Get advanced security protections with Chrome Enterprise Premium. Learn more.
-
Chrome 134 (Beta)
-
Chrome 133
-
Chrome 132
-
Chrome 131
-
Chrome 130
-
Chrome 129
-
Chrome 128
-
Chrome 127
-
Chrome 126
-
Chrome 125
-
Chrome 124
-
Chrome 123
Accessibility settings
- AccessibilityShortcutsEnabled
- AutoclickEnabled
- CaretHighlightEnabled
- ColorCorrectionEnabled
- CursorHighlightEnabled
- DeviceLoginScreenAccessibilityShortcutsEnabled
- DeviceLoginScreenAutoclickEnabled
- DeviceLoginScreenCaretHighlightEnabled
- DeviceLoginScreenCursorHighlightEnabled
- DeviceLoginScreenDefaultHighContrastEnabled
- DeviceLoginScreenDefaultLargeCursorEnabled
- DeviceLoginScreenDefaultScreenMagnifierType
- DeviceLoginScreenDefaultSpokenFeedbackEnabled
- DeviceLoginScreenDictationEnabled
- DeviceLoginScreenHighContrastEnabled
- DeviceLoginScreenKeyboardFocusHighlightEnabled
- DeviceLoginScreenLargeCursorEnabled
- DeviceLoginScreenMonoAudioEnabled
- DeviceLoginScreenScreenMagnifierType
- DeviceLoginScreenSelectToSpeakEnabled
- DeviceLoginScreenShowOptionsInSystemTrayMenu
- DeviceLoginScreenSpokenFeedbackEnabled
- DeviceLoginScreenStickyKeysEnabled
- DeviceLoginScreenVirtualKeyboardEnabled
- DictationEnabled
- EnhancedNetworkVoicesInSelectToSpeakAllowed
- FloatingAccessibilityMenuEnabled
- HighContrastEnabled
- KeyboardDefaultToFunctionKeys
- KeyboardFocusHighlightEnabled
- LargeCursorEnabled
- LiveTranslateEnabled
- MonoAudioEnabled
- ScreenMagnifierType
- SelectToSpeakEnabled
- ShowAccessibilityOptionsInSystemTrayMenu
- SpokenFeedbackEnabled
- StickyKeysEnabled
- UiAutomationProviderEnabled
- VirtualKeyboardEnabled
- VirtualKeyboardFeatures
Allow or deny screen capture
Android settings
Borealis
Certificate management settings
Class management tools Settings
Cloud Reporting
CloudUpload
Content settings
- AutoSelectCertificateForUrls
- AutomaticFullscreenAllowedForUrls
- AutomaticFullscreenBlockedForUrls
- ClipboardAllowedForUrls
- ClipboardBlockedForUrls
- CookiesAllowedForUrls
- CookiesBlockedForUrls
- CookiesSessionOnlyForUrls
- DataUrlInSvgUseEnabled
- DefaultClipboardSetting
- DefaultCookiesSetting
- DefaultDirectSocketsSetting
- DefaultFileSystemReadGuardSetting
- DefaultFileSystemWriteGuardSetting
- DefaultGeolocationSetting
- DefaultImagesSetting
- DefaultInsecureContentSetting
- DefaultJavaScriptJitSetting
- DefaultJavaScriptOptimizerSetting
- DefaultJavaScriptSetting
- DefaultLocalFontsSetting
- DefaultNotificationsSetting
- DefaultPopupsSetting
- DefaultSensorsSetting
- DefaultSerialGuardSetting
- DefaultThirdPartyStoragePartitioningSetting
- DefaultWebBluetoothGuardSetting
- DefaultWebHidGuardSetting
- DefaultWebUsbGuardSetting
- DefaultWindowManagementSetting
- DirectSocketsAllowedForUrls
- DirectSocketsBlockedForUrls
- FileSystemReadAskForUrls
- FileSystemReadBlockedForUrls
- FileSystemWriteAskForUrls
- FileSystemWriteBlockedForUrls
- GetDisplayMediaSetSelectAllScreensAllowedForUrls
- ImagesAllowedForUrls
- ImagesBlockedForUrls
- InsecureContentAllowedForUrls
- InsecureContentBlockedForUrls
- JavaScriptAllowedForUrls
- JavaScriptBlockedForUrls
- JavaScriptJitAllowedForSites
- JavaScriptJitBlockedForSites
- JavaScriptOptimizerAllowedForSites
- JavaScriptOptimizerBlockedForSites
- LocalFontsAllowedForUrls
- LocalFontsBlockedForUrls
- NotificationsAllowedForUrls
- NotificationsBlockedForUrls
- PdfLocalFileAccessAllowedForDomains
- PopupsAllowedForUrls
- PopupsBlockedForUrls
- RegisteredProtocolHandlers
- SensorsAllowedForUrls
- SensorsBlockedForUrls
- SerialAllowAllPortsForUrls
- SerialAllowUsbDevicesForUrls
- SerialAskForUrls
- SerialBlockedForUrls
- ThirdPartyStoragePartitioningBlockedForOrigins
- WebHidAllowAllDevicesForUrls
- WebHidAllowDevicesForUrls
- WebHidAllowDevicesWithHidUsagesForUrls
- WebHidAskForUrls
