSInterceptionChecksEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultBrowserSettingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultCookiesSetting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultFileHandlingGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultFileSystemReadGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultFileSystemWriteGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultGeolocationSetting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultImagesSetting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultInsecureContentSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultJavaScriptSetting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultNotificationsSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultPopupsSetting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultPrinterSelection + { "kind": "cloud", "idPattern": ".*public", "namePattern": ".*Color" } + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderContextMenuAccessAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderIconURL + https://search.my.company/favicon.ico + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderImageURL + https://search.my.company/searchbyimage/upload + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderImageURLPostParams + content={imageThumbnail},url={imageURL},sbisrc={SearchSource} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderKeyword + mis + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderName + My Intranet Search + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderNewTabURL + https://search.my.company/newtab + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderSearchURL + https://search.my.company/search?q={searchTerms} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderSearchURLPostParams + q={searchTerms},ie=utf-8,oe=utf-8 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderSuggestURL + https://search.my.company/suggest?q={searchTerms} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSearchProviderSuggestURLPostParams + q={searchTerms},ie=utf-8,oe=utf-8 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSensorsSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultSerialGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultWebBluetoothGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DefaultWebUsbGuardSetting + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DeveloperToolsAvailability + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + Disable3DAPIs + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DisableAuthNegotiateCnameLookup + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DisablePrintPreview + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DisableSafeBrowsingProceedAnyway + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DisableScreenshots + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DiskCacheDir + ${user_home}/Chrome_cache + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DiskCacheSize + 104857600 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DnsOverHttpsMode + off + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DnsOverHttpsTemplates + https://dns.example.net/dns-query{?dns} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DownloadDirectory + /home/${user_name}/Downloads + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + DownloadRestrictions + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EditBookmarksEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EnableAuthNegotiatePort + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EnableDeprecatedPrivetPrinting + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EnableMediaRouter + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EnableOnlineRevocationChecks + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + EnterpriseHardwarePlatformAPIEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ExtensionSettings + {"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/chromeapps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.example.com"], "runtime_blocked_hosts": ["*://*.example.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "installation_mode": "allowed", "minimum_version_required": "1.0.1", "toolbar_pin": "force_pinned"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "runtime_allowed_hosts": ["*://good.example.com"], "runtime_blocked_hosts": ["*://*.example.com"], "update_url": "https://example.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "ghijklmnopabcdefghijklmnopabcdef": {"installation_mode": "force_installed", "override_update_url": true, "update_url": "https://example.com/update_url"}, "update_url:https://www.example.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ExternalProtocolDialogShowAlwaysOpenCheckbox + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + FetchKeepaliveDurationSecondsOnShutdown + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ForceEphemeralProfiles + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ForceGoogleSafeSearch + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ForceYouTubeRestrict + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + FullscreenAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + GloballyScopeHTTPAuthCacheEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + HardwareAccelerationModeEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + HeadlessMode + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + HideWebStoreIcon + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + HomepageIsNewTabPage + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + HomepageLocation + https://www.chromium.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportAutofillFormData + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportBookmarks + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportHistory + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportHomepage + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportSavedPasswords + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ImportSearchEngine + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + IncognitoModeAvailability + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + InsecureFormsWarningsEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + InsecurePrivateNetworkRequestsAllowed + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + IntensiveWakeUpThrottlingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + IntranetRedirectBehavior + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + IsolateOrigins + https://example.com/,https://othersite.org/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ManagedBookmarks + [{"toplevel_name": "My managed bookmarks folder"}, {"name": "Google", "url": "google.com"}, {"name": "Youtube", "url": "youtube.com"}, {"children": [{"name": "Chromium", "url": "chromium.org"}, {"name": "Chromium Developers", "url": "dev.chromium.org"}], "name": "Chrome links"}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ManagedConfigurationPerOrigin + [{"managed_configuration_hash": "asd891jedasd12ue9h", "managed_configuration_url": "https://gstatic.google.com/configuration.json", "origin": "https://www.google.com"}, {"managed_configuration_hash": "djio12easd89u12aws", "managed_configuration_url": "https://gstatic.google.com/configuration2.json", "origin": "https://www.example.com"}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + MaxConnectionsPerProxy + 32 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + MaxInvalidationFetchDelay + 10000 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + MediaRecommendationsEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + MediaRouterCastAllowAllIPs + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + MetricsReportingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + NTPCardsVisible + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + NTPCustomBackgroundEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + NativeMessagingUserLevelHosts + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + NetworkPredictionOptions + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + NewTabPageLocation + https://www.chromium.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PasswordLeakDetectionEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PasswordManagerEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PasswordProtectionChangePasswordURL + https://mydomain.com/change_password.html + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PasswordProtectionWarningTrigger + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PaymentMethodQueryEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PolicyAtomicGroupsEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PolicyRefreshRate + 3600000 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintHeaderFooter + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintPreviewUseSystemDefaultPrinter + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintRasterizationMode + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintingAllowedBackgroundGraphicsModes + enabled + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintingBackgroundGraphicsDefault + enabled + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PrintingPaperSizeDefault + {"custom_size": {"height": 297000, "width": 210000}, "name": "custom"} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ProfilePickerOnStartupAvailability + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PromotionalTabsEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + PromptForDownloadLocation + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ProxySettings + {"ProxyBypassList": "https://www.example1.com,https://www.example2.com,https://internalsite/", "ProxyMode": "direct", "ProxyPacUrl": "https://internal.site/example.pac", "ProxyServer": "123.123.123.123:8080", "ProxyServerMode": 2} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + QuicAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RelaunchNotification + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RelaunchNotificationPeriod + 604800000 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostAllowClientPairing + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostAllowFileTransfer + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostAllowRelayedConnection + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostAllowRemoteAccessConnections + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostAllowUiAccessForRemoteAssistance + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostFirewallTraversal + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostMaximumSessionDurationMinutes + 1200 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostRequireCurtain + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RemoteAccessHostUdpPortRange + 12400-12409 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RendererCodeIntegrityEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RequireOnlineRevocationChecksForLocalAnchors + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RestoreOnStartup + 4 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RestrictSigninToPattern + .*@example\\.