Get advanced security protections with Chrome Enterprise Premium. Learn more.
-
Chrome 134 (Beta)
-
Chrome 133
-
Chrome 132
-
Chrome 131
-
Chrome 130
-
Chrome 129
-
Chrome 128
-
Chrome 127
-
Chrome 126
-
Chrome 125
-
Chrome 124
-
Chrome 123
Accessibility settings
- AccessibilityShortcutsEnabled
- AutoclickEnabled
- CaretHighlightEnabled
- ColorCorrectionEnabled
- CursorHighlightEnabled
- DeviceLoginScreenAccessibilityShortcutsEnabled
- DeviceLoginScreenAutoclickEnabled
- DeviceLoginScreenCaretHighlightEnabled
- DeviceLoginScreenCursorHighlightEnabled
- DeviceLoginScreenDefaultHighContrastEnabled
- DeviceLoginScreenDefaultLargeCursorEnabled
- DeviceLoginScreenDefaultScreenMagnifierType
- DeviceLoginScreenDefaultSpokenFeedbackEnabled
- DeviceLoginScreenDictationEnabled
- DeviceLoginScreenHighContrastEnabled
- DeviceLoginScreenKeyboardFocusHighlightEnabled
- DeviceLoginScreenLargeCursorEnabled
- DeviceLoginScreenMonoAudioEnabled
- DeviceLoginScreenScreenMagnifierType
- DeviceLoginScreenSelectToSpeakEnabled
- DeviceLoginScreenShowOptionsInSystemTrayMenu
- DeviceLoginScreenSpokenFeedbackEnabled
- DeviceLoginScreenStickyKeysEnabled
- DeviceLoginScreenVirtualKeyboardEnabled
- DictationEnabled
- EnhancedNetworkVoicesInSelectToSpeakAllowed
- FloatingAccessibilityMenuEnabled
- HighContrastEnabled
- KeyboardDefaultToFunctionKeys
- KeyboardFocusHighlightEnabled
- LargeCursorEnabled
- LiveTranslateEnabled
- MonoAudioEnabled
- ScreenMagnifierType
- SelectToSpeakEnabled
- ShowAccessibilityOptionsInSystemTrayMenu
- SpokenFeedbackEnabled
- StickyKeysEnabled
- UiAutomationProviderEnabled
- VirtualKeyboardEnabled
- VirtualKeyboardFeatures
Allow or deny screen capture
Android settings
Borealis
Certificate management settings
Class management tools Settings
Cloud Reporting
CloudUpload
Content settings
- AutoSelectCertificateForUrls
- AutomaticFullscreenAllowedForUrls
- AutomaticFullscreenBlockedForUrls
- ClipboardAllowedForUrls
- ClipboardBlockedForUrls
- CookiesAllowedForUrls
- CookiesBlockedForUrls
- CookiesSessionOnlyForUrls
- DataUrlInSvgUseEnabled
- DefaultClipboardSetting
- DefaultCookiesSetting
- DefaultDirectSocketsSetting
- DefaultFileSystemReadGuardSetting
- DefaultFileSystemWriteGuardSetting
- DefaultGeolocationSetting
- DefaultImagesSetting
- DefaultInsecureContentSetting
- DefaultJavaScriptJitSetting
- DefaultJavaScriptOptimizerSetting
- DefaultJavaScriptSetting
- DefaultLocalFontsSetting
- DefaultNotificationsSetting
- DefaultPopupsSetting
- DefaultSensorsSetting
- DefaultSerialGuardSetting
- DefaultThirdPartyStoragePartitioningSetting
- DefaultWebBluetoothGuardSetting
- DefaultWebHidGuardSetting
- DefaultWebUsbGuardSetting
- DefaultWindowManagementSetting
- DirectSocketsAllowedForUrls
- DirectSocketsBlockedForUrls
- FileSystemReadAskForUrls
- FileSystemReadBlockedForUrls
- FileSystemWriteAskForUrls
- FileSystemWriteBlockedForUrls
- GetDisplayMediaSetSelectAllScreensAllowedForUrls
- ImagesAllowedForUrls
- ImagesBlockedForUrls
- InsecureContentAllowedForUrls
- InsecureContentBlockedForUrls
- JavaScriptAllowedForUrls
- JavaScriptBlockedForUrls
- JavaScriptJitAllowedForSites
- JavaScriptJitBlockedForSites
- JavaScriptOptimizerAllowedForSites
- JavaScriptOptimizerBlockedForSites
- LocalFontsAllowedForUrls
- LocalFontsBlockedForUrls
- NotificationsAllowedForUrls
- NotificationsBlockedForUrls
- PdfLocalFileAccessAllowedForDomains
- PopupsAllowedForUrls
- PopupsBlockedForUrls
- RegisteredProtocolHandlers
- SensorsAllowedForUrls
- SensorsBlockedForUrls
- SerialAllowAllPortsForUrls
- SerialAllowUsbDevicesForUrls
- SerialAskForUrls
- SerialBlockedForUrls
- ThirdPartyStoragePartitioningBlockedForOrigins
- WebHidAllowAllDevicesForUrls
- WebHidAllowDevicesForUrls
- WebHidAllowDevicesWithHidUsagesForUrls
- WebHidAskForUrls
- WebHidBlockedForUrls
- WebUsbAllowDevicesForUrls
- WebUsbAskForUrls
- WebUsbBlockedForUrls
- WindowManagementAllowedForUrls
- WindowManagementBlockedForUrls
Date and time
Default search provider
- DefaultSearchProviderAlternateURLs
- DefaultSearchProviderEnabled
- DefaultSearchProviderEncodings
- DefaultSearchProviderImageURL
- DefaultSearchProviderImageURLPostParams
- DefaultSearchProviderKeyword
- DefaultSearchProviderName
- DefaultSearchProviderNewTabURL
- DefaultSearchProviderSearchURL