- WebHidBlockedForUrls
- WebUsbAllowDevicesForUrls
- WebUsbAskForUrls
- WebUsbBlockedForUrls
- WindowManagementAllowedForUrls
- WindowManagementBlockedForUrls
Date and time
Default search provider
- DefaultSearchProviderAlternateURLs
- DefaultSearchProviderEnabled
- DefaultSearchProviderEncodings
- DefaultSearchProviderImageURL
- DefaultSearchProviderImageURLPostParams
- DefaultSearchProviderKeyword
- DefaultSearchProviderName
- DefaultSearchProviderNewTabURL
- DefaultSearchProviderSearchURL
- DefaultSearchProviderSearchURLPostParams
- DefaultSearchProviderSuggestURL
- DefaultSearchProviderSuggestURLPostParams
Desk Connector Settings
Device update settings
- ChromeOsReleaseChannel
- ChromeOsReleaseChannelDelegated
- DeviceAutoUpdateDisabled
- DeviceAutoUpdateP2PEnabled
- DeviceAutoUpdateTimeRestrictions
- DeviceExtendedAutoUpdateEnabled
- DeviceMinimumVersion
- DeviceMinimumVersionAueMessage
- DeviceQuickFixBuildToken
- DeviceRollbackAllowedMilestones
- DeviceRollbackToTargetVersion
- DeviceTargetVersionPrefix
- DeviceUpdateAllowedConnectionTypes
- DeviceUpdateHttpDownloadsEnabled
- DeviceUpdateScatterFactor
- DeviceUpdateStagingSchedule
- RebootAfterUpdate
Drive
EDU settings
Extensions
- BlockExternalExtensions
- DeviceLoginScreenExtensionManifestV2Availability
- ExtensionAllowedTypes
- ExtensionDeveloperModeSettings
- ExtensionExtendedBackgroundLifetimeForPortConnectionsToUrls
- ExtensionInstallAllowlist
- ExtensionInstallBlocklist
- ExtensionInstallForcelist
- ExtensionInstallSources
- ExtensionInstallTypeBlocklist
- ExtensionManifestV2Availability
- ExtensionOAuthRedirectUrls
- ExtensionSettings
- ExtensionUnpublishedAvailability
- MandatoryExtensionsForIncognitoNavigation
First-Party Sets Settings
Gaia user identity management settings
Generative AI
Google Assistant
Google Cast
HTTP authentication
- AllHttpAuthSchemesAllowedForOrigins
- AllowCrossOriginAuthPrompt
- AuthAndroidNegotiateAccountType
- AuthNegotiateDelegateAllowlist
- AuthNegotiateDelegateByKdcPolicy
- AuthSchemes
- AuthServerAllowlist
- BasicAuthOverHttpEnabled
- DisableAuthNegotiateCnameLookup
- EnableAuthNegotiatePort
- GSSAPILibraryName
- NtlmV2Enabled
Idle Browser Actions
Kerberos
Kiosk settings
- AllowKioskAppControlChromeVersion
- DeviceLocalAccountAutoLoginBailoutEnabled
- DeviceLocalAccountAutoLoginDelay
- DeviceLocalAccountAutoLoginId
- DeviceLocalAccountPromptForNetworkWhenOffline
- DeviceLocalAccounts
- DeviceWeeklyScheduledSuspend
- KioskActiveWiFiCredentialsScopeChangeEnabled
- KioskTroubleshootingToolsEnabled
- KioskWebAppOfflineEnabled
- NewWindowsInKioskAllowed
Legacy Browser Support
- AlternativeBrowserParameters
- AlternativeBrowserPath
- BrowserSwitcherChromeParameters
- BrowserSwitcherChromePath
- BrowserSwitcherDelay
- BrowserSwitcherEnabled
- BrowserSwitcherExternalGreylistUrl
- BrowserSwitcherExternalSitelistUrl
- BrowserSwitcherKeepLastChromeTab
- BrowserSwitcherParsingMode
- BrowserSwitcherUrlGreylist
- BrowserSwitcherUrlList
- BrowserSwitcherUseIeSitelist
Linux container
Local user data storage
Microsoft® Active Directory® management settings
Miscellaneous
- AbusiveExperienceInterventionEnforce
- AccessibilityImageLabelsEnabled
- AccessibilityPerformanceFilteringAllowed
- AdHocCodeSigningForPWAsEnabled
- AdditionalDnsQueryTypesEnabled
- AdsSettingForIntrusiveAdsSites
- AdvancedProtectionAllowed
- AllowBackForwardCacheForCacheControlNoStorePageEnabled
- AllowChromeDataInBackups
- AllowDeletingBrowserHistory
- AllowDinosaurEasterEgg
- AllowExcludeDisplayInMirrorMode
- AllowFileSelectionDialogs
- AllowScreenLock
- AllowSystemNotifications
- AllowWebAuthnWithBrokenTlsCerts
- AllowedDomainsForApps
- AllowedInputMethods
- AllowedInputMethodsForceEnabled
- AllowedLanguages
- AlternateErrorPagesEnabled
- AlwaysOnVpnPreConnectUrlAllowlist
