If you’ll remember, that user unchecked “Enable phishing and malware protection.” We’re going to “Always reapply this setting.” We’re going to just check that checkbox and make sure that it’s always set. We’ll go ahead and pick “PolicyPak for Google Chrome” here, and let’s go ahead and dictate our settings. We’ll “Create a GPO in this domain, and Link it here…” and we’ll call this “Manage Chrome using PolicyPak.” Click “Edit” here, and we’ll dive down under user side, “PolicyPak/Applications/New/Application” and there it is – “PolicyPak for Google Chrome” – as well as lots of other great applications like “Internet Explorer,” “Java,” “Lync,” “Mozilla Firefox,” “Adobe Reader.” Actually, we have about 100 Paks, so you can just snap those in and you’re ready to rock. Let’s go ahead and close this out and go over to the Group Policy editor. Instead, wouldn’t it be better to “Do not allow sites to access my camera and microphone”? I’m going to show you how to do that. Lastly, let’s take a look at “Content settings.” One of the scariest settings overall is “Ask me when a site requires access to my camera and microphone.” The user can just say, “Yes, I would like to do that,” and the camera turns on, the microphone turns on and your secrets go right out the door. You want this unchecked, but how are you going to do that? That’s what we’re going to show you next. The bad guy steals a laptop, and they can start surfing the websites that your users have used, and then they can get into all sorts of places that you probably don’t want to bad guys to go. If this checkmark is checked, that’s not good because then this machine becomes less secure.
Thing number two, let’s say this idea here, “Offer to save passwords I enter on the web,” not good if it is checked. Just to prove a point here, if I go back to “Settings” here and go back to “Show advanced settings,” you can see that’s not being enforced in any meaningful way. Some of these defaults that Chrome puts in are pretty good like “Enable phishing and malware protection.” That’s good, but the user just clicks it, closes out Chrome, and now they’re not protected – not good for you. If we go to “Settings” here for Chrome and take a look at “Show advanced settings,” let’s take a look at what’s available to the user. Even a standard user can get into all sorts of mischief. I’m just a guy called “eastsalesuser4,” a standard user, no admin rights. In this video, I’m going to show you how to manage Chrome using Group Policy or your own systems management utility.
This is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software. Manage Google Chrome using Group Policy video transcript
0 kommentar(er)