- DefaultSearchProviderSearchURLPostParams
- DefaultSearchProviderSuggestURL
- DefaultSearchProviderSuggestURLPostParams
Desk Connector Settings
Device update settings
- ChromeOsReleaseChannel
- ChromeOsReleaseChannelDelegated
- DeviceAutoUpdateDisabled
- DeviceAutoUpdateP2PEnabled
- DeviceAutoUpdateTimeRestrictions
- DeviceExtendedAutoUpdateEnabled
- DeviceMinimumVersion
- DeviceMinimumVersionAueMessage
- DeviceQuickFixBuildToken
- DeviceRollbackAllowedMilestones
- DeviceRollbackToTargetVersion
- DeviceTargetVersionPrefix
- DeviceUpdateAllowedConnectionTypes
- DeviceUpdateHttpDownloadsEnabled
- DeviceUpdateScatterFactor
- DeviceUpdateStagingSchedule
- RebootAfterUpdate
Drive
EDU settings
Extensions
- BlockExternalExtensions
- DeviceLoginScreenExtensionManifestV2Availability
- ExtensionAllowedTypes
- ExtensionDeveloperModeSettings
- ExtensionExtendedBackgroundLifetimeForPortConnectionsToUrls
- ExtensionInstallAllowlist
- ExtensionInstallBlocklist
- ExtensionInstallForcelist
- ExtensionInstallSources
- ExtensionInstallTypeBlocklist
- ExtensionManifestV2Availability
- ExtensionOAuthRedirectUrls
- ExtensionSettings
- ExtensionUnpublishedAvailability
- MandatoryExtensionsForIncognitoNavigation
First-Party Sets Settings
Gaia user identity management settings
Generative AI
Google Assistant
Google Cast
HTTP authentication
- AllHttpAuthSchemesAllowedForOrigins
- AllowCrossOriginAuthPrompt
- AuthAndroidNegotiateAccountType
- AuthNegotiateDelegateAllowlist
- AuthNegotiateDelegateByKdcPolicy
- AuthSchemes
- AuthServerAllowlist
- BasicAuthOverHttpEnabled
- DisableAuthNegotiateCnameLookup
- EnableAuthNegotiatePort
- GSSAPILibraryName
- NtlmV2Enabled
Idle Browser Actions
Kerberos
Kiosk settings
- AllowKioskAppControlChromeVersion
- DeviceLocalAccountAutoLoginBailoutEnabled
- DeviceLocalAccountAutoLoginDelay
- DeviceLocalAccountAutoLoginId
- DeviceLocalAccountPromptForNetworkWhenOffline
- DeviceLocalAccounts
- DeviceWeeklyScheduledSuspend
- KioskActiveWiFiCredentialsScopeChangeEnabled
- KioskTroubleshootingToolsEnabled
- KioskWebAppOfflineEnabled
- NewWindowsInKioskAllowed
Legacy Browser Support
- AlternativeBrowserParameters
- AlternativeBrowserPath
- BrowserSwitcherChromeParameters
- BrowserSwitcherChromePath
- BrowserSwitcherDelay
- BrowserSwitcherEnabled
- BrowserSwitcherExternalGreylistUrl
- BrowserSwitcherExternalSitelistUrl
- BrowserSwitcherKeepLastChromeTab
- BrowserSwitcherParsingMode
- BrowserSwitcherUrlGreylist
- BrowserSwitcherUrlList
- BrowserSwitcherUseIeSitelist
Linux container
Local user data storage
Microsoft® Active Directory® management settings
Miscellaneous
- AbusiveExperienceInterventionEnforce
- AccessibilityImageLabelsEnabled
- AccessibilityPerformanceFilteringAllowed
- AdHocCodeSigningForPWAsEnabled
- AdditionalDnsQueryTypesEnabled
- AdsSettingForIntrusiveAdsSites
- AdvancedProtectionAllowed
- AllowBackForwardCacheForCacheControlNoStorePageEnabled
- AllowChromeDataInBackups
- AllowDeletingBrowserHistory
- AllowDinosaurEasterEgg
- AllowExcludeDisplayInMirrorMode
- AllowFileSelectionDialogs
- AllowScreenLock
- AllowSystemNotifications
- AllowWebAuthnWithBrokenTlsCerts
- AllowedDomainsForApps
- AllowedInputMethods
- AllowedInputMethodsForceEnabled
- AllowedLanguages
- AlternateErrorPagesEnabled
- AlwaysOnVpnPreConnectUrlAllowlist
- AlwaysOpenPdfExternally
- AmbientAuthenticationInPrivateModesEnabled
- AppLaunchAutomation
- AppStoreRatingEnabled
- ApplicationBoundEncryptionEnabled
- ApplicationLocaleValue
- ArcVmDataMigrationStrategy
- AudioCaptureAllowed
- AudioCaptureAllowedUrls
- AudioOutputAllowed
- AudioProcessHighPriorityEnabled
- AudioSandboxEnabled
- AutoLaunchProtocolsFromOrigins
- AutoOpenAllowedForURLs
- AutoOpenFileTypes
- AutofillAddressEnabled
- AutofillCreditCardEnabled
- AutoplayAllowed
- AutoplayAllowlist
- BackForwardCacheEnabled
- BackgroundModeEnabled
- BatterySaverModeAvailability
- BlockThirdPartyCookies
- BookmarkBarEnabled
- BrowserAddPersonEnabled
- BrowserContextAwareAccessSignalsAllowlist
- BrowserGuestModeEnabled
- BrowserGuestModeEnforced
- BrowserLabsEnabled
- BrowserLegacyExtensionPointsBlocked
- BrowserNetworkTimeQueriesEnabled
- BrowserSignin
- BrowserThemeColor
- BrowsingDataLifetime
- BuiltInDnsClientEnabled