- AlwaysOpenPdfExternally
- AmbientAuthenticationInPrivateModesEnabled
- AppLaunchAutomation
- AppStoreRatingEnabled
- ApplicationBoundEncryptionEnabled
- ApplicationLocaleValue
- ArcVmDataMigrationStrategy
- AudioCaptureAllowed
- AudioCaptureAllowedUrls
- AudioOutputAllowed
- AudioProcessHighPriorityEnabled
- AudioSandboxEnabled
- AutoLaunchProtocolsFromOrigins
- AutoOpenAllowedForURLs
- AutoOpenFileTypes
- AutofillAddressEnabled
- AutofillCreditCardEnabled
- AutoplayAllowed
- AutoplayAllowlist
- BackForwardCacheEnabled
- BackgroundModeEnabled
- BatterySaverModeAvailability
- BlockThirdPartyCookies
- BookmarkBarEnabled
- BrowserAddPersonEnabled
- BrowserContextAwareAccessSignalsAllowlist
- BrowserGuestModeEnabled
- BrowserGuestModeEnforced
- BrowserLabsEnabled
- BrowserLegacyExtensionPointsBlocked
- BrowserNetworkTimeQueriesEnabled
- BrowserSignin
- BrowserThemeColor
- BrowsingDataLifetime
- BuiltInDnsClientEnabled
- CORSNonWildcardRequestHeadersSupport
- CaptivePortalAuthenticationIgnoresProxy
- CertificateTransparencyEnforcementDisabledForCas
- CertificateTransparencyEnforcementDisabledForUrls
- ChromeForTestingAllowed
- ChromeOsLockOnIdleSuspend
- ChromeOsMultiProfileUserBehavior
- ChromeVariations
- ClearBrowsingDataOnExitList
- ClickToCallEnabled
- ClientCertificateManagementAllowed
- CloudManagementEnrollmentMandatory
- CloudManagementEnrollmentToken
- CloudPolicyOverridesPlatformPolicy
- CloudUserPolicyMerge
- CloudUserPolicyOverridesCloudMachinePolicy
- CommandLineFlagSecurityWarningsEnabled
- ComponentUpdatesEnabled
- ContextMenuPhotoSharingSettings
- ContextualGoogleIntegrationsConfiguration
- ContextualGoogleIntegrationsEnabled
- ContextualSearchEnabled
- CreatePasskeysInICloudKeychain
- CredentialProviderPromoEnabled
- DNSInterceptionChecksEnabled
- DataControlsRules
- DataLeakPreventionClipboardCheckSizeLimit
- DataLeakPreventionReportingEnabled
- DataLeakPreventionRulesList
- DefaultBrowserSettingEnabled
- DefaultDownloadDirectory
- DefaultHandlersForFileExtensions
- DefaultSearchProviderContextMenuAccessAllowed
- DeleteKeyModifier
- DesktopSharingHubEnabled
- DeveloperToolsAvailability
- DeviceAllowBluetooth
- DeviceAllowEnterpriseRemoteAccessConnections
- DeviceAllowMGSToStoreDisplayProperties
- DeviceAllowRedeemChromeOsRegistrationOffers
- DeviceAllowedBluetoothServices
- DeviceAttributesAllowedForOrigins
- DeviceAuthenticationURLAllowlist
- DeviceAuthenticationURLBlocklist
- DeviceBlockDevmode
- DeviceChromeVariations
- DeviceDebugPacketCaptureAllowed
- DeviceDlcPredownloadList
- DeviceEncryptedReportingPipelineEnabled
- DeviceEphemeralNetworkPoliciesEnabled
- DeviceHardwareVideoDecodingEnabled
- DeviceI18nShortcutsEnabled
- DeviceKeyboardBacklightColor
- DeviceKeylockerForStorageEncryptionEnabled
- DeviceLoginScreenContextAwareAccessSignalsAllowlist
- DeviceLoginScreenPrimaryMouseButtonSwitch
- DeviceLoginScreenWebHidAllowDevicesForUrls
- DeviceLoginScreenWebUsbAllowDevicesForUrls
- DeviceNativeClientForceAllowed
- DeviceOffHours
- DevicePciPeripheralDataAccessEnabled
- DevicePolicyRefreshRate
- DevicePostQuantumKeyAgreementEnabled
- DevicePowerwashAllowed
- DeviceQuirksDownloadEnabled
- DeviceRebootOnUserSignout
- DeviceReleaseLtsTag
- DeviceRestrictedManagedGuestSessionEnabled
- DeviceRestrictionSchedule
- DeviceScheduledReboot
- DeviceScheduledUpdateCheck
- DeviceShowLowDiskSpaceNotification
- DeviceSwitchFunctionKeysBehaviorEnabled
- DeviceSystemWideTracingEnabled
- Disable3DAPIs
- DisableScreenshots
- DiskCacheDir
- DiskCacheSize
- DnsOverHttpsMode
- DnsOverHttpsTemplates
- DocumentScanAPITrustedExtensions
- DomainReliabilityAllowed
- DownloadDirectory
- DownloadManagerSaveToDriveSettings
- DownloadRestrictions
- DynamicCodeSettings
- EasyUnlockAllowed
- EcheAllowed
- EditBookmarksEnabled
- EmojiPickerGifSupportEnabled
- EmojiSuggestionEnabled
- EnableExperimentalPolicies
- EnableOnlineRevocationChecks
- EnableSyncConsent
- EncryptedClientHelloEnabled
- EnterpriseAuthenticationAppLinkPolicy
- EnterpriseCustomLabel
- EnterpriseHardwarePlatformAPIEnabled
- EnterpriseLogoUrl
- EnterpriseProfileBadgeToolbarSettings
- EnterpriseProfileCreationKeepBrowsingData
- EnterpriseRealTimeUrlCheckMode
- EssentialSearchEnabled
- ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
- ExplicitlyAllowedNetworkPorts
- ExtensionCacheSize
- ExternalProtocolDialogShowAlwaysOpenCheckbox
- ExternalStorageDisabled
- ExternalStorageReadOnly
- F11KeyModifier
- F12KeyModifier
- FastPairEnabled
- FeedbackSurveysEnabled
- FetchKeepaliveDurationSecondsOnShutdown
- FileOrDirectoryPickerWithoutGestureAllowedForOrigins
- FilePickerChooseFromDriveSettings
- FloatingWorkspaceEnabled
- FocusModeSoundsEnabled
- ForceEphemeralProfiles
- ForceGoogleSafeSearch
- ForceLogoutUnauthenticatedUserEnabled
- ForceMaximizeOnFirstRun
- ForcePermissionPolicyUnloadDefaultEnabled
- ForceYouTubeRestrict
- ForcedLanguages
- FullRestoreEnabled
- FullRestoreMode
- FullscreenAlertEnabled
- FullscreenAllowed
- GaiaLockScreenOfflineSigninTimeLimitDays
- GhostWindowEnabled
- GloballyScopeHTTPAuthCacheEnabled
- GoogleSearchSidePanelEnabled
- HSTSPolicyBypassList
- HardwareAccelerationModeEnabled
- HeadlessMode
- HideWebStoreIcon
- HighEfficiencyModeEnabled
- HistoryClustersVisible
- HomeAndEndKeysModifier
- HttpAllowlist
- HttpsOnlyMode
- HttpsUpgradesEnabled
- ImportAutofillFormData
- ImportBookmarks
- ImportHistory
- ImportHomepage
- ImportSavedPasswords
- ImportSearchEngine
- IncognitoModeAvailability
- InsertKeyModifier
- InsightsExtensionEnabled
- InstantTetheringAllowed
- IntensiveWakeUpThrottlingEnabled
- IntranetRedirectBehavior
- IsolateOrigins
- IsolateOriginsAndroid
- IsolatedWebAppInstallForceList
- KeepFullscreenWithoutNotificationUrlAllowList
- KeyPermissions
- KeyboardFocusableScrollersEnabled
- KioskBrowserPermissionsAllowedForOrigins
- LensCameraAssistedSearchEnabled
- LensDesktopNTPSearchEnabled
- LensOnGalleryEnabled
- LensOverlaySettings
- LensRegionSearchEnabled
- ListenToThisPageEnabled
- LockScreenAutoStartOnlineReauth
- LockScreenMediaPlaybackEnabled
- LoginDisplayPasswordButtonEnabled
- LookalikeWarningAllowlistDomains
- ManagedAccountsSigninRestriction
- ManagedBookmarks
- ManagedConfigurationPerOrigin
- ManagedGuestSessionPrivacyWarningsEnabled
- MaxConnectionsPerProxy
- MaxInvalidationFetchDelay
- MediaRecommendationsEnabled
- MemorySaverModeSavings
- MetricsReportingEnabled
- NTPCardsVisible
- NTPContentSuggestionsEnabled
- NTPCustomBackgroundEnabled
- NTPMiddleSlotAnnouncementVisible
- NativeHostsExecutablesLaunchDirectly
- NearbyShareAllowed
- NetworkPredictionOptions
- NetworkServiceSandboxEnabled
- NoteTakingAppsLockScreenAllowlist
- OnBulkDataEntryEnterpriseConnector
- OnFileAttachedEnterpriseConnector
- OnFileDownloadedEnterpriseConnector
- OnFileTransferEnterpriseConnector
- OnPrintEnterpriseConnector
- OnSecurityEventEnterpriseConnector
- OpenNetworkConfiguration
- OrcaEnabled
- OriginAgentClusterDefaultEnabled
- OsColorMode
- OverrideSecurityRestrictionsOnInsecureOrigin
- PageUpAndPageDownKeysModifier
- ParcelTrackingEnabled
- PaymentMethodQueryEnabled
- PdfAnnotationsEnabled
- PdfUseSkiaRendererEnabled
- PdfViewerOutOfProcessIframeEnabled
- PhoneHubAllowed
- PhoneHubCameraRollAllowed
- PhoneHubNotificationsAllowed
- PhoneHubTaskContinuationAllowed
- PhysicalKeyboardAutocorrect
- PhysicalKeyboardPredictiveWriting
- PinnedLauncherApps
- PolicyAtomicGroupsEnabled
- PolicyDictionaryMultipleSourceMergeList
- PolicyListMultipleSourceMergeList
- PolicyRefreshRate
- PostQuantumKeyAgreementEnabled