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RoamingProfileLocation + ${roaming_app_data}\\chrome-profile + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + RoamingProfileSupportEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SSLErrorOverrideAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SSLVersionMin + tls1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SafeBrowsingExtendedReportingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SafeBrowsingForTrustedSourcesEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SafeBrowsingProtectionLevel + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SafeSitesFilterBehavior + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SavingBrowserHistoryDisabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ScreenCaptureAllowed + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ScrollToTextFragmentEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SearchSuggestEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SharedArrayBufferUnrestrictedAccessAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SharedClipboardEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ShowAppsShortcutInBookmarkBar + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ShowCastIconInToolbar + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ShowFullUrlsInAddressBar + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ShowHomeButton + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SignedHTTPExchangeEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SigninInterceptionEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SitePerProcess + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SpellCheckServiceEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SpellcheckEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SuppressDifferentOriginSubframeDialogs + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SuppressUnsupportedOSWarning + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + SyncDisabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + TargetBlankImpliesNoOpener + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + TaskManagerEndProcessEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + ThirdPartyBlockingEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + TotalMemoryLimitMb + 2048 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + TranslateEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + TripleDESEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + UrlKeyedAnonymizedDataCollectionEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + UserAgentClientHintsEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + UserDataDir + ${users}/${user_name}/Chrome + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + UserDataSnapshotRetentionLimit + 3 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + UserFeedbackAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + VideoCaptureAllowed + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WPADQuickCheckEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebAppInstallForceList + [{"create_desktop_shortcut": true, "default_launch_container": "window", "url": "https://www.google.com/maps"}, {"default_launch_container": "tab", "url": "https://docs.google.com"}, {"default_launch_container": "window", "fallback_app_name": "Editor", "url": "https://docs.google.com/editor"}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebRtcAllowLegacyTLSProtocols + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebRtcEventLogCollectionAllowed + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebRtcIPHandling + default + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebRtcUdpPortRange + 10000-11999 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WebUsbAllowDevicesForUrls + [{"devices": [{"product_id": 5678, "vendor_id": 1234}], "urls": ["https://google.com"]}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome + WindowOcclusionEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AlternativeBrowserParameters + 1 + -foreground + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AlternativeBrowserParameters + 2 + -new-window + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AlternativeBrowserParameters + 3 + ${url} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AlternativeBrowserParameters + 4 + -profile + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AlternativeBrowserParameters + 5 + %HOME%\\browser_profile + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AudioCaptureAllowedUrls + 1 + https://www.example.com/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AudioCaptureAllowedUrls + 2 + https://[*.]example.edu/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 1 + example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 2 + https://ssl.server.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 3 + hosting.com/good_path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 4 + https://server:8080/path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 5 + .exact.hostname.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenFileTypes + 1 + exe + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoOpenFileTypes + 2 + txt + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoSelectCertificateForUrls + 1 + {"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoplayAllowlist + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\AutoplayAllowlist + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherChromeParameters + 1 + --force-dark-mode + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 1 + ie.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 2 + !open-in-chrome.ie.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 3 + foobar.com/ie-only/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 1 + ie.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 2 + !open-in-chrome.ie.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 3 + foobar.com/ie-only/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForCas + 1 + sha256/AAAAAAAAAAAAAAAAAAAAAA== + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForCas + 2 + sha256//////////////////////w== + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForLegacyCas + 1 + sha256/AAAAAAAAAAAAAAAAAAAAAA== + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForLegacyCas + 2 + sha256//////////////////////w== + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForUrls + 1 + example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForUrls + 2 + .example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 1 + browsing_history + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 2 + download_history + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 3 + cookies_and_other_site_data + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 4 + cached_images_and_files + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 5 + password_signin + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 6 + autofill + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 7 + site_settings + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 8 + hosted_app_data + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesSessionOnlyForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\CookiesSessionOnlyForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderAlternateURLs + 1 + https://search.my.company/suggest#q={searchTerms} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderAlternateURLs + 2 + https://search.my.company/suggest/search#q={searchTerms} + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 1 + UTF-8 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 2 + UTF-16 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 3 + GB2312 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 4 + ISO-8859-1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\EnableExperimentalPolicies + 1 + ExtensionInstallAllowlist + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\EnableExperimentalPolicies + 2 + ExtensionInstallBlocklist + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExplicitlyAllowedNetworkPorts + 1 + 10080 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionAllowedTypes + 1 + hosted_app + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallAllowlist + 1 + extension_id1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallAllowlist + 2 + extension_id2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallBlocklist + 1 + extension_id1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallBlocklist + 2 + extension_id2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist + 1 + aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist + 2 + abcdefghijklmnopabcdefghijklmnop + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallSources + 1 + https://corp.mycompany.com/* + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileHandlingAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileHandlingAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileHandlingBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileHandlingBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemReadAskForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemReadAskForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemReadBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemReadBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemWriteAskForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemWriteAskForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemWriteBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\FileSystemWriteBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ForcedLanguages + 1 + en-US + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\HSTSPolicyBypassList + 1 + meet + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ImagesAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ImagesAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ImagesBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ImagesBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecureContentAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecureContentAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecureContentBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecureContentBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecurePrivateNetworkRequestsAllowedForUrls + 1 + http://www.example.com:8080 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\InsecurePrivateNetworkRequestsAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\JavaScriptAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\JavaScriptAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\JavaScriptBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\JavaScriptBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\LegacySameSiteCookieBehaviorEnabledForDomainList + 1 + www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\LegacySameSiteCookieBehaviorEnabledForDomainList + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\LookalikeWarningAllowlistDomains + 1 + foo.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\LookalikeWarningAllowlistDomains + 2 + example.