- CORSNonWildcardRequestHeadersSupport
- CaptivePortalAuthenticationIgnoresProxy
- CertificateTransparencyEnforcementDisabledForCas
- CertificateTransparencyEnforcementDisabledForUrls
- ChromeForTestingAllowed
- ChromeOsLockOnIdleSuspend
- ChromeOsMultiProfileUserBehavior
- ChromeVariations
- ClearBrowsingDataOnExitList
- ClickToCallEnabled
- ClientCertificateManagementAllowed
- CloudManagementEnrollmentMandatory
- CloudManagementEnrollmentToken
- CloudPolicyOverridesPlatformPolicy
- CloudUserPolicyMerge
- CloudUserPolicyOverridesCloudMachinePolicy
- CommandLineFlagSecurityWarningsEnabled
- ComponentUpdatesEnabled
- ContextMenuPhotoSharingSettings
- ContextualGoogleIntegrationsConfiguration
- ContextualGoogleIntegrationsEnabled
- ContextualSearchEnabled
- CreatePasskeysInICloudKeychain
- CredentialProviderPromoEnabled
- DNSInterceptionChecksEnabled
- DataControlsRules
- DataLeakPreventionClipboardCheckSizeLimit
- DataLeakPreventionReportingEnabled
- DataLeakPreventionRulesList
- DefaultBrowserSettingEnabled
- DefaultDownloadDirectory
- DefaultHandlersForFileExtensions
- DefaultSearchProviderContextMenuAccessAllowed
- DeleteKeyModifier
- DesktopSharingHubEnabled
- DeveloperToolsAvailability
- DeviceAllowBluetooth
- DeviceAllowEnterpriseRemoteAccessConnections
- DeviceAllowMGSToStoreDisplayProperties
- DeviceAllowRedeemChromeOsRegistrationOffers
- DeviceAllowedBluetoothServices
- DeviceAttributesAllowedForOrigins
- DeviceAuthenticationURLAllowlist
- DeviceAuthenticationURLBlocklist
- DeviceBlockDevmode
- DeviceChromeVariations
- DeviceDebugPacketCaptureAllowed
- DeviceDlcPredownloadList
- DeviceEncryptedReportingPipelineEnabled
- DeviceEphemeralNetworkPoliciesEnabled
- DeviceHardwareVideoDecodingEnabled
- DeviceI18nShortcutsEnabled
- DeviceKeyboardBacklightColor
- DeviceKeylockerForStorageEncryptionEnabled
- DeviceLoginScreenContextAwareAccessSignalsAllowlist
- DeviceLoginScreenPrimaryMouseButtonSwitch
- DeviceLoginScreenWebHidAllowDevicesForUrls
- DeviceLoginScreenWebUsbAllowDevicesForUrls
- DeviceNativeClientForceAllowed
- DeviceOffHours
- DevicePciPeripheralDataAccessEnabled
- DevicePolicyRefreshRate
- DevicePostQuantumKeyAgreementEnabled
- DevicePowerwashAllowed
- DeviceQuirksDownloadEnabled
- DeviceRebootOnUserSignout
- DeviceReleaseLtsTag
- DeviceRestrictedManagedGuestSessionEnabled
- DeviceRestrictionSchedule
- DeviceScheduledReboot
- DeviceScheduledUpdateCheck
- DeviceShowLowDiskSpaceNotification
- DeviceSwitchFunctionKeysBehaviorEnabled
- DeviceSystemWideTracingEnabled
- Disable3DAPIs
- DisableScreenshots
- DiskCacheDir
- DiskCacheSize
- DnsOverHttpsMode
- DnsOverHttpsTemplates
- DocumentScanAPITrustedExtensions
- DomainReliabilityAllowed
- DownloadDirectory
- DownloadManagerSaveToDriveSettings
- DownloadRestrictions
- DynamicCodeSettings
- EasyUnlockAllowed
- EcheAllowed
- EditBookmarksEnabled
- EmojiPickerGifSupportEnabled
- EmojiSuggestionEnabled
- EnableExperimentalPolicies
- EnableOnlineRevocationChecks
- EnableSyncConsent
- EncryptedClientHelloEnabled
- EnterpriseAuthenticationAppLinkPolicy
- EnterpriseCustomLabel
- EnterpriseHardwarePlatformAPIEnabled
- EnterpriseLogoUrl
- EnterpriseProfileBadgeToolbarSettings
- EnterpriseProfileCreationKeepBrowsingData
- EnterpriseRealTimeUrlCheckMode
- EssentialSearchEnabled
- ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
- ExplicitlyAllowedNetworkPorts
- ExtensionCacheSize
- ExternalProtocolDialogShowAlwaysOpenCheckbox
- ExternalStorageDisabled
- ExternalStorageReadOnly
- F11KeyModifier
- F12KeyModifier
- FastPairEnabled
- FeedbackSurveysEnabled
- FetchKeepaliveDurationSecondsOnShutdown
- FileOrDirectoryPickerWithoutGestureAllowedForOrigins
- FilePickerChooseFromDriveSettings
- FloatingWorkspaceEnabled
- FocusModeSoundsEnabled
- ForceEphemeralProfiles
- ForceGoogleSafeSearch
- ForceLogoutUnauthenticatedUserEnabled
- ForceMaximizeOnFirstRun
- ForcePermissionPolicyUnloadDefaultEnabled
- ForceYouTubeRestrict
- ForcedLanguages
- FullRestoreEnabled
- FullRestoreMode
- FullscreenAlertEnabled
- FullscreenAllowed
- GaiaLockScreenOfflineSigninTimeLimitDays
- GhostWindowEnabled
- GloballyScopeHTTPAuthCacheEnabled
- GoogleSearchSidePanelEnabled
- HSTSPolicyBypassList
- HardwareAccelerationModeEnabled
- HeadlessMode
- HideWebStoreIcon