- PrimaryMouseButtonSwitch
- ProfilePickerOnStartupAvailability
- ProfileReauthPrompt
- PromotionsEnabled
- PromptForDownloadLocation
- PromptOnMultipleMatchingCertificates
- ProvisionManagedClientCertificateForUser
- ProxySettings
- QRCodeGeneratorEnabled
- QuicAllowed
- QuickOfficeForceFileDownloadEnabled
- RelaunchHeadsUpPeriod
- RelaunchNotification
- RelaunchNotificationPeriod
- RelaunchWindow
- RemoteDebuggingAllowed
- RendererAppContainerEnabled
- ReportCrostiniUsageEnabled
- RequireOnlineRevocationChecksForLocalAnchors
- RestrictAccountsToPatterns
- RestrictSigninToPattern
- RestrictedManagedGuestSessionExtensionCleanupExemptList
- RoamingProfileLocation
- RoamingProfileSupportEnabled
- SSLErrorOverrideAllowed
- SSLErrorOverrideAllowedForOrigins
- SafeBrowsingForTrustedSourcesEnabled
- SafeSitesFilterBehavior
- SamlLockScreenOfflineSigninTimeLimitDays
- SandboxExternalProtocolBlocked
- SavingBrowserHistoryDisabled
- SchedulerConfiguration
- ScreenCaptureLocation
- ScreenCaptureWithoutGestureAllowedForOrigins
- ScrollToTextFragmentEnabled
- SearchSuggestEnabled
- SecondaryGoogleAccountSigninAllowed
- SecurityKeyPermitAttestation
- SecurityTokenSessionBehavior
- SecurityTokenSessionNotificationSeconds
- SelectParserRelaxationEnabled
- SessionLengthLimit
- SessionLocales
- SharedArrayBufferUnrestrictedAccessAllowed
- SharedClipboardEnabled
- SharedWorkerBlobURLFixEnabled
- ShelfAlignment
- ShelfAutoHideBehavior
- ShoppingListEnabled
- ShortcutCustomizationAllowed
- ShowAiIntroScreenEnabled
- ShowAppsShortcutInBookmarkBar
- ShowDisplaySizeScreenEnabled
- ShowFullUrlsInAddressBar
- ShowGeminiIntroScreenEnabled
- ShowLogoutButtonInTray
- ShowTouchpadScrollScreenEnabled
- SideSearchEnabled
- SignedHTTPExchangeEnabled
- SigninInterceptionEnabled
- SitePerProcess
- SitePerProcessAndroid
- SiteSearchSettings
- SmsMessagesAllowed
- SpellCheckServiceEnabled
- SpellcheckEnabled
- SpellcheckLanguage
- SpellcheckLanguageBlocklist
- StandardizedBrowserZoomEnabled
- StartupBrowserWindowLaunchSuppressed
- StrictMimetypeCheckForWorkerScriptsEnabled
- SubAppsAPIsAllowedWithoutGestureAndAuthorizationForOrigins
- SuggestLogoutAfterClosingLastWindow
- SuggestedContentEnabled
- SuppressDifferentOriginSubframeDialogs
- SuppressUnsupportedOSWarning
- SyncDisabled
- SyncTypesListDisabled
- SystemFeaturesDisableList
- SystemFeaturesDisableMode
- SystemProxySettings
- SystemShortcutBehavior
- TPMFirmwareUpdateSettings
- TabDiscardingExceptions
- TaskManagerEndProcessEnabled
- TermsOfServiceURL
- TosDialogBehavior
- TotalMemoryLimitMb
- TouchVirtualKeyboardEnabled
- TranslateEnabled
- TranslatorAPIAllowed
- TrashEnabled
- URLAllowlist
- URLBlocklist
- UnifiedDesktopEnabledByDefault
- UnmanagedDeviceSignalsConsentFlowEnabled
- UrlKeyedAnonymizedDataCollectionEnabled
- UsbDetachableAllowlist
- UsbDetectorNotificationEnabled
- UserAgentReduction
- UserAvatarCustomizationSelectorsEnabled
- UserAvatarImage
- UserContextAwareAccessSignalsAllowlist
- UserDataDir
- UserDataSnapshotRetentionLimit
- UserDisplayName
- UserFeedbackAllowed
- VideoCaptureAllowed
- VideoCaptureAllowedUrls
- VirtualKeyboardResizesLayoutByDefault
- VirtualKeyboardSmartVisibilityEnabled
- VmManagementCliAllowed
- VpnConfigAllowed
- WPADQuickCheckEnabled
- WallpaperGooglePhotosIntegrationEnabled
- WallpaperImage
- WarnBeforeQuittingEnabled
- WebAnnotations
- WebAppInstallForceList
- WebAppSettings
- WebAudioOutputBufferingEnabled
- WebAuthnFactors
- WebRtcEventLogCollectionAllowed
- WebRtcLocalIpsAllowedUrls
- WebRtcTextLogCollectionAllowed
- WebRtcUdpPortRange
- WebXRImmersiveArEnabled
- WifiSyncAndroidAllowed
- WindowOcclusionEnabled
Network File Shares settings
Network settings
- AccessControlAllowMethodsInCORSPreflightSpecConformant
- CompressionDictionaryTransportEnabled
