Is there a specific setting in the Google Chrome group policy template to block / disable user’s ability to “install” Chrome apps? Ex: If I browse to Youtube.com<\/a>, Chrome presents an option to “install YouTube” and it adds it as an app on the start menu for the user.<\/p>\n
We typically don’t allow Chrome, but we have a vendor site that only works with Chrome. Before anyone suggests trying Edge, Firefox, etc. we have done so, and the site only works correctly in Chrome. I wish it would work with Edge as we already have policies in place for Edge.<\/p>\n
I have the Chrome Enterprise admin templates in Group Policy but the settings only mention extensions.<\/p>","upvoteCount":7,"answerCount":4,"datePublished":"2025-04-09T17:44:22.085Z","author":{"@type":"Person","name":"bcrooms","url":"https://community.spiceworks.com/u/bcrooms"},"suggestedAnswer":[{"@type":"Answer","text":" Is there a specific setting in the Google Chrome group policy template to block / disable user’s ability to “install” Chrome apps? Ex: If I browse to Youtube.com<\/a>, Chrome presents an option to “install YouTube” and it adds it as an app on the start menu for the user.<\/p>\n We typically don’t allow Chrome, but we have a vendor site that only works with Chrome. Before anyone suggests trying Edge, Firefox, etc. we have done so, and the site only works correctly in Chrome. I wish it would work with Edge as we already have policies in place for Edge.<\/p>\n I have the Chrome Enterprise admin templates in Group Policy but the settings only mention extensions.<\/p>","upvoteCount":7,"datePublished":"2025-04-09T17:44:23.019Z","url":"https://community.spiceworks.com/t/gpo-for-chrome-enterprise-on-rds-server/1194970/1","author":{"@type":"Person","name":"bcrooms","url":"https://community.spiceworks.com/u/bcrooms"}},{"@type":"Answer","text":" Well since you have the Admin Templates:<\/p>\n Another option, you can modify the Chrome shortcut to include Lastly, is to modify the master prefs file to include It is not an Extension/App to Chromium browser(s). The --disable-features flag mentioned above does not disable this pop-up appearing in the address bar, nor block it from being installed. That flag will block apps from the Chrome/Edge stores.<\/p>\n What is getting installed is a “Progressive Web App”. It essentially creates a browser session to that website, so really it’s nothing more than a “fancy” shortcut. There’s no security implications since you are already allowing users to visit that website. If you inspect the shortcut, it’s calling msedge-proxy.exe, and passing an app-id. That appID just goes to youtube, and adds some navigation buttons. If you replace that --app-id flag with --app=“https://www.youtube.com<\/a>”, you’ll get a very similar looking “app”, minus those buttons.<\/p>\n If you’re on O365, you can create an Outlook “app” for your users, Rename the shortcut to “Outlook”, and point the app URL to “https://outlook.office.com/mail<\/a>”. It’s just OWA, but “fancy”.<\/p>\n I’m not aware of any method to block them - since it’s functionally no different from the user creating a shortcut to an allowed website.<\/p>\n Let me know if you do find a way, I keep looking every so often.<\/p>\n TL;DR: Nope. You cannot block this from users.<\/p>","upvoteCount":0,"datePublished":"2025-04-10T17:01:03.889Z","url":"https://community.spiceworks.com/t/gpo-for-chrome-enterprise-on-rds-server/1194970/3","author":{"@type":"Person","name":"phildrew","url":"https://community.spiceworks.com/u/phildrew"}},{"@type":"Answer","text":" That makes more sense. Thanks for the detail.<\/p>\n I was asked to block this but I had already explained that it was more than likely not doable.<\/p>","upvoteCount":0,"datePublished":"2025-04-10T17:20:05.825Z","url":"https://community.spiceworks.com/t/gpo-for-chrome-enterprise-on-rds-server/1194970/4","author":{"@type":"Person","name":"bcrooms","url":"https://community.spiceworks.com/u/bcrooms"}}]}}
Computer Configuration > Administrative Templates > Google > Google Chrome > Extensions > Configure extension installation blocklist<\/code><\/p>\n
--disable-features=DefaultWebAppInstallation<\/code>.<\/p>\n
\"default_apps\": \"\"<\/code><\/p>","upvoteCount":0,"datePublished":"2025-04-10T12:46:33.885Z","url":"https://community.spiceworks.com/t/gpo-for-chrome-enterprise-on-rds-server/1194970/2","author":{"@type":"Person","name":"fallen-it","url":"https://community.spiceworks.com/u/fallen-it"}},{"@type":"Answer","text":"