- HighEfficiencyModeEnabled
- HistoryClustersVisible
- HomeAndEndKeysModifier
- HttpAllowlist
- HttpsOnlyMode
- HttpsUpgradesEnabled
- ImportAutofillFormData
- ImportBookmarks
- ImportHistory
- ImportHomepage
- ImportSavedPasswords
- ImportSearchEngine
- IncognitoModeAvailability
- InsertKeyModifier
- InsightsExtensionEnabled
- InstantTetheringAllowed
- IntensiveWakeUpThrottlingEnabled
- IntranetRedirectBehavior
- IsolateOrigins
- IsolateOriginsAndroid
- IsolatedWebAppInstallForceList
- KeepFullscreenWithoutNotificationUrlAllowList
- KeyPermissions
- KeyboardFocusableScrollersEnabled
- KioskBrowserPermissionsAllowedForOrigins
- LensCameraAssistedSearchEnabled
- LensDesktopNTPSearchEnabled
- LensOnGalleryEnabled
- LensOverlaySettings
- LensRegionSearchEnabled
- ListenToThisPageEnabled
- LockScreenAutoStartOnlineReauth
- LockScreenMediaPlaybackEnabled
- LoginDisplayPasswordButtonEnabled
- LookalikeWarningAllowlistDomains
- ManagedAccountsSigninRestriction
- ManagedBookmarks
- ManagedConfigurationPerOrigin
- ManagedGuestSessionPrivacyWarningsEnabled
- MaxConnectionsPerProxy
- MaxInvalidationFetchDelay
- MediaRecommendationsEnabled
- MemorySaverModeSavings
- MetricsReportingEnabled
- NTPCardsVisible
- NTPContentSuggestionsEnabled
- NTPCustomBackgroundEnabled
- NTPMiddleSlotAnnouncementVisible
- NativeHostsExecutablesLaunchDirectly
- NearbyShareAllowed
- NetworkPredictionOptions
- NetworkServiceSandboxEnabled
- NoteTakingAppsLockScreenAllowlist
- OnBulkDataEntryEnterpriseConnector
- OnFileAttachedEnterpriseConnector
- OnFileDownloadedEnterpriseConnector
- OnFileTransferEnterpriseConnector
- OnPrintEnterpriseConnector
- OnSecurityEventEnterpriseConnector
- OpenNetworkConfiguration
- OrcaEnabled
- OriginAgentClusterDefaultEnabled
- OsColorMode
- OverrideSecurityRestrictionsOnInsecureOrigin
- PageUpAndPageDownKeysModifier
- ParcelTrackingEnabled
- PaymentMethodQueryEnabled
- PdfAnnotationsEnabled
- PdfUseSkiaRendererEnabled
- PdfViewerOutOfProcessIframeEnabled
- PhoneHubAllowed
- PhoneHubCameraRollAllowed
- PhoneHubNotificationsAllowed
- PhoneHubTaskContinuationAllowed
- PhysicalKeyboardAutocorrect
- PhysicalKeyboardPredictiveWriting
- PinnedLauncherApps
- PolicyAtomicGroupsEnabled
- PolicyDictionaryMultipleSourceMergeList
- PolicyListMultipleSourceMergeList
- PolicyRefreshRate
- PostQuantumKeyAgreementEnabled
- PrimaryMouseButtonSwitch
- ProfilePickerOnStartupAvailability
- ProfileReauthPrompt
- PromotionsEnabled
- PromptForDownloadLocation
- PromptOnMultipleMatchingCertificates
- ProvisionManagedClientCertificateForUser
- ProxySettings
- QRCodeGeneratorEnabled
- QuicAllowed
- QuickOfficeForceFileDownloadEnabled
- RelaunchHeadsUpPeriod
- RelaunchNotification
- RelaunchNotificationPeriod
- RelaunchWindow
- RemoteDebuggingAllowed
- RendererAppContainerEnabled
- ReportCrostiniUsageEnabled
- RequireOnlineRevocationChecksForLocalAnchors
- RestrictAccountsToPatterns
- RestrictSigninToPattern
- RestrictedManagedGuestSessionExtensionCleanupExemptList
- RoamingProfileLocation
- RoamingProfileSupportEnabled
- SSLErrorOverrideAllowed
- SSLErrorOverrideAllowedForOrigins
- SafeBrowsingForTrustedSourcesEnabled
- SafeSitesFilterBehavior
- SamlLockScreenOfflineSigninTimeLimitDays
- SandboxExternalProtocolBlocked
- SavingBrowserHistoryDisabled
- SchedulerConfiguration
- ScreenCaptureLocation
- ScreenCaptureWithoutGestureAllowedForOrigins
- ScrollToTextFragmentEnabled
- SearchSuggestEnabled
- SecondaryGoogleAccountSigninAllowed
- SecurityKeyPermitAttestation
- SecurityTokenSessionBehavior
- SecurityTokenSessionNotificationSeconds
- SelectParserRelaxationEnabled
- SessionLengthLimit
- SessionLocales
- SharedArrayBufferUnrestrictedAccessAllowed
- SharedClipboardEnabled
- SharedWorkerBlobURLFixEnabled
- ShelfAlignment
- ShelfAutoHideBehavior
- ShoppingListEnabled
- ShortcutCustomizationAllowed
- ShowAiIntroScreenEnabled
- ShowAppsShortcutInBookmarkBar
- ShowDisplaySizeScreenEnabled
- ShowFullUrlsInAddressBar
- ShowGeminiIntroScreenEnabled
- ShowLogoutButtonInTray
- ShowTouchpadScrollScreenEnabled
- SideSearchEnabled
- SignedHTTPExchangeEnabled
- SigninInterceptionEnabled
- SitePerProcess
- SitePerProcessAndroid
- SiteSearchSettings
- SmsMessagesAllowed
- SpellCheckServiceEnabled
- SpellcheckEnabled
- SpellcheckLanguage
- SpellcheckLanguageBlocklist
- StandardizedBrowserZoomEnabled
- StartupBrowserWindowLaunchSuppressed
- StrictMimetypeCheckForWorkerScriptsEnabled
- SubAppsAPIsAllowedWithoutGestureAndAuthorizationForOrigins
- SuggestLogoutAfterClosingLastWindow
- SuggestedContentEnabled
- SuppressDifferentOriginSubframeDialogs
- SuppressUnsupportedOSWarning
- SyncDisabled
- SyncTypesListDisabled
- SystemFeaturesDisableList
- SystemFeaturesDisableMode
- SystemProxySettings
- SystemShortcutBehavior
- TPMFirmwareUpdateSettings
- TabDiscardingExceptions
- TaskManagerEndProcessEnabled
- TermsOfServiceURL
- TosDialogBehavior
- TotalMemoryLimitMb
- TouchVirtualKeyboardEnabled
- TranslateEnabled
- TranslatorAPIAllowed
- TrashEnabled
- URLAllowlist
- URLBlocklist
- UnifiedDesktopEnabledByDefault
- UnmanagedDeviceSignalsConsentFlowEnabled
- UrlKeyedAnonymizedDataCollectionEnabled
- UsbDetachableAllowlist
- UsbDetectorNotificationEnabled
- UserAgentReduction
- UserAvatarCustomizationSelectorsEnabled
- UserAvatarImage
- UserContextAwareAccessSignalsAllowlist
- UserDataDir
- UserDataSnapshotRetentionLimit
- UserDisplayName
- UserFeedbackAllowed
- VideoCaptureAllowed
- VideoCaptureAllowedUrls
- VirtualKeyboardResizesLayoutByDefault
- VirtualKeyboardSmartVisibilityEnabled
- VmManagementCliAllowed
- VpnConfigAllowed
- WPADQuickCheckEnabled
- WallpaperGooglePhotosIntegrationEnabled
- WallpaperImage
- WarnBeforeQuittingEnabled
- WebAnnotations
- WebAppInstallForceList
- WebAppSettings
- WebAudioOutputBufferingEnabled
- WebAuthnFactors
- WebRtcEventLogCollectionAllowed
- WebRtcLocalIpsAllowedUrls
- WebRtcTextLogCollectionAllowed
- WebRtcUdpPortRange
- WebXRImmersiveArEnabled
- WifiSyncAndroidAllowed
- WindowOcclusionEnabled
Network File Shares settings
Network settings
- AccessControlAllowMethodsInCORSPreflightSpecConformant
- CompressionDictionaryTransportEnabled
- DataURLWhitespacePreservationEnabled
- DeviceDataRoamingEnabled
- DeviceDockMacAddressSource
- DeviceHostnameTemplate
- DeviceHostnameUserConfigurable
- DeviceOpenNetworkConfiguration
- DeviceWiFiAllowed
- DeviceWiFiFastTransitionEnabled
- DnsOverHttpsExcludedDomains
- DnsOverHttpsIncludedDomains
- DnsOverHttpsSalt
- DnsOverHttpsTemplatesWithIdentifiers
- IPv6ReachabilityOverrideEnabled
- NetworkThrottlingEnabled
- OutOfProcessSystemDnsResolutionEnabled
- ZstdContentEncodingEnabled
Parental supervision settings
Password manager
PluginVm
Power and shutdown
Power management
- AllowScreenWakeLocks
- AllowWakeLocks
- DeviceAdvancedBatteryChargeModeDayConfig
- DeviceAdvancedBatteryChargeModeEnabled
- DeviceBatteryChargeCustomStartCharging
- DeviceBatteryChargeCustomStopCharging
- DeviceBatteryChargeMode
- DeviceBootOnAcEnabled
- DeviceChargingSoundsEnabled
- DeviceLowBatterySoundEnabled
- DevicePowerAdaptiveChargingEnabled
- DevicePowerPeakShiftBatteryThreshold
- DevicePowerPeakShiftDayConfig
- DevicePowerPeakShiftEnabled
- DeviceUsbPowerShareEnabled
- LidCloseAction
- PowerManagementIdleSettings
- PowerManagementUsesAudioActivity
- PowerManagementUsesVideoActivity
- PowerSmartDimEnabled
- PresentationScreenDimDelayScale
- ScreenBrightnessPercent
- ScreenLockDelays
- UserActivityScreenDimDelayScale
- WaitForInitialUserActivity
Printing
- CloudPrintProxyEnabled
- DefaultPrinterSelection
- DeletePrintJobHistoryAllowed
- DeviceExternalPrintServers
- DeviceExternalPrintServersAllowlist
- DevicePrinters
- DevicePrintersAccessMode
- DevicePrintersAllowlist
- DevicePrintersBlocklist
- DevicePrintingClientNameTemplate
- DisablePrintPreview
- ExternalPrintServers
- ExternalPrintServersAllowlist
- OopPrintDriversAllowed
- PrintHeaderFooter
- PrintJobHistoryExpirationPeriod
- PrintPdfAsImageAvailability
- PrintPdfAsImageDefault
- PrintPostScriptMode
- PrintPreviewUseSystemDefaultPrinter
- PrintRasterizationMode
- PrintRasterizePdfDpi
- PrinterTypeDenyList
- Printers
- PrintersBulkAccessMode
- PrintersBulkAllowlist
- PrintersBulkBlocklist
- PrintersBulkConfiguration
- PrintingAPIExtensionsAllowlist
- PrintingAllowedBackgroundGraphicsModes
- PrintingAllowedColorModes
- PrintingAllowedDuplexModes
- PrintingAllowedPinModes
- PrintingBackgroundGraphicsDefault
- PrintingColorDefault
- PrintingDuplexDefault
- PrintingEnabled
- PrintingLPACSandboxEnabled