- DataURLWhitespacePreservationEnabled
- DeviceDataRoamingEnabled
- DeviceDockMacAddressSource
- DeviceHostnameTemplate
- DeviceHostnameUserConfigurable
- DeviceOpenNetworkConfiguration
- DeviceWiFiAllowed
- DeviceWiFiFastTransitionEnabled
- DnsOverHttpsExcludedDomains
- DnsOverHttpsIncludedDomains
- DnsOverHttpsSalt
- DnsOverHttpsTemplatesWithIdentifiers
- IPv6ReachabilityOverrideEnabled
- NetworkThrottlingEnabled
- OutOfProcessSystemDnsResolutionEnabled
- ZstdContentEncodingEnabled
Parental supervision settings
Password manager
PluginVm
Power and shutdown
Power management
- AllowScreenWakeLocks
- AllowWakeLocks
- DeviceAdvancedBatteryChargeModeDayConfig
- DeviceAdvancedBatteryChargeModeEnabled
- DeviceBatteryChargeCustomStartCharging
- DeviceBatteryChargeCustomStopCharging
- DeviceBatteryChargeMode
- DeviceBootOnAcEnabled
- DeviceChargingSoundsEnabled
- DeviceLowBatterySoundEnabled
- DevicePowerAdaptiveChargingEnabled
- DevicePowerPeakShiftBatteryThreshold
- DevicePowerPeakShiftDayConfig
- DevicePowerPeakShiftEnabled
- DeviceUsbPowerShareEnabled
- LidCloseAction
- PowerManagementIdleSettings
- PowerManagementUsesAudioActivity
- PowerManagementUsesVideoActivity
- PowerSmartDimEnabled
- PresentationScreenDimDelayScale
- ScreenBrightnessPercent
- ScreenLockDelays
- UserActivityScreenDimDelayScale
- WaitForInitialUserActivity
Printing
- CloudPrintProxyEnabled
- DefaultPrinterSelection
- DeletePrintJobHistoryAllowed
- DeviceExternalPrintServers
- DeviceExternalPrintServersAllowlist
- DevicePrinters
- DevicePrintersAccessMode
- DevicePrintersAllowlist
- DevicePrintersBlocklist
- DevicePrintingClientNameTemplate
- DisablePrintPreview
- ExternalPrintServers
- ExternalPrintServersAllowlist
- OopPrintDriversAllowed
- PrintHeaderFooter
- PrintJobHistoryExpirationPeriod
- PrintPdfAsImageAvailability
- PrintPdfAsImageDefault
- PrintPostScriptMode
- PrintPreviewUseSystemDefaultPrinter
- PrintRasterizationMode
- PrintRasterizePdfDpi
- PrinterTypeDenyList
- Printers
- PrintersBulkAccessMode
- PrintersBulkAllowlist
- PrintersBulkBlocklist
- PrintersBulkConfiguration
- PrintingAPIExtensionsAllowlist
- PrintingAllowedBackgroundGraphicsModes
- PrintingAllowedColorModes
- PrintingAllowedDuplexModes
- PrintingAllowedPinModes
- PrintingBackgroundGraphicsDefault
- PrintingColorDefault
- PrintingDuplexDefault
- PrintingEnabled
- PrintingLPACSandboxEnabled
- PrintingMaxSheetsAllowed
- PrintingPaperSizeDefault
- PrintingPinDefault
- PrintingSendUsernameAndFilenameEnabled
- UserPrintersAllowed
Privacy Sandbox policies
Privacy screen settings
Private network request settings
Quick Answers
Quick unlock
Related Website Sets Settings
Remote access
- RemoteAccessHostAllowClientPairing
- RemoteAccessHostAllowEnterpriseFileTransfer
- RemoteAccessHostAllowEnterpriseRemoteSupportConnections
- RemoteAccessHostAllowFileTransfer
- RemoteAccessHostAllowPinAuthentication
- RemoteAccessHostAllowRelayedConnection
- RemoteAccessHostAllowRemoteAccessConnections
- RemoteAccessHostAllowRemoteSupportConnections
- RemoteAccessHostAllowUiAccessForRemoteAssistance
- RemoteAccessHostAllowUrlForwarding
- RemoteAccessHostClientDomainList
- RemoteAccessHostClipboardSizeBytes
- RemoteAccessHostDomainList
- RemoteAccessHostFirewallTraversal
- RemoteAccessHostMatchUsername
- RemoteAccessHostMaximumSessionDurationMinutes
- RemoteAccessHostRequireCurtain
- RemoteAccessHostUdpPortRange
Remote attestation
Safe Browsing settings
- DisableSafeBrowsingProceedAnyway
- PasswordProtectionChangePasswordURL
- PasswordProtectionLoginURLs
- PasswordProtectionWarningTrigger
- SafeBrowsingAllowlistDomains
- SafeBrowsingDeepScanningEnabled
- SafeBrowsingExtendedReportingEnabled
- SafeBrowsingProtectionLevel
- SafeBrowsingProxiedRealTimeChecksAllowed
- SafeBrowsingSurveysEnabled
