Follow the steps below in order to configure a GPO that will install and enable the Impero Education Pro Google Chrome extension (1.1.10) For web filtering.
Allow clients2.googleusercontent.com in any filtering so that the Extension can be downloaded to the device
1. Download the Google Administrative Templates from here: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
2. Open Group Policy Management.
3. Create a new GPO for the policy (or add to an existing policy).
4. Right-click on your GPO, and select “Edit”.
5. You then see the “Group policy management Editor” window.
6. Expand the Computer/User configuration tree on the left-hand side, depending on how you wish to configure your policy.
7. Right-click on “Administrative templates” and select “Add/Remove Templates”.
8. Click on “Add”.
9. Browse to the templates you downloaded in step 2, and open the “chrome.adm” template that is relevant to your operating system and Language.
10. Once uploaded, expand to the following path (may vary depending on your OS) on the left of the Group policy management editor:
“Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Google > Google Chrome > Extensions”
11. On the right-hand side, select “Configure the list of force-installed extensions”.
12. Right-click and select “Edit”.
13. Mark the “Enabled” button.
14. Click on the “Show…” button.
15. Under the “Value” column, specify the following:
(Please make sure you have no blank spaces in the Value Box Below)
16. Click on “OK”, followed by “Apply”.
17. You may want to disable “Incognito mode” and "guest mode".
18. In the same GPO, on the left-hand side, browse to:
“Policies > Classic Administrative Templates > Google Chrome”
19. On the right-hand side, locate “Incognito mode availability”.
20. Right-click and select “Edit”.
21. In the new window, “Enable” this policy item.
22. From the “Incognito mode availability” drop-down list, select “Incognito mode disabled.”
23. Click on “OK”, followed by “Apply”.
24. On the right-hand side, locate “Enable guest mode in browser”.
25. Right-click, and select “Edit”.
26. In the new window, “Disable” this policy item.
27. Click on “OK”, followed by “Apply”.
28. You may want to disable the ability for users to end process in the Google Chrome Task Manager
As this will stop logging and blocking. To do this you can navigate to the following location;
"Policies > Administrative Templates > Classic Administrative Templates > Google > Google Chrome > "
Look for the following Object > "Enables ending processes in Task Manager" and set to Disabled.
This allows the users to open the Chrome Task Manager but disables the "End Process Button".
29. You may wish to disable or block chrome notifications completely or from specific sites. To do this you can use the following policies;
User or Computer Configuration > Administrative Templates > Classic Administrative Templates > Google > Google Chrome > Content Settings > Look for "Default notification setting" and set to enabled and set the setting to
"Do not allow any site to show desktop notifications"
29a. You can also set specific sites not to show notifications on the following policy;
User or Computer Configuration > Administrative Templates > Classic Administrative Templates > Google > Google Chrome > Content Settings > Look for "Block notifications on these sites" and set to enabled and set the list of sites you want to block.
Here is an example of what needs to be put in;
30. Back in the Group Policy Management window, assign this policy to users/computers as normal
31. Users affected by this GPO should now see the Chrome extensions installed and enabled automatically (once the GPO has updated on their machine).
32. If running Sophos, add the following exclusion.