- PrintingMaxSheetsAllowed
- PrintingPaperSizeDefault
- PrintingPinDefault
- PrintingSendUsernameAndFilenameEnabled
- UserPrintersAllowed
Privacy Sandbox policies
Privacy screen settings
Private network request settings
Quick Answers
Quick unlock
Related Website Sets Settings
Remote access
- RemoteAccessHostAllowClientPairing
- RemoteAccessHostAllowEnterpriseFileTransfer
- RemoteAccessHostAllowEnterpriseRemoteSupportConnections
- RemoteAccessHostAllowFileTransfer
- RemoteAccessHostAllowPinAuthentication
- RemoteAccessHostAllowRelayedConnection
- RemoteAccessHostAllowRemoteAccessConnections
- RemoteAccessHostAllowRemoteSupportConnections
- RemoteAccessHostAllowUiAccessForRemoteAssistance
- RemoteAccessHostAllowUrlForwarding
- RemoteAccessHostClientDomainList
- RemoteAccessHostClipboardSizeBytes
- RemoteAccessHostDomainList
- RemoteAccessHostFirewallTraversal
- RemoteAccessHostMatchUsername
- RemoteAccessHostMaximumSessionDurationMinutes
- RemoteAccessHostRequireCurtain
- RemoteAccessHostUdpPortRange
Remote attestation
Safe Browsing settings
- DisableSafeBrowsingProceedAnyway
- PasswordProtectionChangePasswordURL
- PasswordProtectionLoginURLs
- PasswordProtectionWarningTrigger
- SafeBrowsingAllowlistDomains
- SafeBrowsingDeepScanningEnabled
- SafeBrowsingExtendedReportingEnabled
- SafeBrowsingProtectionLevel
- SafeBrowsingProxiedRealTimeChecksAllowed
- SafeBrowsingSurveysEnabled
Saml user identity management settings
Screensaver Settings
- DeviceScreensaverLoginScreenEnabled
- DeviceScreensaverLoginScreenIdleTimeoutSeconds
- DeviceScreensaverLoginScreenImageDisplayIntervalSeconds
- DeviceScreensaverLoginScreenImages
- ScreensaverLockScreenEnabled
- ScreensaverLockScreenIdleTimeoutSeconds
- ScreensaverLockScreenImageDisplayIntervalSeconds
- ScreensaverLockScreenImages
Sign-in settings
- BoundSessionCredentialsEnabled
- DeviceAllowNewUsers
- DeviceAuthenticationFlowAutoReloadInterval
- DeviceAutofillSAMLUsername
- DeviceEphemeralUsersEnabled
- DeviceFamilyLinkAccountsAllowed
- DeviceGuestModeEnabled
- DeviceLoginScreenAutoSelectCertificateForUrls
- DeviceLoginScreenDomainAutoComplete
- DeviceLoginScreenExtensions
- DeviceLoginScreenInputMethods
- DeviceLoginScreenLocales
- DeviceLoginScreenPromptOnMultipleMatchingCertificates
- DeviceLoginScreenSystemInfoEnforced
- DeviceRunAutomaticCleanupOnLogin
- DeviceSecondFactorAuthentication
- DeviceShowNumericKeyboardForPassword
- DeviceShowUserNamesOnSignin
- DeviceTransferSAMLCookies
- DeviceUserAllowlist
- DeviceWallpaperImage
- LoginAuthenticationBehavior
- LoginVideoCaptureAllowedUrls
- ProfileSeparationDataMigrationSettings
- ProfileSeparationDomainExceptionList
- ProfileSeparationSettings
- RecoveryFactorBehavior
Startup, Home page and New Tab page
User and device reporting
- DeviceActivityHeartbeatEnabled
- DeviceExtensionsSystemLogEnabled
- DeviceFlexHwDataForProductImprovementEnabled
- DeviceMetricsReportingEnabled
- DeviceReportNetworkEvents
- DeviceReportRuntimeCounters
- DeviceReportXDREvents
- HeartbeatEnabled
- HeartbeatFrequency
- LogUploadEnabled
- ReportAppInventory
- ReportAppUsage
- ReportArcStatusEnabled
- ReportCRDSessions
- ReportDeviceActivityTimes
- ReportDeviceAppInfo
- ReportDeviceAudioStatus
- ReportDeviceBacklightInfo
- ReportDeviceBluetoothInfo
- ReportDeviceBoardStatus
- ReportDeviceBootMode
- ReportDeviceCpuInfo
- ReportDeviceCrashReportInfo
- ReportDeviceFanInfo
- ReportDeviceGraphicsStatus
- ReportDeviceLoginLogout
- ReportDeviceMemoryInfo
- ReportDeviceNetworkConfiguration
- ReportDeviceNetworkStatus
- ReportDeviceOsUpdateStatus
- ReportDevicePeripherals
- ReportDevicePowerStatus
- ReportDevicePrintJobs
- ReportDeviceSecurityStatus
- ReportDeviceSessionStatus
- ReportDeviceStorageStatus
- ReportDeviceSystemInfo
- ReportDeviceTimezoneInfo
- ReportDeviceUsers
- ReportDeviceVersionInfo
- ReportDeviceVpdInfo
- ReportUploadFrequency
- ReportWebsiteActivityAllowlist
- ReportWebsiteTelemetry
- ReportWebsiteTelemetryAllowlist
WebRtc settings
ExtensionSettings
Extension management settings
Supported on:
Description:
Setting the policy controls extension management settings for Google Chrome, including any controlled by existing extension-related policies. The policy supersedes any legacy policies that might be set.
This policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID "*", which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the "update" URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.
On Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.
On macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.
Supported features:
- Dynamic Policy Refresh : Yes
- Per Profile : Yes
This policy is part of the Extensions atomic policy group.
Data type:
Dictionary Windows:REG_SZWindows registry location:
Software\Policies\Google\Chrome\ExtensionSettingsCopied to clipboard
Mac/Linux preference name:
ExtensionSettingsCopied to clipboard
Schema:
{ "patternProperties": { "^[a-p]{32}(?:,[a-p]{32})*,?$": { "properties": { "allowed_permissions": { "id": "ListOfPermissions", "items": { "pattern": "^[a-z][a-zA-Z0-9.]*$", "type": "string" }, "type": "array" }, "blocked_install_message": { "description": "text that will be displayed to the user in the chrome webstore if installation is blocked.", "type": "string" }, "blocked_permissions": { "items": { "pattern": "^[a-z][a-zA-Z0-9.]*$", "type": "string" }, "type": "array" }, "file_url_navigation_allowed": { "type": "boolean" }, "installation_mode": { "enum": [ "blocked", "allowed", "force_installed", "normal_installed", "removed" ], "type": "string" }, "minimum_version_required": { "pattern": "^[0-9]+([.][0-9]+)*$", "type": "string" }, "override_update_url": { "type": "boolean" }, "runtime_allowed_hosts": { "id": "ListOfUrlPatterns", "items": { "type": "string" }, "type": "array" }, "runtime_blocked_hosts": { "items": { "type": "string" }, "type": "array" }, "toolbar_pin": { "enum": [ "force_pinned", "default_unpinned" ], "type": "string" }, "update_url": { "type": "string" } }, "type": "object" }, "^update_url:": { "properties": { "allowed_permissions": { "items": { "pattern": "^[a-z][a-zA-Z0-9.]*$", "type": "string" }, "type": "array" }, "blocked_permissions": { "items": { "pattern": "^[a-z][a-zA-Z0-9.]*$", "type": "string" }, "type": "array" }, "installation_mode": { "enum": [ "blocked", "allowed", "removed" ], "type": "string" } }, "type": "object" } }, "properties": { "*": { "properties": { "allowed_types": { "items": { "enum": [ "extension", "theme", "user_script", "hosted_app", "legacy_packaged_app", "platform_app" ], "type": "string" }, "type": "array" }, "blocked_install_message": { "type": "string" }, "blocked_permissions": { "items": { "pattern": "^[a-z][a-zA-Z0-9.]*$", "type": "string" }, "type": "array" }, "install_sources": { "items": { "type": "string" }, "type": "array" }, "installation_mode": { "enum": [ "blocked", "allowed", "removed" ], "type": "string" }, "runtime_allowed_hosts": { "items": { "type": "string" }, "type": "array" }, "runtime_blocked_hosts": { "items": { "type": "string" }, "type": "array" } }, "type": "object" } }, "type": "object" }Copied to clipboard
Example value (Windows):
Software\Policies\Google\Chrome\ExtensionSettings = { "*": { "allowed_types": [ "hosted_app" ], "blocked_install_message": "Custom error message.", "blocked_permissions": [ "downloads", "bookmarks" ], "install_sources": [ "https://company-intranet/chromeapps" ], "installation_mode": "blocked", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ] }, "abcdefghijklmnopabcdefghijklmnop": { "blocked_permissions": [ "history" ], "installation_mode": "allowed", "minimum_version_required": "1.0.1", "toolbar_pin": "force_pinned", "file_url_navigation_allowed": true }, "bcdefghijklmnopabcdefghijklmnopa": { "allowed_permissions": [ "downloads" ], "installation_mode": "force_installed", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ], "update_url": "https://example.com/update_url" }, "cdefghijklmnopabcdefghijklmnopab": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "fghijklmnopabcdefghijklmnopabcde": { "blocked_install_message": "Custom removal message.", "installation_mode": "removed" }, "ghijklmnopabcdefghijklmnopabcdef": { "installation_mode": "force_installed", "override_update_url": true, "update_url": "https://example.com/update_url" }, "update_url:https://www.example.com/update.xml": { "allowed_permissions": [ "downloads" ], "blocked_permissions": [ "wallpaper" ], "installation_mode": "allowed" } }Copied to clipboard
Example value (ChromeOS with Active Directory management):
{ "*": { "allowed_types": [ "hosted_app" ], "blocked_install_message": "Custom error message.", "blocked_permissions": [ "downloads", "bookmarks" ], "install_sources": [ "https://company-intranet/chromeapps" ], "installation_mode": "blocked", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ] }, "abcdefghijklmnopabcdefghijklmnop": { "blocked_permissions": [ "history" ], "installation_mode": "allowed", "minimum_version_required": "1.0.1", "toolbar_pin": "force_pinned", "file_url_navigation_allowed": true }, "bcdefghijklmnopabcdefghijklmnopa": { "allowed_permissions": [ "downloads" ], "installation_mode": "force_installed", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ], "update_url": "https://example.com/update_url" }, "cdefghijklmnopabcdefghijklmnopab": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "fghijklmnopabcdefghijklmnopabcde": { "blocked_install_message": "Custom removal message.", "installation_mode": "removed" }, "ghijklmnopabcdefghijklmnopabcdef": { "installation_mode": "force_installed", "override_update_url": true, "update_url": "https://example.com/update_url" }, "update_url:https://www.example.com/update.xml": { "allowed_permissions": [ "downloads" ], "blocked_permissions": [ "wallpaper" ], "installation_mode": "allowed" } }Copied to clipboard