Saml user identity management settings
Screensaver Settings
- DeviceScreensaverLoginScreenEnabled
- DeviceScreensaverLoginScreenIdleTimeoutSeconds
- DeviceScreensaverLoginScreenImageDisplayIntervalSeconds
- DeviceScreensaverLoginScreenImages
- ScreensaverLockScreenEnabled
- ScreensaverLockScreenIdleTimeoutSeconds
- ScreensaverLockScreenImageDisplayIntervalSeconds
- ScreensaverLockScreenImages
Sign-in settings
- BoundSessionCredentialsEnabled
- DeviceAllowNewUsers
- DeviceAuthenticationFlowAutoReloadInterval
- DeviceAutofillSAMLUsername
- DeviceEphemeralUsersEnabled
- DeviceFamilyLinkAccountsAllowed
- DeviceGuestModeEnabled
- DeviceLoginScreenAutoSelectCertificateForUrls
- DeviceLoginScreenDomainAutoComplete
- DeviceLoginScreenExtensions
- DeviceLoginScreenInputMethods
- DeviceLoginScreenLocales
- DeviceLoginScreenPromptOnMultipleMatchingCertificates
- DeviceLoginScreenSystemInfoEnforced
- DeviceRunAutomaticCleanupOnLogin
- DeviceSecondFactorAuthentication
- DeviceShowNumericKeyboardForPassword
- DeviceShowUserNamesOnSignin
- DeviceTransferSAMLCookies
- DeviceUserAllowlist
- DeviceWallpaperImage
- LoginAuthenticationBehavior
- LoginVideoCaptureAllowedUrls
- ProfileSeparationDataMigrationSettings
- ProfileSeparationDomainExceptionList
- ProfileSeparationSettings
- RecoveryFactorBehavior
Startup, Home page and New Tab page
User and device reporting
- DeviceActivityHeartbeatEnabled
- DeviceExtensionsSystemLogEnabled
- DeviceFlexHwDataForProductImprovementEnabled
- DeviceMetricsReportingEnabled
- DeviceReportNetworkEvents
- DeviceReportRuntimeCounters
- DeviceReportXDREvents
- HeartbeatEnabled
- HeartbeatFrequency
- LogUploadEnabled
- ReportAppInventory
- ReportAppUsage
- ReportArcStatusEnabled
- ReportCRDSessions
- ReportDeviceActivityTimes
- ReportDeviceAppInfo
- ReportDeviceAudioStatus
- ReportDeviceBacklightInfo
- ReportDeviceBluetoothInfo
- ReportDeviceBoardStatus
- ReportDeviceBootMode
- ReportDeviceCpuInfo
- ReportDeviceCrashReportInfo
- ReportDeviceFanInfo
- ReportDeviceGraphicsStatus
- ReportDeviceLoginLogout
- ReportDeviceMemoryInfo
- ReportDeviceNetworkConfiguration
- ReportDeviceNetworkStatus
- ReportDeviceOsUpdateStatus
- ReportDevicePeripherals
- ReportDevicePowerStatus
- ReportDevicePrintJobs
- ReportDeviceSecurityStatus
- ReportDeviceSessionStatus
- ReportDeviceStorageStatus
- ReportDeviceSystemInfo
- ReportDeviceTimezoneInfo
- ReportDeviceUsers
- ReportDeviceVersionInfo
- ReportDeviceVpdInfo
- ReportUploadFrequency
- ReportWebsiteActivityAllowlist
- ReportWebsiteTelemetry
- ReportWebsiteTelemetryAllowlist
WebRtc settings
AutoSelectCertificateForUrls
Automatically select client certificates for these sites
Supported on:
Description:
Setting the policy lets you make a list of URL patterns that specify sites for which Chrome can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { "pattern": "$URL_PATTERN", "filter" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.
Examples for the usage of the $FILTER section:
* When $FILTER is set to { "ISSUER": { "CN": "$ISSUER_CN" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.
* When $FILTER contains both the "ISSUER" and the "SUBJECT" sections, only client certificates that satisfy both conditions are selected.
* When $FILTER contains a "SUBJECT" section with the "O" value, a certificate needs at least one organization matching the specified value to be selected.
* When $FILTER contains a "SUBJECT" section with a "OU" value, a certificate needs at least one organizational unit matching the specified value to be selected.
* When $FILTER is set to {}, the selection of client certificates is not additionally restricted. Note that filters provided by the web server still apply.
Leaving the policy unset means there's no autoselection for any site.
