Chrome update policy

Question

Hi , I want to create a policy for chrome update on our managed devices to fix CVE-2025-14174 vulnerability.I tried creating a intune config policy, there is no option of chrome in settings catalogue. Tried uploading ADMX files to create policy. However google.admx successful created but chrome.admx and updategoogle.admx are failing no matter how many times I tried. Need guidance on this. Thank you

Answer 1

To create a policy for updating Chrome on managed devices using Intune, you can follow these steps:

1. Ensure ADMX Files Are Correctly Uploaded: Since you mentioned issues with uploading the chrome.admx and updategoogle.admx files, make sure you are using the latest versions of these files. Check if there are any specific requirements or dependencies for these files that might be causing the upload to fail.
2. Use the Intune Admin Center: Sign in to the Microsoft Intune admin center and navigate to Devices > Configuration > Create > New Policy. Ensure that you select the correct platform (Windows 10 and later) and profile type (Templates > Custom).
3. Add Custom Configuration Settings: After creating the policy, add the custom configuration settings for Chrome updates. You may need to refer to the ADMX file documentation for the correct policy names and settings.
4. Assign the Policy: Once your configuration profile is created, assign it to the appropriate user or device groups.
5. Monitor Deployment: After deployment, monitor the status of the policy to ensure it is applied correctly. You can check the profile assignment status in the Intune admin center under Devices > Configuration profiles.

If you continue to face issues with the ADMX files, consider checking for any error messages during the upload process, as they can provide insight into what might be going wrong. Additionally, ensure that your Intune environment is up to date and that you have the necessary permissions to create and assign policies.

---

References:

• Use Group Policy to enable an update that is disabled by default

Answer 2

Maybe these 3 settings will help you? They are Intune native, no admx imported: