Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Google Chrome STIG Computer v2r11
Data collected on: 6/30/2025 2:35:06 PM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 6/16/2025 3:10:58 PM
Modified | 6/16/2025 3:14:56 PM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 7 (AD), 7 (SYSVOL)
Unique ID | {868145DD-E0B1-4C13-8658-2185292871F1}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Google/Google Chrome

Policy | Setting | Comment
--- | --- | ---
Allow collection of WebRTC event logs from Google services | Disabled |
Allow download restrictions | Enabled |
Download restrictions | Block malicious downloads and dangerous file types.
Policy | Setting | Comment
Allow media autoplay | Disabled |
Allow media autoplay on a allowlist of URL patterns | Enabled |
Allow media autoplay on a allowlist of URL patterns
[*.]mil
[*.]gov
Policy | Setting | Comment
Allow QUIC protocol | Disabled |
Ask where to save each file before downloading | Enabled |
Block access to a list of URLs | Enabled |
Block access to a list of URLs
javascript://*
Policy | Setting | Comment
Continue running background apps when Google Chrome is closed | Disabled |
Control where Developer Tools can be used | Enabled |
Control where Developer Tools can be used | Disallow usage of the Developer Tools
Policy | Setting | Comment
Disable saving browser history | Disabled |
Disable synchronization of data with Google | Enabled |
Enable AutoFill for addresses | Disabled |
Enable AutoFill for credit cards | Disabled |
Enable deleting browser and download history | Disabled |
Enable guest mode in browser | Disabled |
Enable network prediction | Enabled |
Enable network prediction | Do not predict network actions on any network connection
Policy | Setting | Comment
Enable online OCSP/CRL checks | Enabled |
Enable reporting of usage and crash-related data | Disabled |
Enable search suggestions | Disabled |
Enable URL-keyed anonymized data collection | Disabled |
Import autofill form data from default browser on first run | Disabled |
Import saved passwords from default browser on first run | Disabled |
Incognito mode availability | Enabled |
Incognito mode availability | Incognito mode disabled

Google/Google Chrome/Content settings

Policy | Setting | Comment
--- | --- | ---
Control use of the Web Bluetooth API | Enabled |
Control use of the Web Bluetooth API | Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API
Policy | Setting | Comment
Control use of the WebUSB API | Enabled |
Control use of the WebUSB API | Do not allow any site to request access to USB devices via the WebUSB API
Policy | Setting | Comment
Default cookies setting | Enabled |
Default cookies setting | Keep cookies for the duration of the session
Policy | Setting | Comment
Default geolocation setting | Enabled |
Default geolocation setting | Do not allow any site to track the users' physical location
Policy | Setting | Comment
Default pop-ups setting | Enabled |
Default pop-ups setting | Do not allow any site to show pop-ups

Google/Google Chrome/Default search provider

Policy | Setting | Comment
--- | --- | ---
Default search provider name | Enabled |
Default search provider name | Google Encrypted
Policy | Setting | Comment
Default search provider search URL | Enabled |
Default search provider search URL | https://www.google.com/search?q={searchTerms}
Policy | Setting | Comment
Enable the default search provider | Enabled |

Google/Google Chrome/Extensions

Policy | Setting | Comment
--- | --- | ---
Configure extension installation allow list | Enabled |
Extension IDs to exempt from the blocklist
oiigbmnaadbkfbmpbfijlflahbdbdgdf
maafgiompdekodanheihhgilkjchcakm; https://outlook.office.com/owa/SmimeCrxUpdate.ashx
Policy | Setting | Comment
Configure extension installation blocklist | Enabled |
Extension IDs the user should be prevented from installing (or * for all)
*

Google/Google Chrome/Generative AI

Policy | Setting | Comment
--- | --- | ---
Settings for AI-powered History Search | Enabled |
Settings for AI-powered History Search | Do not allow AI History Search.
Policy | Setting | Comment
Settings for Create Themes with AI | Enabled |
Settings for Create Themes with AI | Do not allow Create Themes.
Policy | Setting | Comment
Settings for DevTools Generative AI Features | Enabled |
Settings for DevTools Generative AI Features | Do not allow DevTools Generative AI Features.
Policy | Setting | Comment
Settings for GenAI local foundational model | Enabled |
Settings for GenAI local foundational model | Do not download model
Policy | Setting | Comment
Settings for Help Me Write | Enabled |
Settings for Help Me Write | Do not allow Help Me Write.
Policy | Setting | Comment
Tab Compare settings | Enabled |
Tab Compare settings | Do not allow Tab Compare.

Google/Google Chrome/Google Cast

Policy | Setting | Comment
--- | --- | ---
Enable Google Cast | Disabled |

Google/Google Chrome/Password manager

Policy | Setting | Comment
--- | --- | ---
Enable saving passwords to the password manager | Disabled |

Google/Google Chrome/Printing

Policy | Setting | Comment
--- | --- | ---
Enable Google Cloud Print proxy | Disabled |

Google/Google Chrome/Remote access

Policy | Setting | Comment
--- | --- | ---
Enable firewall traversal from remote access host | Disabled |

Google/Google Chrome/Safe Browsing settings

Policy | Setting | Comment
--- | --- | ---
Enable Safe Browsing Extended Reporting | Disabled |
Safe Browsing Protection Level | Enabled |
Safe Browsing Protection Level | Safe Browsing is active in the standard mode.

User Configuration (Disabled)
No settings defined.