Example value (Linux):
ExtensionSettings: { "*": { "allowed_types": [ "hosted_app" ], "blocked_install_message": "Custom error message.", "blocked_permissions": [ "downloads", "bookmarks" ], "install_sources": [ "https://company-intranet/chromeapps" ], "installation_mode": "blocked", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ] }, "abcdefghijklmnopabcdefghijklmnop": { "blocked_permissions": [ "history" ], "installation_mode": "allowed", "minimum_version_required": "1.0.1", "toolbar_pin": "force_pinned", "file_url_navigation_allowed": true }, "bcdefghijklmnopabcdefghijklmnopa": { "allowed_permissions": [ "downloads" ], "installation_mode": "force_installed", "runtime_allowed_hosts": [ "*://good.example.com" ], "runtime_blocked_hosts": [ "*://*.example.com" ], "update_url": "https://example.com/update_url" }, "cdefghijklmnopabcdefghijklmnopab": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd": { "blocked_install_message": "Custom error message.", "installation_mode": "blocked" }, "fghijklmnopabcdefghijklmnopabcde": { "blocked_install_message": "Custom removal message.", "installation_mode": "removed" }, "ghijklmnopabcdefghijklmnopabcdef": { "installation_mode": "force_installed", "override_update_url": true, "update_url": "https://example.com/update_url" }, "update_url:https://www.example.com/update.xml": { "allowed_permissions": [ "downloads" ], "blocked_permissions": [ "wallpaper" ], "installation_mode": "allowed" } }Copied to clipboard
Example value (Mac):
<key>ExtensionSettings</key> <dict> <key>*</key> <dict> <key>allowed_types</key> <array> <string>hosted_app</string> </array> <key>blocked_install_message</key> <string>Custom error message.</string> <key>blocked_permissions</key> <array> <string>downloads</string> <string>bookmarks</string> </array> <key>install_sources</key> <array> <string>https://company-intranet/chromeapps</string> </array> <key>installation_mode</key> <string>blocked</string> <key>runtime_allowed_hosts</key> <array> <string>*://good.example.com</string> </array> <key>runtime_blocked_hosts</key> <array> <string>*://*.example.com</string> </array> </dict> <key>abcdefghijklmnopabcdefghijklmnop</key> <dict> <key>blocked_permissions</key> <array> <string>history</string> </array> <key>installation_mode</key> <string>allowed</string> <key>minimum_version_required</key> <string>1.0.1</string> <key>toolbar_pin</key> <string>force_pinned</string> <key>file_url_navigation_allowed</key> <boolean>true</boolean> </dict> <key>bcdefghijklmnopabcdefghijklmnopa</key> <dict> <key>allowed_permissions</key> <array> <string>downloads</string> </array> <key>installation_mode</key> <string>force_installed</string> <key>runtime_allowed_hosts</key> <array> <string>*://good.example.com</string> </array> <key>runtime_blocked_hosts</key> <array> <string>*://*.example.com</string> </array> <key>update_url</key> <string>https://example.com/update_url</string> </dict> <key>cdefghijklmnopabcdefghijklmnopab</key> <dict> <key>blocked_install_message</key> <string>Custom error message.</string> <key>installation_mode</key> <string>blocked</string> </dict> <key>defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd</key> <dict> <key>blocked_install_message</key> <string>Custom error message.</string> <key>installation_mode</key> <string>blocked</string> </dict> <key>fghijklmnopabcdefghijklmnopabcde</key> <dict> <key>blocked_install_message</key> <string>Custom removal message.</string> <key>installation_mode</key> <string>removed</string> </dict> <key>ghijklmnopabcdefghijklmnopabcdef</key> <dict> <key>installation_mode</key> <string>force_installed</string> <key>override_update_url</key> <boolean>true</boolean> <key>update_url</key> <string>https://example.com/update_url</string> </dict> <key>update_url:https://www.example.com/update.xml</key> <dict> <key>allowed_permissions</key> <array> <string>downloads</string> </array> <key>blocked_permissions</key> <array> <string>wallpaper</string> </array> <key>installation_mode</key> <string>allowed</string> </dict> </dict>Copied to clipboard
More policies under Extensions
- BlockExternalExtensions
- ChromeAppsWebViewPermissiveBehaviorAllowed
- DeviceLoginScreenExtensionManifestV2Availability
- ExtensionAllowInsecureUpdates
- ExtensionAllowedTypes
- ExtensionDeveloperModeSettings
- ExtensionExtendedBackgroundLifetimeForPortConnectionsToUrls
- ExtensionInstallAllowlist
- ExtensionInstallBlocklist
- ExtensionInstallForcelist
- ExtensionInstallSources
- ExtensionInstallTypeBlocklist
- ExtensionManifestV2Availability
- ExtensionOAuthRedirectUrls
- ExtensionSettings
- ExtensionUnpublishedAvailability
- MandatoryExtensionsForIncognitoNavigation