Description
Chrome Enterprise policies provide organizations added controls and configurations to meet their productivity and security needs, allowing you to configure Chrome for your organization. This is a free service within Google Admin.
A custom profile can be uploaded to Jamf School with the enrollment token to apply policies for Chrome on devices managed by Jamf School. A full list of policies can be found here. This workflow will allow you to:
enforce private or incognito browsing settings
manage accessibility settings
manage extensions
force Google Safe Search
Setting up Chrome Browser Cloud Management
Go through the steps in Set up Chrome Enterprise Core to:
Sign up for Chrome Enterprise Core if not complete already.
Generate an Enrollment Token. Copy the token to a text file to be added to the iMazing profile created in the next step below.
Note - you can always get this value from Google Admin under Chrome Browser > Tokens > Token Value.
Set policies for enrolled browsers.
For example, for incognito mode setting you can allow, disallow, force:To manage this setting, go to User & Browser Settings > Security and select the desired behavior from the dropdown list.
Creating a Custom Profile
Add the Cloud Management Enrollment Token within the Google Chrome payload in a program like iMazing Profile Editor.
Download and launch iMazing Profile Editor.
Fill out the General payload with a name for the profile.
Search for the Google Chrome Configuration Payload and hit Add Configuration Payload.
Under Misc. paste in the token information under The enrollment token of cloud policy on desktop.
Save the profile under File > Save As into a directory of your choosing. Save the profile as a
.mobileconfigfile.
Deploying the Custom Profile with Jamf School
Upload the profile in Jamf School.
In Jamf School go to Profiles > Overview and click Create Profile.
Choose Upload Custom Profiles.
Upload the file saved in Step 2.
Click Next.
Give the profile a name and description if desired.
Click Next.
Click Finish.
Test installing the profile on a managed computer.
Within Jamf School, go to Devices > Inventory and select a test computer.
Click Managed Profiles and click Add profiles in the upper-right corner.
Click Add for the profile uploaded in Step 3.
Once the profile is installed on the test Mac, load Google Chrome on the test Mac and navigate to chrome://extensions in the address bar. If the deployment was successful, we should see the desired extension(s) installed there.