Can you block users from logging into their GMail Accounts in Chrome?

We're looking at installing Google Chrome to our RDS Servers as some website developers only support Chrome.  During my investigation I've found the instructions to allow me to install it for all users on a device.  But I'm left wondering about the link to gmail accounts.

As we're in a business environment we don't want staff innocently logging in to Chrome with their personal gmail accounts, as this will then draw all of their personal browsing history & settings into their working environment.  Conversely we don't want their work browsing history going home with them!

Is there a way to block people from logging into Chrome?  We could tell them now not to use their personal gmail, but some still innocently do it (or not so innocently).
bosshognzAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
alphaphaedrusConnect With a Mentor Commented:
Do you have a webfilter hardware and policy in place?
0
 
Chris HInfrastructure ManagerCommented:
OPen chrome

go here:  (paste in your address bar of chrome)
chrome://settings/content

click manage exceptions.

block cookies from *.google.com


I think this works...  Let me know.
0
 
bosshognzAuthor Commented:
I just tried that on my own Chrome - no it doesn't work.
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
alphaphaedrusCommented:
You can create a group policy to clear browsing history upon logoff.
I found that option to enable clearing on exit just not the option on what I want it to clear on exit (this is all in group policy).
0
 
bosshognzAuthor Commented:
At what point does it send history to the cloud account?  Is it when you close the browser ..... or when you send the request to go to a new page?
0
 
alphaphaedrusCommented:
The history is stored locally, the only cloud materials are downloaded apps, groups, and google+
0
 
bosshognzAuthor Commented:
History is also stored in the cloud.  My google right now shows me my History from last night's browsing on my Mac at home.
0
 
bosshognzAuthor Commented:
Sorry, my google Chrome right now shows me that.
0
 
alphaphaedrusCommented:
I also found this tip:
just go to  C:\Users\User Name\AppData\Local\Google\Chrome\User Data\Default\

find the file named History and make it read only
0
 
bosshognzAuthor Commented:
Going to be very hard to roll that out for all users on an RDS server.  And the issue still exists that if they sign into Chrome on the work computer, they see their Personal profile.
0
 
Chris HInfrastructure ManagerCommented:
http://www.latesttricks.org/2011/02/disable-auto-sign-in-gmail-on-google.html

Going through all the Google groups and dev Q&A, I notice one commonality with the answer to this question.  No one knows and Google's devs are not answering.  I'm assuming this is how google chrome remains free, by invading your privacy and tracking everything about you.


I did find two interesting settings in the preferences file for the user which could be rolled out globablly:

C:\User\%username%\AppData\Local\Google\Chrome\User Data\Default\preferences.

-----------------------
   "autofill": {
      "enabled": false,
      "negative_upload_rate": 1.0,
      "positive_upload_rate": 1.0
-----------------------------

and

---------------------------------

   },
   "reverse_autologin": {
      "enabled": false

-----------------------------------

Hope those point you in the right direction
0
 
bosshognzAuthor Commented:
I had a look, but people still have the sign in options, and it still tells them they're missing out.  I don't know what it does, but I was able to log in.  Closed Chrome, reopened and I was still logged in. :(
0
 
bosshognzAuthor Commented:
Web filter hardware no, but we have software based yes.  And there is a policy whereby staff acknowledge they are not to use non-work related sites during work time.... but if you log into chrome outside of work hours, you're then logged in until you disconnect your account.

For the web filtering software, yes we can block staff from accessing certain websites, but how do you block them logging into google but still allow them access to google?
0
 
Chris HInfrastructure ManagerCommented:
I figured it out!

Just poison accounts.google.com on your internal DNS servers with 127.0.0.1 or in my case, a "I TOLD YOU NOT TO LOG INTO YOUR GOOGLE ACCOUNT!!!  ACTIVITY HAS BEEN LOGGED!" web page.
0
 
Chris HInfrastructure ManagerCommented:
My bad if you read this earlier, I posted one of my internal domains....  I've corrected in the post above.
0
 
alphaphaedrusCommented:
nice! good old loopback special
0
 
bosshognzAuthor Commented:
hmmmm not such a bad idea.....I've blocked accounts.google.com and that works well if they're not already logged in.  Some will be though, and that will cause a headache as they can't sign out when its blocked!
0
 
bosshognzAuthor Commented:
I've also blocked plus.google.com - which comes up if they click on their profile in IE.
0
 
Chris HConnect With a Mentor Infrastructure ManagerCommented:
Isn't there a way to blow away their chrome profile via login script?
0
 
bosshognzAuthor Commented:
No idea.  Is there?
0
 
bosshognzAuthor Commented:
Unfortunately I've not been able to solve this, so have decided to close the question and offer
'effort' points to the 2 contributors.  
I think the answer here is: no, there is no way to stop users from logging into Google on Chrome.  We will approach our 3rd party software vendors RE our concerns, and review again in 6 months time.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.