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NativeMessagingAllowlist + 1 + com.native.messaging.host.name1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NativeMessagingAllowlist + 2 + com.native.messaging.host.name2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NativeMessagingBlocklist + 1 + com.native.messaging.host.name1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NativeMessagingBlocklist + 2 + com.native.messaging.host.name2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NotificationsAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NotificationsAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NotificationsBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\NotificationsBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin + 1 + http://testserver.example.com/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin + 2 + *.example.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PasswordProtectionLoginURLs + 1 + https://mydomain.com/login.html + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PasswordProtectionLoginURLs + 2 + https://login.mydomain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PolicyDictionaryMultipleSourceMergeList + 1 + ExtensionSettings + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PolicyListMultipleSourceMergeList + 1 + ExtensionInstallAllowlist + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PolicyListMultipleSourceMergeList + 2 + ExtensionInstallBlocklist + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PopupsAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PopupsAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PopupsBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PopupsBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PrinterTypeDenyList + 1 + cloud + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\PrinterTypeDenyList + 2 + privet + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RemoteAccessHostClientDomainList + 1 + my-awesome-domain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RemoteAccessHostClientDomainList + 2 + my-auxiliary-domain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RemoteAccessHostDomainList + 1 + my-awesome-domain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RemoteAccessHostDomainList + 2 + my-auxiliary-domain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RestoreOnStartupURLs + 1 + https://example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\RestoreOnStartupURLs + 2 + https://www.chromium.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SSLErrorOverrideAllowedForOrigins + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SSLErrorOverrideAllowedForOrigins + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SafeBrowsingAllowlistDomains + 1 + mydomain.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SafeBrowsingAllowlistDomains + 2 + myuniversity.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SecurityKeyPermitAttestation + 1 + https://example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SensorsAllowedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SensorsAllowedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SensorsBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SensorsBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SerialAskForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SerialAskForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SerialBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SerialBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SpellcheckLanguage + 1 + fr + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SpellcheckLanguage + 2 + es + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SpellcheckLanguageBlocklist + 1 + fr + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SpellcheckLanguageBlocklist + 2 + es + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\SyncTypesListDisabled + 1 + bookmarks + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLAllowlist + 1 + example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLAllowlist + 2 + https://ssl.server.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLAllowlist + 3 + hosting.com/good_path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLAllowlist + 4 + https://server:8080/path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLAllowlist + 5 + .exact.hostname.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 1 + example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 2 + https://ssl.server.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 3 + hosting.com/bad_path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 4 + https://server:8080/path + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 5 + .exact.hostname.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 6 + file://* + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 7 + custom_scheme:* + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist + 8 + * + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\VideoCaptureAllowedUrls + 1 + https://www.example.com/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\VideoCaptureAllowedUrls + 2 + https://[*.]example.edu/ + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebRtcLocalIpsAllowedUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebRtcLocalIpsAllowedUrls + 2 + *example.com* + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebUsbAskForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebUsbAskForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebUsbBlockedForUrls + 1 + https://www.example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\WebUsbBlockedForUrls + 2 + [*.]example.edu + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + AlternateErrorPagesEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ApplicationLocaleValue + en + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + AutofillAddressEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + AutofillCreditCardEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + BackgroundModeEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + BlockThirdPartyCookies + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + BookmarkBarEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + DefaultDownloadDirectory + /home/${user_name}/Downloads + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + DownloadDirectory + /home/${user_name}/Downloads + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + DownloadRestrictions + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + HomepageIsNewTabPage + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + HomepageLocation + https://www.chromium.org + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ImportAutofillFormData + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ImportBookmarks + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ImportHistory + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ImportSavedPasswords + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ImportSearchEngine + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + MetricsReportingEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + NetworkPredictionOptions + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + PasswordLeakDetectionEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + PasswordManagerEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + PrintHeaderFooter + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + PrintPreviewUseSystemDefaultPrinter + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + RegisteredProtocolHandlers + [{"default": true, "protocol": "mailto", "url": "https://mail.google.com/mail/?extsrc=mailto&url=%s"}] + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + RestoreOnStartup + 4 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + SafeBrowsingForTrustedSourcesEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + SafeBrowsingProtectionLevel + 2 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + SearchSuggestEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ShowFullUrlsInAddressBar + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + ShowHomeButton + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + SpellCheckServiceEnabled + 0 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended + TranslateEnabled + 1 + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended\RestoreOnStartupURLs + 1 + https://example.com + + + HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\Recommended\RestoreOnStartupURLs + 2 + https://www.chromium.org + + + Software\Policies\Google\Chrome + AbusiveExperienceInterventionEnforce + 1 + + + Software\Policies\Google\Chrome + AccessibilityImageLabelsEnabled + 0 + + + Software\Policies\Google\Chrome + AdditionalDnsQueryTypesEnabled + 1 + + + Software\Policies\Google\Chrome + AdsSettingForIntrusiveAdsSites + 1 + + + Software\Policies\Google\Chrome + AdvancedProtectionAllowed + 1 + + + Software\Policies\Google\Chrome + AllowCrossOriginAuthPrompt + 0 + + + Software\Policies\Google\Chrome + AllowDeletingBrowserHistory + 1 + + + Software\Policies\Google\Chrome + AllowDinosaurEasterEgg + 0 + + + Software\Policies\Google\Chrome + AllowFileSelectionDialogs + 1 + + + Software\Policies\Google\Chrome + AllowSyncXHRInPageDismissal + 0 + + + Software\Policies\Google\Chrome + AllowedDomainsForApps + managedchrome.com,example.com + + + Software\Policies\Google\Chrome + AlternateErrorPagesEnabled + 1 + + + Software\Policies\Google\Chrome + AlternativeBrowserPath + ${ie} + + + Software\Policies\Google\Chrome + AlwaysOpenPdfExternally + 1 + + + Software\Policies\Google\Chrome + AmbientAuthenticationInPrivateModesEnabled + 0 + + + Software\Policies\Google\Chrome + AppCacheForceEnabled + 0 + + + Software\Policies\Google\Chrome + ApplicationLocaleValue + en + + + Software\Policies\Google\Chrome + AudioCaptureAllowed + 0 + + + Software\Policies\Google\Chrome + AudioProcessHighPriorityEnabled + 1 + + + Software\Policies\Google\Chrome + AudioSandboxEnabled + 1 + + + Software\Policies\Google\Chrome + AuthNegotiateDelegateAllowlist + foobar.example.com + + + Software\Policies\Google\Chrome + AuthSchemes + basic,digest,ntlm,negotiate + + + Software\Policies\Google\Chrome + AuthServerAllowlist + *.example.com,example.com + + + Software\Policies\Google\Chrome + AutoLaunchProtocolsFromOrigins + [{"allowed_origins": ["example.com", "http://www.example.com:8080"], "protocol": "spotify"}, {"allowed_origins": ["https://example.com", "https://.mail.example.com"], "protocol": "teams"}, {"allowed_origins": ["*"], "protocol": "outlook"}] + + + Software\Policies\Google\Chrome + AutofillAddressEnabled + 0 + + + Software\Policies\Google\Chrome + AutofillCreditCardEnabled + 0 + + + Software\Policies\Google\Chrome + AutoplayAllowed + 1 + + + Software\Policies\Google\Chrome + BackgroundModeEnabled + 1 + + + Software\Policies\Google\Chrome + BasicAuthOverHttpEnabled + 0 + + + Software\Policies\Google\Chrome + BlockExternalExtensions + 1 + + + Software\Policies\Google\Chrome + BlockThirdPartyCookies + 0 + + + Software\Policies\Google\Chrome + BookmarkBarEnabled + 1 + + + Software\Policies\Google\Chrome + BrowserAddPersonEnabled + 1 + + + Software\Policies\Google\Chrome + BrowserGuestModeEnabled + 1 + + + Software\Policies\Google\Chrome + BrowserGuestModeEnforced + 1 + + + Software\Policies\Google\Chrome + BrowserLabsEnabled + 0 + + + Software\Policies\Google\Chrome + BrowserNetworkTimeQueriesEnabled + 1 + + + Software\Policies\Google\Chrome + BrowserSignin + 2 + + + Software\Policies\Google\Chrome + BrowserSwitcherChromePath + ${chrome} + + + Software\Policies\Google\Chrome + BrowserSwitcherDelay + 10000 + + + Software\Policies\Google\Chrome + BrowserSwitcherEnabled + 1 + + + Software\Policies\Google\Chrome + BrowserSwitcherExternalGreylistUrl + http://example.com/greylist.xml + + + Software\Policies\Google\Chrome + BrowserSwitcherExternalSitelistUrl + http://example.com/sitelist.xml + + + Software\Policies\Google\Chrome + BrowserSwitcherKeepLastChromeTab + 0 + + + Software\Policies\Google\Chrome + BrowserSwitcherUseIeSitelist + 1 + + + Software\Policies\Google\Chrome + BrowserThemeColor + #FFFFFF + + + Software\Policies\Google\Chrome + BrowsingDataLifetime + [{"data_types": ["browsing_history"], "time_to_live_in_hours": 24}, {"data_types": ["password_signin", "autofill"], "time_to_live_in_hours": 12}] + + + Software\Policies\Google\Chrome + BuiltInDnsClientEnabled + 1 + + + Software\Policies\Google\Chrome + CECPQ2Enabled + 1 + + + Software\Policies\Google\Chrome + ChromeCleanupEnabled + 1 + + + Software\Policies\Google\Chrome + ChromeCleanupReportingEnabled + 1 + + + Software\Policies\Google\Chrome + ChromeVariations + 1 + + + Software\Policies\Google\Chrome + ClickToCallEnabled + 1 + + + Software\Policies\Google\Chrome + CloudManagementEnrollmentMandatory + 1 + + + Software\Policies\Google\Chrome + CloudManagementEnrollmentToken + 37185d02-e055-11e7-80c1-9a214cf093ae + + + Software\Policies\Google\Chrome + CloudPolicyOverridesPlatformPolicy + 0 + + + Software\Policies\Google\Chrome + CloudPrintProxyEnabled + 1 + + + Software\Policies\Google\Chrome + CloudPrintSubmitEnabled + 1 + + + Software\Policies\Google\Chrome + CloudUserPolicyMerge + 1 + + + Software\Policies\Google\Chrome + CommandLineFlagSecurityWarningsEnabled + 1 + + + Software\Policies\Google\Chrome + ComponentUpdatesEnabled + 1 + + + Software\Policies\Google\Chrome + DNSInterceptionChecksEnabled + 1 + + + Software\Policies\Google\Chrome + DefaultBrowserSettingEnabled + 1 + + + Software\Policies\Google\Chrome + DefaultCookiesSetting + 1 + + + Software\Policies\Google\Chrome + DefaultFileHandlingGuardSetting + 2 + + + Software\Policies\Google\Chrome + DefaultFileSystemReadGuardSetting + 2 + + + Software\Policies\Google\Chrome + DefaultFileSystemWriteGuardSetting + 2 + + + Software\Policies\Google\Chrome + DefaultGeolocationSetting + 1 + + + Software\Policies\Google\Chrome + DefaultImagesSetting + 1 + + + Software\Policies\Google\Chrome + DefaultInsecureContentSetting + 2 + + + Software\Policies\Google\Chrome + DefaultJavaScriptSetting + 1 + + + Software\Policies\Google\Chrome + DefaultNotificationsSetting + 2 + + + Software\Policies\Google\Chrome + DefaultPopupsSetting + 1 + + + Software\Policies\Google\Chrome + DefaultPrinterSelection + { "kind": "cloud", "idPattern": ".*public", "namePattern": ".*Color" } + + + Software\Policies\Google\Chrome + DefaultSearchProviderContextMenuAccessAllowed + 1 + + + Software\Policies\Google\Chrome + DefaultSearchProviderEnabled + 1 + + + Software\Policies\Google\Chrome + DefaultSearchProviderIconURL + https://search.my.company/favicon.ico + + + Software\Policies\Google\Chrome + DefaultSearchProviderImageURL + https://search.my.company/searchbyimage/upload + + + Software\Policies\Google\Chrome + DefaultSearchProviderImageURLPostParams + content={imageThumbnail},url={imageURL},sbisrc={SearchSource} + + + Software\Policies\Google\Chrome + DefaultSearchProviderKeyword + mis + + + Software\Policies\Google\Chrome + DefaultSearchProviderName + My Intranet Search + + + Software\Policies\Google\Chrome + DefaultSearchProviderNewTabURL + https://search.my.company/newtab + + + Software\Policies\Google\Chrome + DefaultSearchProviderSearchURL + https://search.my.company/search?q={searchTerms} + + + Software\Policies\Google\Chrome + DefaultSearchProviderSearchURLPostParams + q={searchTerms},ie=utf-8,oe=utf-8 + + + Software\Policies\Google\Chrome + DefaultSearchProviderSuggestURL + https://search.my.company/suggest?q={searchTerms} + + + Software\Policies\Google\Chrome + DefaultSearchProviderSuggestURLPostParams + q={searchTerms},ie=utf-8,oe=utf-8 + + + Software\Policies\Google\Chrome + DefaultSensorsSetting + 2 + + + Software\Policies\Google\Chrome + DefaultSerialGuardSetting + 2 + + + Software\Policies\Google\Chrome + DefaultWebBluetoothGuardSetting + 2 + + + Software\Policies\Google\Chrome + DefaultWebUsbGuardSetting + 2 + + + Software\Policies\Google\Chrome + DeveloperToolsAvailability + 2 + + + Software\Policies\Google\Chrome + Disable3DAPIs + 0 + + + Software\Policies\Google\Chrome + DisableAuthNegotiateCnameLookup + 0 + + + Software\Policies\Google\Chrome + DisablePrintPreview + 0 + + + Software\Policies\Google\Chrome + DisableSafeBrowsingProceedAnyway + 1 + + + Software\Policies\Google\Chrome + DisableScreenshots + 1 + + + Software\Policies\Google\Chrome + DiskCacheDir + ${user_home}/Chrome_cache + + + Software\Policies\Google\Chrome + DiskCacheSize + 104857600 + + + Software\Policies\Google\Chrome + DnsOverHttpsMode + off + + + Software\Policies\Google\Chrome + DnsOverHttpsTemplates + https://dns.example.net/dns-query{?dns} + + + Software\Policies\Google\Chrome + DownloadDirectory + /home/${user_name}/Downloads + + + Software\Policies\Google\Chrome + DownloadRestrictions + 2 + + + Software\Policies\Google\Chrome + EditBookmarksEnabled + 0 + + + Software\Policies\Google\Chrome + EnableAuthNegotiatePort + 0 + + + Software\Policies\Google\Chrome + EnableDeprecatedPrivetPrinting + 1 + + + Software\Policies\Google\Chrome + EnableMediaRouter + 1 + + + Software\Policies\Google\Chrome + EnableOnlineRevocationChecks + 0 + + + Software\Policies\Google\Chrome + EnterpriseHardwarePlatformAPIEnabled + 1 + + + Software\Policies\Google\Chrome + ExtensionSettings + {"*": {"allowed_types": ["hosted_app"], "blocked_install_message": "Custom error message.", "blocked_permissions": ["downloads", "bookmarks"], "install_sources": ["https://company-intranet/chromeapps"], "installation_mode": "blocked", "runtime_allowed_hosts": ["*://good.example.com"], "runtime_blocked_hosts": ["*://*.example.com"]}, "abcdefghijklmnopabcdefghijklmnop": {"blocked_permissions": ["history"], "installation_mode": "allowed", "minimum_version_required": "1.0.1", "toolbar_pin": "force_pinned"}, "bcdefghijklmnopabcdefghijklmnopa": {"allowed_permissions": ["downloads"], "installation_mode": "force_installed", "runtime_allowed_hosts": ["*://good.example.com"], "runtime_blocked_hosts": ["*://*.example.com"], "update_url": "https://example.com/update_url"}, "cdefghijklmnopabcdefghijklmnopab": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": {"blocked_install_message": "Custom error message.", "installation_mode": "blocked"}, "fghijklmnopabcdefghijklmnopabcde": {"blocked_install_message": "Custom removal message.", "installation_mode": "removed"}, "ghijklmnopabcdefghijklmnopabcdef": {"installation_mode": "force_installed", "override_update_url": true, "update_url": "https://example.com/update_url"}, "update_url:https://www.example.com/update.xml": {"allowed_permissions": ["downloads"], "blocked_permissions": ["wallpaper"], "installation_mode": "allowed"}} + + + Software\Policies\Google\Chrome + ExternalProtocolDialogShowAlwaysOpenCheckbox + 1 + + + Software\Policies\Google\Chrome + FetchKeepaliveDurationSecondsOnShutdown + 1 + + + Software\Policies\Google\Chrome + ForceEphemeralProfiles + 1 + + + Software\Policies\Google\Chrome + ForceGoogleSafeSearch + 0 + + + Software\Policies\Google\Chrome + ForceYouTubeRestrict + 0 + + + Software\Policies\Google\Chrome + FullscreenAllowed + 1 + + + Software\Policies\Google\Chrome + GloballyScopeHTTPAuthCacheEnabled + 0 + + + Software\Policies\Google\Chrome + HardwareAccelerationModeEnabled + 1 + + + Software\Policies\Google\Chrome + HeadlessMode + 2 + + + Software\Policies\Google\Chrome + HideWebStoreIcon + 1 + + + Software\Policies\Google\Chrome + HomepageIsNewTabPage + 1 + + + Software\Policies\Google\Chrome + HomepageLocation + https://www.chromium.org + + + Software\Policies\Google\Chrome + ImportAutofillFormData + 1 + + + Software\Policies\Google\Chrome + ImportBookmarks + 1 + + + Software\Policies\Google\Chrome + ImportHistory + 1 + + + Software\Policies\Google\Chrome + ImportHomepage + 1 + + + Software\Policies\Google\Chrome + ImportSavedPasswords + 1 + + + Software\Policies\Google\Chrome + ImportSearchEngine + 1 + + + Software\Policies\Google\Chrome + IncognitoModeAvailability + 1 + + + Software\Policies\Google\Chrome + InsecureFormsWarningsEnabled + 1 + + + Software\Policies\Google\Chrome + InsecurePrivateNetworkRequestsAllowed + 0 + + + Software\Policies\Google\Chrome + IntensiveWakeUpThrottlingEnabled + 1 + + + Software\Policies\Google\Chrome + IntranetRedirectBehavior + 1 + + + Software\Policies\Google\Chrome + IsolateOrigins + https://example.com/,https://othersite.org/ + + + Software\Policies\Google\Chrome + ManagedBookmarks + [{"toplevel_name": "My managed bookmarks folder"}, {"name": "Google", "url": "google.com"}, {"name": "Youtube", "url": "youtube.com"}, {"children": [{"name": "Chromium", "url": "chromium.org"}, {"name": "Chromium Developers", "url": "dev.chromium.org"}], "name": "Chrome links"}] + + + Software\Policies\Google\Chrome + ManagedConfigurationPerOrigin + [{"managed_configuration_hash": "asd891jedasd12ue9h", "managed_configuration_url": "https://gstatic.google.com/configuration.json", "origin": "https://www.google.com"}, {"managed_configuration_hash": "djio12easd89u12aws", "managed_configuration_url": "https://gstatic.google.com/configuration2.json", "origin": "https://www.example.com"}] + + + Software\Policies\Google\Chrome + MaxConnectionsPerProxy + 32 + + + Software\Policies\Google\Chrome + MaxInvalidationFetchDelay + 10000 + + + Software\Policies\Google\Chrome + MediaRecommendationsEnabled + 1 + + + Software\Policies\Google\Chrome + MediaRouterCastAllowAllIPs + 0 + + + Software\Policies\Google\Chrome + MetricsReportingEnabled + 1 + + + Software\Policies\Google\Chrome + NTPCardsVisible + 1 + + + Software\Policies\Google\Chrome + NTPCustomBackgroundEnabled + 1 + + + Software\Policies\Google\Chrome + NativeMessagingUserLevelHosts + 0 + + + Software\Policies\Google\Chrome + NetworkPredictionOptions + 1 + + + Software\Policies\Google\Chrome + NewTabPageLocation + https://www.chromium.org + + + Software\Policies\Google\Chrome + PasswordLeakDetectionEnabled + 1 + + + Software\Policies\Google\Chrome + PasswordManagerEnabled + 1 + + + Software\Policies\Google\Chrome + PasswordProtectionChangePasswordURL + https://mydomain.com/change_password.html + + + Software\Policies\Google\Chrome + PasswordProtectionWarningTrigger + 1 + + + Software\Policies\Google\Chrome + PaymentMethodQueryEnabled + 1 + + + Software\Policies\Google\Chrome + PolicyAtomicGroupsEnabled + 1 + + + Software\Policies\Google\Chrome + PolicyRefreshRate + 3600000 + + + Software\Policies\Google\Chrome + PrintHeaderFooter + 0 + + + Software\Policies\Google\Chrome + PrintPreviewUseSystemDefaultPrinter + 0 + + + Software\Policies\Google\Chrome + PrintRasterizationMode + 1 + + + Software\Policies\Google\Chrome + PrintingAllowedBackgroundGraphicsModes + enabled + + + Software\Policies\Google\Chrome + PrintingBackgroundGraphicsDefault + enabled + + + Software\Policies\Google\Chrome + PrintingEnabled + 1 + + + Software\Policies\Google\Chrome + PrintingPaperSizeDefault + {"custom_size": {"height": 297000, "width": 210000}, "name": "custom"} + + + Software\Policies\Google\Chrome + ProfilePickerOnStartupAvailability + 0 + + + Software\Policies\Google\Chrome + PromotionalTabsEnabled + 0 + + + Software\Policies\Google\Chrome + PromptForDownloadLocation + 0 + + + Software\Policies\Google\Chrome + ProxySettings + {"ProxyBypassList": "https://www.example1.com,https://www.example2.com,https://internalsite/", "ProxyMode": "direct", "ProxyPacUrl": "https://internal.site/example.pac", "ProxyServer": "123.123.123.123:8080", "ProxyServerMode": 2} + + + Software\Policies\Google\Chrome + QuicAllowed + 1 + + + Software\Policies\Google\Chrome + RelaunchNotification + 1 + + + Software\Policies\Google\Chrome + RelaunchNotificationPeriod + 604800000 + + + Software\Policies\Google\Chrome + RemoteAccessHostAllowClientPairing + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostAllowFileTransfer + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostAllowRelayedConnection + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostAllowRemoteAccessConnections + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostAllowUiAccessForRemoteAssistance + 1 + + + Software\Policies\Google\Chrome + RemoteAccessHostFirewallTraversal + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostMaximumSessionDurationMinutes + 1200 + + + Software\Policies\Google\Chrome + RemoteAccessHostRequireCurtain + 0 + + + Software\Policies\Google\Chrome + RemoteAccessHostUdpPortRange + 12400-12409 + + + Software\Policies\Google\Chrome + RendererCodeIntegrityEnabled + 0 + + + Software\Policies\Google\Chrome + RequireOnlineRevocationChecksForLocalAnchors + 0 + + + Software\Policies\Google\Chrome + RestoreOnStartup + 4 + + + Software\Policies\Google\Chrome + RestrictSigninToPattern + .*@example\\.com + + + Software\Policies\Google\Chrome + RoamingProfileLocation + ${roaming_app_data}\\chrome-profile + + + Software\Policies\Google\Chrome + RoamingProfileSupportEnabled + 1 + + + Software\Policies\Google\Chrome + SSLErrorOverrideAllowed + 1 + + + Software\Policies\Google\Chrome + SSLVersionMin + tls1 + + + Software\Policies\Google\Chrome + SafeBrowsingExtendedReportingEnabled + 1 + + + Software\Policies\Google\Chrome + SafeBrowsingForTrustedSourcesEnabled + 0 + + + Software\Policies\Google\Chrome + SafeBrowsingProtectionLevel + 2 + + + Software\Policies\Google\Chrome + SafeSitesFilterBehavior + 0 + + + Software\Policies\Google\Chrome + SavingBrowserHistoryDisabled + 1 + + + Software\Policies\Google\Chrome + ScreenCaptureAllowed + 0 + + + Software\Policies\Google\Chrome + ScrollToTextFragmentEnabled + 0 + + + Software\Policies\Google\Chrome + SearchSuggestEnabled + 1 + + + Software\Policies\Google\Chrome + SharedArrayBufferUnrestrictedAccessAllowed + 1 + + + Software\Policies\Google\Chrome + SharedClipboardEnabled + 1 + + + Software\Policies\Google\Chrome + ShowAppsShortcutInBookmarkBar + 0 + + + Software\Policies\Google\Chrome + ShowCastIconInToolbar + 0 + + + Software\Policies\Google\Chrome + ShowFullUrlsInAddressBar + 0 + + + Software\Policies\Google\Chrome + ShowHomeButton + 1 + + + Software\Policies\Google\Chrome + SignedHTTPExchangeEnabled + 1 + + + Software\Policies\Google\Chrome + SigninInterceptionEnabled + 1 + + + Software\Policies\Google\Chrome + SitePerProcess + 1 + + + Software\Policies\Google\Chrome + SpellCheckServiceEnabled + 0 + + + Software\Policies\Google\Chrome + SpellcheckEnabled + 0 + + + Software\Policies\Google\Chrome + SuppressDifferentOriginSubframeDialogs + 1 + + + Software\Policies\Google\Chrome + SuppressUnsupportedOSWarning + 1 + + + Software\Policies\Google\Chrome + SyncDisabled + 1 + + + Software\Policies\Google\Chrome + TargetBlankImpliesNoOpener + 0 + + + Software\Policies\Google\Chrome + TaskManagerEndProcessEnabled + 1 + + + Software\Policies\Google\Chrome + ThirdPartyBlockingEnabled + 0 + + + Software\Policies\Google\Chrome + TotalMemoryLimitMb + 2048 + + + Software\Policies\Google\Chrome + TranslateEnabled + 1 + + + Software\Policies\Google\Chrome + TripleDESEnabled + 0 + + + Software\Policies\Google\Chrome + UrlKeyedAnonymizedDataCollectionEnabled + 1 + + + Software\Policies\Google\Chrome + UserAgentClientHintsEnabled + 1 + + + Software\Policies\Google\Chrome + UserDataDir + ${users}/${user_name}/Chrome + + + Software\Policies\Google\Chrome + UserDataSnapshotRetentionLimit + 3 + + + Software\Policies\Google\Chrome + UserFeedbackAllowed + 1 + + + Software\Policies\Google\Chrome + VideoCaptureAllowed + 0 + + + Software\Policies\Google\Chrome + WPADQuickCheckEnabled + 1 + + + Software\Policies\Google\Chrome + WebAppInstallForceList + [{"create_desktop_shortcut": true, "default_launch_container": "window", "url": "https://www.google.com/maps"}, {"default_launch_container": "tab", "url": "https://docs.google.com"}, {"default_launch_container": "window", "fallback_app_name": "Editor", "url": "https://docs.google.com/editor"}] + + + Software\Policies\Google\Chrome + WebRtcAllowLegacyTLSProtocols + 0 + + + Software\Policies\Google\Chrome + WebRtcEventLogCollectionAllowed + 1 + + + Software\Policies\Google\Chrome + WebRtcIPHandling + default + + + Software\Policies\Google\Chrome + WebRtcUdpPortRange + 10000-11999 + + + Software\Policies\Google\Chrome + WebUsbAllowDevicesForUrls + [{"devices": [{"product_id": 5678, "vendor_id": 1234}], "urls": ["https://google.com"]}] + + + Software\Policies\Google\Chrome + WindowOcclusionEnabled + 1 + + + Software\Policies\Google\Chrome\AlternativeBrowserParameters + 1 + -foreground + + + Software\Policies\Google\Chrome\AlternativeBrowserParameters + 2 + -new-window + + + Software\Policies\Google\Chrome\AlternativeBrowserParameters + 3 + ${url} + + + Software\Policies\Google\Chrome\AlternativeBrowserParameters + 4 + -profile + + + Software\Policies\Google\Chrome\AlternativeBrowserParameters + 5 + %HOME%\\browser_profile + + + Software\Policies\Google\Chrome\AudioCaptureAllowedUrls + 1 + https://www.example.com/ + + + Software\Policies\Google\Chrome\AudioCaptureAllowedUrls + 2 + https://[*.]example.edu/ + + + Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 1 + example.com + + + Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 2 + https://ssl.server.com + + + Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 3 + hosting.com/good_path + + + Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 4 + https://server:8080/path + + + Software\Policies\Google\Chrome\AutoOpenAllowedForURLs + 5 + .exact.hostname.com + + + Software\Policies\Google\Chrome\AutoOpenFileTypes + 1 + exe + + + Software\Policies\Google\Chrome\AutoOpenFileTypes + 2 + txt + + + Software\Policies\Google\Chrome\AutoSelectCertificateForUrls + 1 + {"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}} + + + Software\Policies\Google\Chrome\AutoplayAllowlist + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\AutoplayAllowlist + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\BrowserSwitcherChromeParameters + 1 + --force-dark-mode + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 1 + ie.com + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 2 + !open-in-chrome.ie.com + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlGreylist + 3 + foobar.com/ie-only/ + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 1 + ie.com + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 2 + !open-in-chrome.ie.com + + + Software\Policies\Google\Chrome\BrowserSwitcherUrlList + 3 + foobar.com/ie-only/ + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForCas + 1 + sha256/AAAAAAAAAAAAAAAAAAAAAA== + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForCas + 2 + sha256//////////////////////w== + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForLegacyCas + 1 + sha256/AAAAAAAAAAAAAAAAAAAAAA== + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForLegacyCas + 2 + sha256//////////////////////w== + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForUrls + 1 + example.com + + + Software\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForUrls + 2 + .example.com + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 1 + browsing_history + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 2 + download_history + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 3 + cookies_and_other_site_data + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 4 + cached_images_and_files + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 5 + password_signin + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 6 + autofill + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 7 + site_settings + + + Software\Policies\Google\Chrome\ClearBrowsingDataOnExitList + 8 + hosted_app_data + + + Software\Policies\Google\Chrome\CookiesAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\CookiesAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\CookiesBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\CookiesBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\CookiesSessionOnlyForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\CookiesSessionOnlyForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\DefaultSearchProviderAlternateURLs + 1 + https://search.my.company/suggest#q={searchTerms} + + + Software\Policies\Google\Chrome\DefaultSearchProviderAlternateURLs + 2 + https://search.my.company/suggest/search#q={searchTerms} + + + Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 1 + UTF-8 + + + Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 2 + UTF-16 + + + Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 3 + GB2312 + + + Software\Policies\Google\Chrome\DefaultSearchProviderEncodings + 4 + ISO-8859-1 + + + Software\Policies\Google\Chrome\EnableExperimentalPolicies + 1 + ExtensionInstallAllowlist + + + Software\Policies\Google\Chrome\EnableExperimentalPolicies + 2 + ExtensionInstallBlocklist + + + Software\Policies\Google\Chrome\ExplicitlyAllowedNetworkPorts + 1 + 10080 + + + Software\Policies\Google\Chrome\ExtensionAllowedTypes + 1 + hosted_app + + + Software\Policies\Google\Chrome\ExtensionInstallAllowlist + 1 + extension_id1 + + + Software\Policies\Google\Chrome\ExtensionInstallAllowlist + 2 + extension_id2 + + + Software\Policies\Google\Chrome\ExtensionInstallBlocklist + 1 + extension_id1 + + + Software\Policies\Google\Chrome\ExtensionInstallBlocklist + 2 + extension_id2 + + + Software\Policies\Google\Chrome\ExtensionInstallForcelist + 1 + aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx + + + Software\Policies\Google\Chrome\ExtensionInstallForcelist + 2 + abcdefghijklmnopabcdefghijklmnop + + + Software\Policies\Google\Chrome\ExtensionInstallSources + 1 + https://corp.mycompany.com/* + + + Software\Policies\Google\Chrome\FileHandlingAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileHandlingAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\FileHandlingBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileHandlingBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\FileSystemReadAskForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileSystemReadAskForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\FileSystemReadBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileSystemReadBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\FileSystemWriteAskForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileSystemWriteAskForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\FileSystemWriteBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\FileSystemWriteBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\ForcedLanguages + 1 + en-US + + + Software\Policies\Google\Chrome\HSTSPolicyBypassList + 1 + meet + + + Software\Policies\Google\Chrome\ImagesAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\ImagesAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\ImagesBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\ImagesBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\InsecureContentAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\InsecureContentAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\InsecureContentBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\InsecureContentBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\InsecurePrivateNetworkRequestsAllowedForUrls + 1 + http://www.example.com:8080 + + + Software\Policies\Google\Chrome\InsecurePrivateNetworkRequestsAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\JavaScriptAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\JavaScriptAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\JavaScriptBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\JavaScriptBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\LegacySameSiteCookieBehaviorEnabledForDomainList + 1 + www.example.com + + + Software\Policies\Google\Chrome\LegacySameSiteCookieBehaviorEnabledForDomainList + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\LookalikeWarningAllowlistDomains + 1 + foo.example.com + + + Software\Policies\Google\Chrome\LookalikeWarningAllowlistDomains + 2 + example.org + + + Software\Policies\Google\Chrome\NativeMessagingAllowlist + 1 + com.native.messaging.host.name1 + + + Software\Policies\Google\Chrome\NativeMessagingAllowlist + 2 + com.native.messaging.host.name2 + + + Software\Policies\Google\Chrome\NativeMessagingBlocklist + 1 + com.native.messaging.host.name1 + + + Software\Policies\Google\Chrome\NativeMessagingBlocklist + 2 + com.native.messaging.host.name2 + + + Software\Policies\Google\Chrome\NotificationsAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\NotificationsAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\NotificationsBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\NotificationsBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin + 1 + http://testserver.example.com/ + + + Software\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin + 2 + *.example.org + + + Software\Policies\Google\Chrome\PasswordProtectionLoginURLs + 1 + https://mydomain.com/login.html + + + Software\Policies\Google\Chrome\PasswordProtectionLoginURLs + 2 + https://login.mydomain.com + + + Software\Policies\Google\Chrome\PolicyDictionaryMultipleSourceMergeList + 1 + ExtensionSettings + + + Software\Policies\Google\Chrome\PolicyListMultipleSourceMergeList + 1 + ExtensionInstallAllowlist + + + Software\Policies\Google\Chrome\PolicyListMultipleSourceMergeList + 2 + ExtensionInstallBlocklist + + + Software\Policies\Google\Chrome\PopupsAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\PopupsAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\PopupsBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\PopupsBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\PrinterTypeDenyList + 1 + cloud + + + Software\Policies\Google\Chrome\PrinterTypeDenyList + 2 + privet + + + Software\Policies\Google\Chrome\RemoteAccessHostClientDomainList + 1 + my-awesome-domain.com + + + Software\Policies\Google\Chrome\RemoteAccessHostClientDomainList + 2 + my-auxiliary-domain.com + + + Software\Policies\Google\Chrome\RemoteAccessHostDomainList + 1 + my-awesome-domain.com + + + Software\Policies\Google\Chrome\RemoteAccessHostDomainList + 2 + my-auxiliary-domain.com + + + Software\Policies\Google\Chrome\RestoreOnStartupURLs + 1 + https://example.com + + + Software\Policies\Google\Chrome\RestoreOnStartupURLs + 2 + https://www.chromium.org + + + Software\Policies\Google\Chrome\SSLErrorOverrideAllowedForOrigins + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\SSLErrorOverrideAllowedForOrigins + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\SafeBrowsingAllowlistDomains + 1 + mydomain.com + + + Software\Policies\Google\Chrome\SafeBrowsingAllowlistDomains + 2 + myuniversity.edu + + + Software\Policies\Google\Chrome\SecurityKeyPermitAttestation + 1 + https://example.com + + + Software\Policies\Google\Chrome\SensorsAllowedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\SensorsAllowedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\SensorsBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\SensorsBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\SerialAskForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\SerialAskForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\SerialBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\SerialBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\SpellcheckLanguage + 1 + fr + + + Software\Policies\Google\Chrome\SpellcheckLanguage + 2 + es + + + Software\Policies\Google\Chrome\SpellcheckLanguageBlocklist + 1 + fr + + + Software\Policies\Google\Chrome\SpellcheckLanguageBlocklist + 2 + es + + + Software\Policies\Google\Chrome\SyncTypesListDisabled + 1 + bookmarks + + + Software\Policies\Google\Chrome\URLAllowlist + 1 + example.com + + + Software\Policies\Google\Chrome\URLAllowlist + 2 + https://ssl.server.com + + + Software\Policies\Google\Chrome\URLAllowlist + 3 + hosting.com/good_path + + + Software\Policies\Google\Chrome\URLAllowlist + 4 + https://server:8080/path + + + Software\Policies\Google\Chrome\URLAllowlist + 5 + .exact.hostname.com + + + Software\Policies\Google\Chrome\URLBlocklist + 1 + example.com + + + Software\Policies\Google\Chrome\URLBlocklist + 2 + https://ssl.server.com + + + Software\Policies\Google\Chrome\URLBlocklist + 3 + hosting.com/bad_path + + + Software\Policies\Google\Chrome\URLBlocklist + 4 + https://server:8080/path + + + Software\Policies\Google\Chrome\URLBlocklist + 5 + .exact.hostname.com + + + Software\Policies\Google\Chrome\URLBlocklist + 6 + file://* + + + Software\Policies\Google\Chrome\URLBlocklist + 7 + custom_scheme:* + + + Software\Policies\Google\Chrome\URLBlocklist + 8 + * + + + Software\Policies\Google\Chrome\VideoCaptureAllowedUrls + 1 + https://www.example.com/ + + + Software\Policies\Google\Chrome\VideoCaptureAllowedUrls + 2 + https://[*.]example.edu/ + + + Software\Policies\Google\Chrome\WebRtcLocalIpsAllowedUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\WebRtcLocalIpsAllowedUrls + 2 + *example.com* + + + Software\Policies\Google\Chrome\WebUsbAskForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\WebUsbAskForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\WebUsbBlockedForUrls + 1 + https://www.example.com + + + Software\Policies\Google\Chrome\WebUsbBlockedForUrls + 2 + [*.]example.edu + + + Software\Policies\Google\Chrome\Recommended + AlternateErrorPagesEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + ApplicationLocaleValue + en + + + Software\Policies\Google\Chrome\Recommended + AutofillAddressEnabled + 0 + + + Software\Policies\Google\Chrome\Recommended + AutofillCreditCardEnabled + 0 + + + Software\Policies\Google\Chrome\Recommended + BackgroundModeEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + BlockThirdPartyCookies + 0 + + + Software\Policies\Google\Chrome\Recommended + BookmarkBarEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + DefaultDownloadDirectory + /home/${user_name}/Downloads + + + Software\Policies\Google\Chrome\Recommended + DownloadDirectory + /home/${user_name}/Downloads + + + Software\Policies\Google\Chrome\Recommended + DownloadRestrictions + 2 + + + Software\Policies\Google\Chrome\Recommended + HomepageIsNewTabPage + 1 + + + Software\Policies\Google\Chrome\Recommended + HomepageLocation + https://www.chromium.org + + + Software\Policies\Google\Chrome\Recommended + ImportAutofillFormData + 1 + + + Software\Policies\Google\Chrome\Recommended + ImportBookmarks + 1 + + + Software\Policies\Google\Chrome\Recommended + ImportHistory + 1 + + + Software\Policies\Google\Chrome\Recommended + ImportSavedPasswords + 1 + + + Software\Policies\Google\Chrome\Recommended + ImportSearchEngine + 1 + + + Software\Policies\Google\Chrome\Recommended + MetricsReportingEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + NetworkPredictionOptions + 1 + + + Software\Policies\Google\Chrome\Recommended + PasswordLeakDetectionEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + PasswordManagerEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + PrintHeaderFooter + 0 + + + Software\Policies\Google\Chrome\Recommended + PrintPreviewUseSystemDefaultPrinter + 0 + + + Software\Policies\Google\Chrome\Recommended + RegisteredProtocolHandlers + [{"default": true, "protocol": "mailto", "url": "https://mail.google.com/mail/?extsrc=mailto&url=%s"}] + + + Software\Policies\Google\Chrome\Recommended + RestoreOnStartup + 4 + + + Software\Policies\Google\Chrome\Recommended + SafeBrowsingForTrustedSourcesEnabled + 0 + + + Software\Policies\Google\Chrome\Recommended + SafeBrowsingProtectionLevel + 2 + + + Software\Policies\Google\Chrome\Recommended + SearchSuggestEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended + ShowFullUrlsInAddressBar + 0 + + + Software\Policies\Google\Chrome\Recommended + ShowHomeButton + 1 + + + Software\Policies\Google\Chrome\Recommended + SpellCheckServiceEnabled + 0 + + + Software\Policies\Google\Chrome\Recommended + TranslateEnabled + 1 + + + Software\Policies\Google\Chrome\Recommended\RestoreOnStartupURLs + 1 + https://example.com + + + Software\Policies\Google\Chrome\Recommended\RestoreOnStartupURLs + 2 + https://www.chromium.org + + +""" + +chromium_json_expected_managed = \ +b""" +{ + "FileSystemWriteAskForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "InsecureContentBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "DefaultSearchProviderImageURLPostParams": "content={imageThumbnail},url={imageURL},sbisrc={SearchSource}", + "BrowserAddPersonEnabled": true, + "DefaultSearchProviderImageURL": "https://search.my.company/searchbyimage/upload", + "ShowHomeButton": true, + "ClearBrowsingDataOnExitList": [ + "browsing_history", + "download_history", + "cookies_and_other_site_data", + "cached_images_and_files", + "password_signin", + "autofill", + "site_settings", + "hosted_app_data" + ], + "JavaScriptAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "AmbientAuthenticationInPrivateModesEnabled": 0, + "AllowFileSelectionDialogs": true, + "PrintingAllowedBackgroundGraphicsModes": "enabled", + "DnsOverHttpsTemplates": "https://dns.example.net/dns-query{?dns}", + "ComponentUpdatesEnabled": true, + "RemoteAccessHostAllowRemoteAccessConnections": false, + "WindowOcclusionEnabled": true, + "PrintPreviewUseSystemDefaultPrinter": false, + "AutoLaunchProtocolsFromOrigins": [ + { + "allowed_origins": [ + "example.com", + "http://www.example.com:8080" + ], + "protocol": "spotify" + }, + { + "allowed_origins": [ + "https://example.com", + "https://.mail.example.com" + ], + "protocol": "teams" + }, + { + "allowed_origins": [ + "*" + ], + "protocol": "outlook" + } + ], + "ManagedConfigurationPerOrigin": [ + { + "origin": "https://www.google.com", + "managed_configuration_hash": "asd891jedasd12ue9h", + "managed_configuration_url": "https://gstatic.google.com/configuration.json" + }, + { + "origin": "https://www.example.com", + "managed_configuration_hash": "djio12easd89u12aws", + "managed_configuration_url": "https://gstatic.google.com/configuration2.json" + } + ], + "SyncTypesListDisabled": [ + "bookmarks" + ], + "SecurityKeyPermitAttestation": [ + "https://example.com" + ], + "DefaultSearchProviderSearchURL": "https://search.my.company/search?q={searchTerms}", + "MetricsReportingEnabled": true, + "MaxInvalidationFetchDelay": 10000, + "AudioProcessHighPriorityEnabled": true, + "ExtensionInstallForcelist": [ + "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx", + "abcdefghijklmnopabcdefghijklmnop" + ], + "ExternalProtocolDialogShowAlwaysOpenCheckbox": true, + "CookiesBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "BrowserSwitcherExternalSitelistUrl": "http://example.com/sitelist.xml", + "AudioCaptureAllowedUrls": [ + "https://www.example.com/", + "https://[*.]example.edu/" + ], + "NTPCustomBackgroundEnabled": true, + "BlockExternalExtensions": true, + "BrowserSwitcherChromeParameters": [ + "--force-dark-mode" + ], + "SafeSitesFilterBehavior": 0, + "EnableOnlineRevocationChecks": false, + "ImagesBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "InsecureFormsWarningsEnabled": true, + "RelaunchNotificationPeriod": 604800000, + "TotalMemoryLimitMb": 2048, + "CloudManagementEnrollmentMandatory": true, + "ClickToCallEnabled": true, + "AppCacheForceEnabled": false, + "UrlKeyedAnonymizedDataCollectionEnabled": true, + "FullscreenAllowed": true, + "AuthSchemes": "basic,digest,ntlm,negotiate", + "PasswordLeakDetectionEnabled": true, + "AuthServerAllowlist": "*.example.com,example.com", + "AllowSyncXHRInPageDismissal": false, + "PasswordProtectionChangePasswordURL": "https://mydomain.com/change_password.html", + "MaxConnectionsPerProxy": 32, + "RemoteAccessHostMaximumSessionDurationMinutes": 1200, + "RemoteAccessHostAllowFileTransfer": false, + "PrintRasterizationMode": 1, + "CertificateTransparencyEnforcementDisabledForLegacyCas": [ + "sha256/AAAAAAAAAAAAAAAAAAAAAA==", + "sha256//////////////////////w==" + ], + "DefaultWebBluetoothGuardSetting": 2, + "AutoplayAllowed": true, + "BrowserSwitcherUrlList": [ + "ie.com", + "!open-in-chrome.ie.com", + "foobar.com/ie-only/" + ], + "CertificateTransparencyEnforcementDisabledForUrls": [ + "example.com", + ".example.com" + ], + "SpellcheckLanguageBlocklist": [ + "fr", + "es" + ], + "PrintHeaderFooter": false, + "ShowAppsShortcutInBookmarkBar": false, + "SerialAskForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "ImagesAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "ProfilePickerOnStartupAvailability": 0, + "CommandLineFlagSecurityWarningsEnabled": true, + "QuicAllowed": true, + "IntensiveWakeUpThrottlingEnabled": true, + "WPADQuickCheckEnabled": true, + "SensorsAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "NTPCardsVisible": true, + "DefaultSearchProviderAlternateURLs": [ + "https://search.my.company/suggest#q={searchTerms}", + "https://search.my.company/suggest/search#q={searchTerms}" + ], + "DisableSafeBrowsingProceedAnyway": true, + "DefaultFileSystemWriteGuardSetting": 2, + "DefaultSearchProviderSuggestURL": "https://search.my.company/suggest?q={searchTerms}", + "SSLErrorOverrideAllowed": true, + "CloudPrintProxyEnabled": true, + "BrowserSwitcherUrlGreylist": [ + "ie.com", + "!open-in-chrome.ie.com", + "foobar.com/ie-only/" + ], + "BrowserNetworkTimeQueriesEnabled": true, + "WebUsbAllowDevicesForUrls": [ + { + "urls": [ + "https://google.com" + ], + "devices": [ + { + "vendor_id": 1234, + "product_id": 5678 + } + ] + } + ], + "TaskManagerEndProcessEnabled": true, + "SuppressDifferentOriginSubframeDialogs": true, + "UserDataDir": "${users}/${user_name}/Chrome", + "CookiesAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "SuppressUnsupportedOSWarning": true, + "RequireOnlineRevocationChecksForLocalAnchors": false, + "BrowsingDataLifetime": [ + { + "data_types": [ + "browsing_history" + ], + "time_to_live_in_hours": 24 + }, + { + "data_types": [ + "password_signin", + "autofill" + ], + "time_to_live_in_hours": 12 + } + ], + "FileHandlingBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "AudioCaptureAllowed": false, + "PromotionalTabsEnabled": false, + "ShowFullUrlsInAddressBar": false, + "EnableMediaRouter": true, + "BrowserSwitcherDelay": 10000, + "AllowDinosaurEasterEgg": false, + "ImportSearchEngine": true, + "PrintingBackgroundGraphicsDefault": "enabled", + "TripleDESEnabled": false, + "AutoplayAllowlist": [ + "https://www.example.com", + "[*.]example.edu" + ], + "RemoteAccessHostUdpPortRange": "12400-12409", + "DefaultSearchProviderIconURL": "https://search.my.company/favicon.ico", + "BrowserSwitcherChromePath": "${chrome}", + "InsecureContentAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "DefaultSearchProviderSearchURLPostParams": "q={searchTerms},ie=utf-8,oe=utf-8", + "ForceGoogleSafeSearch": false, + "UserFeedbackAllowed": true, + "ForceYouTubeRestrict": 0, + "ApplicationLocaleValue": "en", + "RoamingProfileSupportEnabled": true, + "AlternativeBrowserPath": "${ie}", + "AlternativeBrowserParameters": [ + "-foreground", + "-new-window", + "${url}", + "-profile", + "%HOME%\\\\browser_profile" + ], + "AdvancedProtectionAllowed": true, + "EditBookmarksEnabled": false, + "DefaultPrinterSelection": "{ \\"kind\\": \\"cloud\\", \\"idPattern\\": \\".*public\\", \\"namePattern\\": \\".*Color\\" }", + "SSLVersionMin": "tls1", + "SharedArrayBufferUnrestrictedAccessAllowed": true, + "DefaultSerialGuardSetting": 2, + "DefaultPopupsSetting": 1, + "IntranetRedirectBehavior": 1, + "RendererCodeIntegrityEnabled": false, + "BrowserGuestModeEnforced": true, + "HSTSPolicyBypassList": [ + "meet" + ], + "DefaultWebUsbGuardSetting": 2, + "CECPQ2Enabled": true, + "RemoteAccessHostDomainList": [ + "my-awesome-domain.com", + "my-auxiliary-domain.com" + ], + "URLBlocklist": [ + "example.com", + "https://ssl.server.com", + "hosting.com/bad_path", + "https://server:8080/path", + ".exact.hostname.com", + "file://*", + "custom_scheme:*", + "*" + ], + "IsolateOrigins": "https://example.com/,https://othersite.org/", + "ExtensionAllowedTypes": [ + "hosted_app" + ], + "NativeMessagingBlocklist": [ + "com.native.messaging.host.name1", + "com.native.messaging.host.name2" + ], + "ExtensionSettings": { + "abcdefghijklmnopabcdefghijklmnop": { + "blocked_permissions": [ + "history" + ], + "minimum_version_required": "1.0.1", + "toolbar_pin": "force_pinned", + "installation_mode": "allowed" + }, + "bcdefghijklmnopabcdefghijklmnopa": { + "runtime_blocked_hosts": [ + "*://*.example.com" + ], + "allowed_permissions": [ + "downloads" + ], + "update_url": "https://example.com/update_url", + "runtime_allowed_hosts": [ + "*://good.example.com" + ], + "installation_mode": "force_installed" + }, + "update_url:https://www.example.com/update.xml": { + "allowed_permissions": [ + "downloads" + ], + "blocked_permissions": [ + "wallpaper" + ], + "installation_mode": "allowed" + }, + "cdefghijklmnopabcdefghijklmnopab": { + "blocked_install_message": "Custom error message.", + "installation_mode": "blocked" + }, + "*": { + "blocked_permissions": [ + "downloads", + "bookmarks" + ], + "installation_mode": "blocked", + "runtime_blocked_hosts": [ + "*://*.example.com" + ], + "blocked_install_message": "Custom error message.", + "allowed_types": [ + "hosted_app" + ], + "runtime_allowed_hosts": [ + "*://good.example.com" + ], + "install_sources": [ + "https://company-intranet/chromeapps" + ] + }, + "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": { + "blocked_install_message": "Custom error message.", + "installation_mode": "blocked" + }, + "fghijklmnopabcdefghijklmnopabcde": { + "blocked_install_message": "Custom removal message.", + "installation_mode": "removed" + }, + "ghijklmnopabcdefghijklmnopabcdef": { + "update_url": "https://example.com/update_url", + "override_update_url": true, + "installation_mode": "force_installed" + } + }, + "FileSystemReadAskForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "SpellCheckServiceEnabled": false, + "ExtensionInstallSources": [ + "https://corp.mycompany.com/*" + ], + "PrinterTypeDenyList": [ + "cloud", + "privet" + ], + "SharedClipboardEnabled": true, + "BlockThirdPartyCookies": false, + "MediaRouterCastAllowAllIPs": false, + "DnsOverHttpsMode": "off", + "SyncDisabled": true, + "LookalikeWarningAllowlistDomains": [ + "foo.example.com", + "example.org" + ], + "UserDataSnapshotRetentionLimit": 3, + "SafeBrowsingProtectionLevel": 2, + "ScrollToTextFragmentEnabled": false, + "ImportBookmarks": true, + "DefaultBrowserSettingEnabled": true, + "DefaultSearchProviderEnabled": true, + "AdditionalDnsQueryTypesEnabled": true, + "PolicyRefreshRate": 3600000, + "PrintingPaperSizeDefault": { + "custom_size": { + "width": 210000, + "height": 297000 + }, + "name": "custom" + }, + "RestoreOnStartup": 4, + "PasswordProtectionWarningTrigger": 1, + "ChromeCleanupEnabled": true, + "AbusiveExperienceInterventionEnforce": true, + "BasicAuthOverHttpEnabled": false, + "EnableAuthNegotiatePort": false, + "DefaultGeolocationSetting": 1, + "PolicyDictionaryMultipleSourceMergeList": [ + "ExtensionSettings" + ], + "AllowedDomainsForApps": "managedchrome.com,example.com", + "DisableAuthNegotiateCnameLookup": false, + "IncognitoModeAvailability": 1, + "ChromeVariations": 1, + "DefaultSearchProviderNewTabURL": "https://search.my.company/newtab", + "SavingBrowserHistoryDisabled": true, + "SpellcheckEnabled": false, + "FileSystemWriteBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "BuiltInDnsClientEnabled": true, + "SSLErrorOverrideAllowedForOrigins": [ + "https://www.example.com", + "[*.]example.edu" + ], + "WebRtcIPHandling": "default", + "DefaultNotificationsSetting": 2, + "PopupsAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "TranslateEnabled": true, + "DefaultSearchProviderEncodings": [ + "UTF-8", + "UTF-16", + "GB2312", + "ISO-8859-1" + ], + "DownloadRestrictions": 2, + "PromptForDownloadLocation": false, + "DisablePrintPreview": false, + "NetworkPredictionOptions": 1, + "FileSystemReadBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "AutoOpenFileTypes": [ + "exe", + "txt" + ], + "DownloadDirectory": "/home/${user_name}/Downloads", + "ImportHomepage": true, + "GloballyScopeHTTPAuthCacheEnabled": false, + "CloudManagementEnrollmentToken": "37185d02-e055-11e7-80c1-9a214cf093ae", + "ThirdPartyBlockingEnabled": false, + "AdsSettingForIntrusiveAdsSites": 1, + "FetchKeepaliveDurationSecondsOnShutdown": 1, + "BookmarkBarEnabled": true, + "DisableScreenshots": true, + "AccessibilityImageLabelsEnabled": false, + "RemoteAccessHostAllowUiAccessForRemoteAssistance": true, + "PopupsBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "DefaultFileSystemReadGuardSetting": 2, + "BrowserSignin": 2, + "WebRtcAllowLegacyTLSProtocols": false, + "PasswordManagerEnabled": true, + "SafeBrowsingExtendedReportingEnabled": true, + "CloudPolicyOverridesPlatformPolicy": false, + "InsecurePrivateNetworkRequestsAllowedForUrls": [ + "http://www.example.com:8080", + "[*.]example.edu" + ], + "RelaunchNotification": 