5 Replies Latest reply on Oct 17, 2017 6:35 AM by cwinning

    Google Chrome Update Issue

    Hugues Rookie

      We are currently testing updating Google Chrome with Ivanti Patch for SCCM. Our goal is to ensure that we have control over the versions we deploy in the production environment.


      We control the environments by disabling Google Chrome updates via GPO which works very well. No user is able to update Chrome.


      We noticed that during deployments, even if a GPO is in place to disable updates, during installation the registry keys that prevent automatic updating are deleted and reapplied later when refreshing GPO. So when we updating Chrome but it still check if there is not a newer version available and if so installs the latest version available on the Google site. Which could cause a major impact if this  version have not passed the testing process in order to approve deployment without impact.


      Example: we are deploying version 61.0.3163.91 and during the deployment version 61.0.3163.100 becomes available then it installs on the worstation, despite the control that we put in GPO, because the update erases the keys of register related to this GPO.


      Do you have any idea how we could properly controle the updates


      Thank you

        • 1. Re: Google Chrome Update Issue
          cwinning CommunityTeam



          Regarding Patch for SCCM, only published updates will be offered, you could exclude these updates from being published.




          • 2. Re: Google Chrome Update Issue
            Hugues Rookie


            Effectively with regard to Patch for SCCM only what is publishing that is proposed.


            The problem is that when you deploy this update (ex: 61.0.3163.91) via SCCM and there is a newer version on Google site (ex: 61.0.3163.100) then Chrome tries to download and install the newer version available on the site of Google and this despite that there is in place a GPO that deactivates the update of Chrome.


            We noticed that installing the Chrome update deletes the registry keys that prevent the update.


            I was wondering if there was not a known solution for this problem

            • 3. Re: Google Chrome Update Issue
              Hugues Rookie



              We have applied a GPO that disables Google Update which works fine because the user is not able to update Google Chrome

              The GPOs are:

                   HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Google \ Update


              • AutoUpdateCheckPeriodMinutes   REG_DWORD 0  ( Auto-update check period override = Disabled)
              • InstallDefault REG_DWORD 0  (Allow installation default = Disable )
              • UpdateDefault REG_DWORD 0 (Update policy override default = Enabled)


              When the update is deployed (WSUS/SCCM) , during the installation, the update deletes the entire key from:

                   ... Google \ Update


              So if there is a new version available on Google Update, then it is installed, because the GPOs have been deleted by the software update.

              We tested it several times with the same result.


              If we run a gpupdate / force then the keys are reapplied.


              I am convinced that we are not the only ones to have this problem and I am wondering what solution companies have applied to counter this


              Thank you for your help

              • 4. Re: Google Chrome Update Issue
                Hugues Rookie


                We found what caused the registry keys to be erased.

                This is a "Custom Action" in the initial Chrome package created by our company that clears the keys when a Chrome update applies.

                We have found the right combination of GPOs to apply so that manual and automatic updates can not be applied and can be done by SCCM only.

                Thank you for your help

                1 of 1 people found this helpful
                • 5. Re: Google Chrome Update Issue
                  cwinning CommunityTeam



                  Thank you for posting your solution this, I'm positive it will help other admins deal with this type of issue.


                  Thank you,