Link to home
Start Free TrialLog in
Avatar of danielabrooks
danielabrooksFlag for United States of America

asked on

Set the default web browser via group policy?

In our company we are testing a Chrome deployment that will be used alongside Internet Explorer. Only a select few of our users are local admins on their machines, so most individuals are locked down pretty tight obviously. One of the complaints we've had during this testing stage however has been that users cannot set Chrome as their default browser if they choose. It asks the users when they launch if they want to make Chrome default, and they choose yes, but it doesn't seem to take. Strangely, the "Internet" program listed at the top of the start menu changes, but when clicking on shortcuts to websites or anything else it defaults to IE. Is there a way to allow users this limited control via a GPO? Thanks for any help anyone can provide!

For the record, I've tried logging in as them (with non admin rights) and forcing Chrome to be default several different ways, but it just won't take, so it's definitely a permissions issue.
Avatar of Justin Owens
Justin Owens
Flag of United States of America image

That is a machine based setting, not a user based setting, meaning that if any user has the rights to change default application handling on a machine, it will change that default for all users on that machine.  Obviously, this is not an issue if your users never share machines, but that is the reason that it is a difficult item to delegate.

This article:

http://windows-active-directory.net/MS.Press-MCSE.Training.Kit--Mi/HTML/ch13e.htm

has a list of delegate rights and privileges available to AD via GPO.  Changing default program is not in the list.  It requires administrative rights, out of the box.  Now, I suppose you COULD really dig into the OS and write a custom security template to address that, but I have no idea how to help you with that.
Avatar of danielabrooks

ASKER

Thanks DrUltima. Our users don't share PC's, and even if they did, I wouldn't care to make it a global policy. Admin rights for all is definitely not an option though. Oh well, I guess I'm really hoping someone else has encountered this issue and created a template for this purpose.
Honestly, your easiest solution would be to log into those computers and change the default browser with an admin account.  Unless you have hundreds of machines affected, it would be faster than writing a custom security template.

Justin
Actually, there are about 300 PC's this would effect, so that's not a very attractive option unfortunately. And I would really like them to just be able to choose.
Avatar of Pacane
Pacane

You could always try to deploy a reg file that would set it up for you. This may change depending on the OS.
http://www.windowsitpro.com/article/configuration/how-can-i-configure-the-default-internet-browser-.aspx
Thanks Pacane, but the point is to allow the user to be able to set their own browser. I don't our IT department bothered every time a user wants to change their default browser.
ASKER CERTIFIED SOLUTION
Avatar of Chelcone
Chelcone

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I appreciate all the help guys, but I'm not trying to set the default browser with a login script or by any other means, I can figure that part out. What I'm trying to do is modify the user permissions to allow them to be able to change the default browser on their own.

Does anyone know how to do THAT?
Not without Admin rights....
if you are able to write a small yes no aplication that will run on start up that asks the user if they would like to have chrome as the default and if they click yes then you can run the comand "chrome.exe -silent -setDefaultBrowser" and it will set it for them. Not sure if it will work if the user isnt a local admin but its an idea.
Thanks for the suggestion, but that's just not practical for a 300 PC network.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The answer wasn't the one I was looking for, but it was the best possible choice given the limitations of Windows.