1, + "AlwaysOpenPdfExternally": true, + "DefaultFileHandlingGuardSetting": 2, + "ForceEphemeralProfiles": true, + "PasswordProtectionLoginURLs": [ + "https://mydomain.com/login.html", + "https://login.mydomain.com" + ], + "BrowserSwitcherExternalGreylistUrl": "http://example.com/greylist.xml", + "BrowserGuestModeEnabled": true, + "MediaRecommendationsEnabled": true, + "WebRtcLocalIpsAllowedUrls": [ + "https://www.example.com", + "*example.com*" + ], + "DeveloperToolsAvailability": 2, + "DNSInterceptionChecksEnabled": true, + "DefaultSearchProviderContextMenuAccessAllowed": true, + "RemoteAccessHostRequireCurtain": false, + "PaymentMethodQueryEnabled": true, + "HomepageLocation": "https://www.chromium.org", + "WebUsbAskForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "RemoteAccessHostAllowClientPairing": false, + "ProxySettings": { + "ProxyMode": "direct", + "ProxyPacUrl": "https://internal.site/example.pac", + "ProxyServer": "123.123.123.123:8080", + "ProxyServerMode": 2, + "ProxyBypassList": "https://www.example1.com,https://www.example2.com,https://internalsite/" + }, + "AutofillCreditCardEnabled": false, + "FileHandlingAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "ChromeCleanupReportingEnabled": true, + "AlternateErrorPagesEnabled": true, + "WebRtcEventLogCollectionAllowed": true, + "AutoSelectCertificateForUrls": [ + "{\\"pattern\\":\\"https://www.example.com\\",\\"filter\\":{\\"ISSUER\\":{\\"CN\\":\\"certificate issuer name\\", \\"L\\": \\"certificate issuer location\\", \\"O\\": \\"certificate issuer org\\", \\"OU\\": \\"certificate issuer org unit\\"}, \\"SUBJECT\\":{\\"CN\\":\\"certificate subject name\\", \\"L\\": \\"certificate subject location\\", \\"O\\": \\"certificate subject org\\", \\"OU\\": \\"certificate subject org unit\\"}}}" + ], + "PolicyListMultipleSourceMergeList": [ + "ExtensionInstallAllowlist", + "ExtensionInstallBlocklist" + ], + "CertificateTransparencyEnforcementDisabledForCas": [ + "sha256/AAAAAAAAAAAAAAAAAAAAAA==", + "sha256//////////////////////w==" + ], + "CookiesSessionOnlyForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "SitePerProcess": true, + "RemoteAccessHostFirewallTraversal": false, + "DefaultSearchProviderSuggestURLPostParams": "q={searchTerms},ie=utf-8,oe=utf-8", + "BackgroundModeEnabled": true, + "DefaultJavaScriptSetting": 1, + "ForcedLanguages": [ + "en-US" + ], + "ManagedBookmarks": [ + { + "toplevel_name": "My managed bookmarks folder" + }, + { + "url": "google.com", + "name": "Google" + }, + { + "url": "youtube.com", + "name": "Youtube" + }, + { + "children": [ + { + "url": "chromium.org", + "name": "Chromium" + }, + { + "url": "dev.chromium.org", + "name": "Chromium Developers" + } + ], + "name": "Chrome links" + } + ], + "Disable3DAPIs": false, + "CloudPrintSubmitEnabled": true, + "DefaultCookiesSetting": 1, + "ExtensionInstallBlocklist": [ + "extension_id1", + "extension_id2" + ], + "URLAllowlist": [ + "example.com", + "https://ssl.server.com", + "hosting.com/good_path", + "https://server:8080/path", + ".exact.hostname.com" + ], + "ExplicitlyAllowedNetworkPorts": [ + "10080" + ], + "HomepageIsNewTabPage": true, + "SensorsBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "BrowserLabsEnabled": false, + "NotificationsAllowedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "NativeMessagingUserLevelHosts": false, + "AuthNegotiateDelegateAllowlist": "foobar.example.com", + "CloudUserPolicyMerge": true, + "OverrideSecurityRestrictionsOnInsecureOrigin": [ + "http://testserver.example.com/", + "*.example.org" + ], + "HideWebStoreIcon": true, + "SafeBrowsingForTrustedSourcesEnabled": false, + "NewTabPageLocation": "https://www.chromium.org", + "DiskCacheSize": 104857600, + "BrowserSwitcherUseIeSitelist": true, + "WebRtcUdpPortRange": "10000-11999", + "EnterpriseHardwarePlatformAPIEnabled": true, + "AutoOpenAllowedForURLs": [ + "example.com", + "https://ssl.server.com", + "hosting.com/good_path", + "https://server:8080/path", + ".exact.hostname.com" + ], + "NativeMessagingAllowlist": [ + "com.native.messaging.host.name1", + "com.native.messaging.host.name2" + ], + "DefaultSearchProviderName": "My Intranet Search", + "JavaScriptBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "EnableExperimentalPolicies": [ + "ExtensionInstallAllowlist", + "ExtensionInstallBlocklist" + ], + "SafeBrowsingAllowlistDomains": [ + "mydomain.com", + "myuniversity.edu" + ], + "AutofillAddressEnabled": false, + "AllowCrossOriginAuthPrompt": false, + "SpellcheckLanguage": [ + "fr", + "es" + ], + "VideoCaptureAllowed": false, + "ScreenCaptureAllowed": false, + "VideoCaptureAllowedUrls": [ + "https://www.example.com/", + "https://[*.]example.edu/" + ], + "ImportHistory": true, + "ShowCastIconInToolbar": false, + "RestoreOnStartupURLs": [ + "https://example.com", + "https://www.chromium.org" + ], + "LegacySameSiteCookieBehaviorEnabledForDomainList": [ + "www.example.com", + "[*.]example.edu" + ], + "PrintingEnabled": true, + "ImportSavedPasswords": true, + "EnableDeprecatedPrivetPrinting": true, + "InsecurePrivateNetworkRequestsAllowed": false, + "HeadlessMode": 2, + "PolicyAtomicGroupsEnabled": true, + "HardwareAccelerationModeEnabled": true, + "AllowDeletingBrowserHistory": true, + "DefaultSearchProviderKeyword": "mis", + "ExtensionInstallAllowlist": [ + "extension_id1", + "extension_id2" + ], + "WebAppInstallForceList": [ + { + "url": "https://www.google.com/maps", + "create_desktop_shortcut": true, + "default_launch_container": "window" + }, + { + "url": "https://docs.google.com", + "default_launch_container": "tab" + }, + { + "url": "https://docs.google.com/editor", + "fallback_app_name": "Editor", + "default_launch_container": "window" + } + ], + "DiskCacheDir": "${user_home}/Chrome_cache", + "SignedHTTPExchangeEnabled": true, + "SearchSuggestEnabled": true, + "BrowserThemeColor": "#FFFFFF", + "RestrictSigninToPattern": ".*@example\\\\.com", + "DefaultInsecureContentSetting": 2, + "DefaultSensorsSetting": 2, + "AudioSandboxEnabled": true, + "RemoteAccessHostAllowRelayedConnection": false, + "RoamingProfileLocation": "${roaming_app_data}\\\\chrome-profile", + "UserAgentClientHintsEnabled": true, + "TargetBlankImpliesNoOpener": false, + "BrowserSwitcherKeepLastChromeTab": false, + "RemoteAccessHostClientDomainList": [ + "my-awesome-domain.com", + "my-auxiliary-domain.com" + ], + "NotificationsBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "SerialBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "DefaultImagesSetting": 1, + "SigninInterceptionEnabled": true, + "WebUsbBlockedForUrls": [ + "https://www.example.com", + "[*.]example.edu" + ], + "ImportAutofillFormData": true, + "BrowserSwitcherEnabled": true +} +""" + +chromium_json_expected_recommended = \ +b""" +{ + "BackgroundModeEnabled": true, + "RestoreOnStartup": 4, + "RegisteredProtocolHandlers": [ + { + "default": true, + "url": "https://mail.google.com/mail/?extsrc=mailto&url=%s", + "protocol": "mailto" + } + ], + "ShowHomeButton": true, + "PrintHeaderFooter": false, + "SafeBrowsingForTrustedSourcesEnabled": false, + "ShowFullUrlsInAddressBar": false, + "MetricsReportingEnabled": true, + "SpellCheckServiceEnabled": false, + "ImportSearchEngine": true, + "DownloadRestrictions": 2, + "NetworkPredictionOptions": 1, + "DownloadDirectory": "/home/${user_name}/Downloads", + "TranslateEnabled": true, + "AutofillAddressEnabled": false, + "BookmarkBarEnabled": true, + "PrintPreviewUseSystemDefaultPrinter": false, + "ApplicationLocaleValue": "en", + "ImportHistory": true, + "RestoreOnStartupURLs": [ + "https://example.com", + "https://www.chromium.org" + ], + "PasswordManagerEnabled": true, + "ImportSavedPasswords": true, + "DefaultDownloadDirectory": "/home/${user_name}/Downloads", + "PasswordLeakDetectionEnabled": true, + "SearchSuggestEnabled": true, + "AlternateErrorPagesEnabled": true, + "HomepageIsNewTabPage": true, + "ImportAutofillFormData": true, + "BlockThirdPartyCookies": false, + "AutofillCreditCardEnabled": false, + "HomepageLocation": "https://www.chromium.org", + "SafeBrowsingProtectionLevel": 2, + "ImportBookmarks": true +} +""" + def days2rel_nttime(val): seconds = 60 minutes = 60 @@ -3781,3 +8729,79 @@ class GPOTests(tests.TestCase): # Unstage the Registry.pol file unstage_file(reg_pol) + + def test_gp_chromium_ext(self): + local_path = self.lp.cache_path('gpo_cache') + guid = '{31B2F340-016D-11D2-945F-00C04FB984F9}' + reg_pol = os.path.join(local_path, policies, guid, + 'MACHINE/REGISTRY.POL') + logger = logging.getLogger('gpo_tests') + cache_dir = self.lp.get('cache directory') + store = GPOStorage(os.path.join(cache_dir, 'gpo.tdb')) + + machine_creds = Credentials() + machine_creds.guess(self.lp) + machine_creds.set_machine_account() + + # Initialize the group policy extension + ext = gp_chromium_ext(logger, self.lp, machine_creds, + machine_creds.get_username(), store) + + ads = gpo.ADS_STRUCT(self.server, self.lp, machine_creds) + if ads.connect(): + gpos = ads.get_gpo_list(machine_creds.get_username()) + + # Stage the Registry.pol file with test data + parser = GPPolParser() + parser.load_xml(etree.fromstring(chromium_reg_pol.strip())) + ret = stage_file(reg_pol, ndr_pack(parser.pol_file)) + self.assertTrue(ret, 'Could not create the target %s' % reg_pol) + + with TemporaryDirectory() as dname: + ext.process_group_policy([], gpos, dname) + managed = os.path.join(dname, 'managed', 'policies.json') + self.assertTrue(os.path.exists(managed), + 'Chromium policies are missing') + with open(managed, 'r') as r: + managed_data = json.load(r) + recommended = os.path.join(dname, 'recommended', 'policies.json') + self.assertTrue(os.path.exists(recommended), + 'Chromium policies are missing') + with open(recommended, 'r') as r: + recommended_data = json.load(r) + expected_managed_data = json.loads(chromium_json_expected_managed) + expected_recommended_data = \ + json.loads(chromium_json_expected_recommended) + self.assertEqual(expected_managed_data.keys(), + managed_data.keys(), + 'Chromium policies are missing') + for name in expected_managed_data.keys(): + self.assertEqual(expected_managed_data[name], + managed_data[name], + 'Policies were not applied') + self.assertEqual(expected_recommended_data.keys(), + recommended_data.keys(), + 'Chromium policies are missing') + for name in expected_recommended_data.keys(): + self.assertEqual(expected_recommended_data[name], + recommended_data[name], + 'Policies were not applied') + + # Verify RSOP does not fail + ext.rsop([g for g in gpos if g.name == guid][0]) + + # Unapply the policy + gp_db = store.get_gplog(machine_creds.get_username()) + del_gpos = get_deleted_gpos_list(gp_db, []) + ext.process_group_policy(del_gpos, [], dname) + if os.path.exists(managed): + data = json.load(open(managed, 'r')) + self.assertEqual(len(data.keys()), 0, + 'The policy was not unapplied') + if os.path.exists(recommended): + data = json.load(open(recommended, 'r')) + self.assertEqual(len(data.keys()), 0, + 'The policy was not unapplied') + + # Unstage the Registry.pol file + unstage_file(reg_pol) diff --git a/selftest/knownfail.d/gpo b/selftest/knownfail.d/gpo new file mode 100644 index 00000000000..9be3c7d2eb1 --- /dev/null +++ b/selftest/knownfail.d/gpo @@ -0,0 +1 @@ +^samba.tests.gpo.samba.tests.gpo.GPOTests.test_gp_chromium_ext