How to Enroll Chrome Browser into Google Cloud Management (Android/Ios/Windows)

Chrome Browser Cloud Management

  • Manage Chrome browser from a single, cloud-based Admin console, across all your Microsoft Windows, Apple Mac, Linux, iOS, and Android devices at no additional cost.

  • Enforce 100+ Chrome policies for all users who open Chrome browser on a managed device. These are the same policies that can be managed with on-premise tools like Windows Group Policy.

    Users don't have to sign in or have Google Accounts to receive policies.

  • Block suspicious extensions across your organization and do other common IT tasks.

  • View reports on Chrome browsers deployed across your organization, including each browser's current version, installed apps and extensions, and enforced policies.

Setup steps

  1. Sign up for Chrome Browser Cloud Management
  2. Enroll cloud-managed Chrome browsers
  3. Enable Chrome browser reporting
  4. Set policies for enrolled browsers

Requirements

  • Chrome browser for Windows, Mac, Linux, Android, and iOS platforms. Chrome Browser Cloud Management maintains compatibility with the most recent 12 versions of Chrome browser.
  • Ensure that Chrome components, such as Google Update, are not modified or disabled. Chrome installations that are not using the default configuration will not be supported, as this could lead to unexpected behavior.

Full Chrome Enterprise and Education can be found here: Link-to-Google


Android:

Step 1: Generate the enrollment token

  1. In your Google Admin console (at admin.google.com).
  2. Generate an enrollment token. See Generate enrollment token.

  3. Copy the token to use in step 2.

Step 2: Assign the enrollment token to Chrome browser

  1. Sign in to the SOTI Mobicontrol console.
  2. At the top left, click the Menu icon and select Policies.
  3. At the top right, click New App policy.
  4. Select Androidand thenAndroid Enterprise.
  5. Name the policy.
  6. Click the Apps tab.
  7. Click the + button to go to the apps table.
  8. Check the box next to Chrome.
  9. Click the gear icon next to Chrome.
  10. In the navigation menu, click Managed App Config.
  11. Toggle the button to turn on a managed app configuration.
  12. Search for the Enrollment token policy in the list.
  13. Enter the token generated in step 1.
  14. Click Save.
  15. Click Add.
  16. Click Save and assign.
  17. Choose the assignment policy you want and click Assign


IOS:

  1. In your Google Admin console (at admin.google.com).
  2. Go to  Menu and then Devices > Chrome > Managed browsers.

    If you signed up for Chrome Browser Cloud Management, go to Menu and then Chrome browser > Managed browsers.

  3. (Optional) On the left, select the top-level organization. Or, select the organizational unit where you want to generate a token that will enroll browsers directly to that specific organizational unit. For information, see Add an organization unit.

  4. At the top, click Enroll.
    Note: If this is your first browser enrollment, you are prompted to accept the Chrome Browser Cloud Management Terms of Service.

  5. Under Downloads, click Appconfig File. The downloaded XML file contains the enrollment token.
  6. Click Done.
  7. Sign in to your SOTI Mobicontrol
  8. Upload the XML file to the app at the Application Policy.
  9. Push the profile to iOS devices.

It might take up to 24 hours for data about enrolled browsers and the browser reporting information to be updated in the Admin console!


Windows:

Powershell Script:

$token = "ENROLLMENT_TOKEN"
try{
$path = 'HKLM:\SOFTWARE\Policies\Google'
if(-not (Test-Path $path))
{
$status = New-Item -Path 'HKLM:\SOFTWARE\Policies' -Name 'Google'
}
$path = 'HKLM:\SOFTWARE\Policies\Google\Chrome'
if(-not (Test-Path $path))
{
$status = New-Item -Path 'HKLM:\SOFTWARE\Policies\Google' -Name 'Chrome'
}
$status = Set-ItemProperty -Path $path -Name "CloudManagementEnrollmentToken" -Value $token
Write-Host "Execution successfully completed"
}
catch{
Write-Output $_.Exception.Message
}


a year ago
SOTI MobiControl
ANSWERS