Supported features:
- Dynamic Policy Refresh : Yes
- Per Profile : Yes
Data type:
List of stringsWindows registry location:
Software\Policies\Google\Chrome\AutoSelectCertificateForUrlsCopied to clipboard
Mac/Linux preference name:
AutoSelectCertificateForUrlsCopied to clipboard
Schema:
{ "items": { "properties": { "filter": { "properties": { "ISSUER": { "id": "CertPrincipalFields", "properties": { "CN": { "type": "string" }, "L": { "type": "string" }, "O": { "type": "string" }, "OU": { "type": "string" } }, "type": "object" }, "SUBJECT": { "properties": { "CN": { "type": "string" }, "L": { "type": "string" }, "O": { "type": "string" }, "OU": { "type": "string" } }, "type": "object" } }, "type": "object" }, "pattern": { "type": "string" } }, "type": "object" }, "type": "array" }Copied to clipboard
Example value (Windows):
Software\Policies\Google\Chrome\AutoSelectCertificateForUrls\1 = {"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}Copied to clipboard
Example value (ChromeOS with Active Directory management):
line 1 = {"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}Copied to clipboard
Example value (Linux):
[ "{\"pattern\":\"https://www.example.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}" ]Copied to clipboard
Example value (Mac):
<array> <string>{"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name", "L": "certificate issuer location", "O": "certificate issuer org", "OU": "certificate issuer org unit"}, "SUBJECT":{"CN":"certificate subject name", "L": "certificate subject location", "O": "certificate subject org", "OU": "certificate subject org unit"}}}</string> </array>Copied to clipboard
More policies under Content settings
- AutoSelectCertificateForUrls
- AutomaticFullscreenAllowedForUrls
- AutomaticFullscreenBlockedForUrls
- ClipboardAllowedForUrls
- ClipboardBlockedForUrls
- ControlledFrameAllowedForUrls
- ControlledFrameBlockedForUrls
- CookiesAllowedForUrls
- CookiesBlockedForUrls
- CookiesSessionOnlyForUrls
- DataUrlInSvgUseEnabled
- DefaultClipboardSetting
- DefaultControlledFrameSetting
- DefaultCookiesSetting
- DefaultDirectSocketsSetting
- DefaultFileHandlingGuardSetting
- DefaultFileSystemReadGuardSetting
- DefaultFileSystemWriteGuardSetting
- DefaultGeolocationSetting
- DefaultImagesSetting
- DefaultInsecureContentSetting
- DefaultJavaScriptJitSetting
- DefaultJavaScriptOptimizerSetting
- DefaultJavaScriptSetting
- DefaultKeygenSetting
- DefaultLocalFontsSetting
- DefaultMediaStreamSetting
- DefaultNotificationsSetting
- DefaultPluginsSetting
- DefaultPopupsSetting
- DefaultSensorsSetting
- DefaultSerialGuardSetting
- DefaultThirdPartyStoragePartitioningSetting
- DefaultWebBluetoothGuardSetting
- DefaultWebHidGuardSetting
- DefaultWebUsbGuardSetting
- DefaultWindowManagementSetting
- DefaultWindowPlacementSetting
- DirectSocketsAllowedForUrls
- DirectSocketsBlockedForUrls
- FileHandlingAllowedForUrls
- FileHandlingBlockedForUrls
- FileSystemReadAskForUrls
- FileSystemReadBlockedForUrls
- FileSystemSyncAccessHandleAsyncInterfaceEnabled
- FileSystemWriteAskForUrls
- FileSystemWriteBlockedForUrls
- GetDisplayMediaSetSelectAllScreensAllowedForUrls
- ImagesAllowedForUrls
- ImagesBlockedForUrls
- InsecureContentAllowedForUrls
- InsecureContentBlockedForUrls
- JavaScriptAllowedForUrls
- JavaScriptBlockedForUrls
- JavaScriptJitAllowedForSites
- JavaScriptJitBlockedForSites
- JavaScriptOptimizerAllowedForSites
- JavaScriptOptimizerBlockedForSites
- KeygenAllowedForUrls
- KeygenBlockedForUrls
- LegacySameSiteCookieBehaviorEnabled
- LegacySameSiteCookieBehaviorEnabledForDomainList
- LocalFontsAllowedForUrls
- LocalFontsBlockedForUrls
- NotificationsAllowedForUrls
- NotificationsBlockedForUrls
- PdfLocalFileAccessAllowedForDomains
- PluginsAllowedForUrls
- PluginsBlockedForUrls
- PopupsAllowedForUrls
- PopupsBlockedForUrls
- RegisteredProtocolHandlers
- SensorsAllowedForUrls
- SensorsBlockedForUrls
- SerialAllowAllPortsForUrls
- SerialAllowUsbDevicesForUrls
- SerialAskForUrls
- SerialBlockedForUrls
- ThirdPartyStoragePartitioningBlockedForOrigins
- WebHidAllowAllDevicesForUrls
- WebHidAllowDevicesForUrls
- WebHidAllowDevicesWithHidUsagesForUrls
- WebHidAskForUrls
- WebHidBlockedForUrls
- WebUsbAllowDevicesForUrls
- WebUsbAskForUrls
- WebUsbBlockedForUrls
- WindowManagementAllowedForUrls
- WindowManagementBlockedForUrls
- WindowPlacementAllowedForUrls
- WindowPlacementBlockedForUrls