Share via

Issues with Chrome update GPO

rp-6590 6 Reputation points
2022-03-09T20:41:58.217+00:00

Non-admin users in my sphere have been seeing "Updates are disabled by your administrator" in Chrome.
Now, we have never set any update policies on chrome before, but we are still seeing this.
I followed Googles/Microsofts guides on this, and I've created the GPO to allow this.
But even after the GPO is being appiled, the chrome browsers are still not updating.
Am I missing something?
Below are the GPO settings i have set.
181644-image.png

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments

5 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Thameur-BOURBITA 36,261 Reputation points Moderator
    2022-03-10T23:18:33.643+00:00

    Hi,

    You should start by checking if the GPO is well applied on computers for this settings. You can generate gpresult report using a local administrator account on impacted computer. 

    Gpresult / H c:\temp\gpresult.html

    Please don't forget to mark helpful reply as answers

    1 person found this answer helpful.
  2. Thameur-BOURBITA 36,261 Reputation points Moderator
    2022-03-14T16:37:04.467+00:00

    Hi,

    You can refer to the link to enable google chrome update:

    how-to-use-gpo-to-manage-google-chrome-auto-update

    Please don't forget to mark helpful reply

    1 person found this answer helpful.
  3. Limitless Technology 39,931 Reputation points
    2022-03-15T15:40:24.547+00:00

    Hi @rp-6590

    This is not a GPO error but an issue with the Chrome itself.

    As mentioned above, the “updates are disabled by the administrator Chrome” error can occur because of Chrome corrupted configuration files. Hence, it is recommended to reset Chrome settings to their original configurations after receiving the error.

    In some cases, updates to Chrome are automatically prevented through the registry.

    -In your device go to the below registry “HKEY_CURRENT_USER”
    -Double–click on “Software” and then on “Google“
    -Double–click on “Update” and then on “Client State“.
    -Double click on the folder inside “Current State” and on the right side double click on the “Default” value
    -Type in “1” in the “Value Data” and click on “OK“.

    Maybe some of the GPO might have an indirect effect on the updates on the chrome update you might need to have a check on those too.

    Hope this resolves your Query!!

    --
    --If the reply is helpful, please Upvote and Accept it as an answer–

    1 person found this answer helpful.
  4. Steven 46 Reputation points
    2022-11-28T20:50:53.157+00:00

    I'm trying to do exactly the same thing. Same settings, gpresult confirm me my GPO is applied, I'm checking in Chrome with chrome://policy and I see policy there. In the GPO I force google update to 5 minutes and I see it in chrome://policy but the update is never done.

    I gave the local admin right to that AD user, reboot the computer et bingo the google update execute and chrome is up to date.

    The problem is I dont want to give local admin right to anyone in my business, but I want to force the Chrome update to be sur they are up to date as soon that a patch to a 0-day appear.

    The Google Update ADMX only apply to computer and not to users ... is there a way to copy computer ADMX to works in users GPO???

    If someone have an idea, this would be really appreciate!

    THanks in advance!

    Steven

    1 person found this answer helpful.
    0 comments
  5. FB4 IMI 16 Reputation points
    2022-11-30T10:43:58.65+00:00

    Hi @Steven ,

    i've also struggled with this issue for some time now, but today i was successful.

    My settings up to now where to activate 'Update Policy override default' and set it to 'Always allow updates (recommended)' on both Computer Configuration->Adminstrative templates->Google->Google Update->Applications and Computer Configuration->Adminstrative templates->Google->Google Update->Applications->Google Chrome (which is propably a bit over defined, either of them should be enough).

    This never worked.

    Today i also (!!!) activated 'Allow installation' and set it to 'Always allow installs (recommended)' on both pathes shown above (again, propably over defined).

    I've activated the 'Auto-Update check period override' in Computer Configuration->Adminstrative templates->Google->Google Update->Preferences and set it to 30 minutes (which is a good interval for my use case). I then woke up a complete lab with 21 Windows 10 clients, waited for more than 30 minutes, logged in, checked the Chrome version and got the latest 108.0.5359.72 on all clients. And i'm pretty sure the clients where on 107 yesterday...

    So maybe this helps?

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.