Link to home
Start Free TrialLog in
Avatar of bosshognz
bosshognzFlag for New Zealand

asked on

Can you block users from logging into their GMail Accounts in Chrome?

We're looking at installing Google Chrome to our RDS Servers as some website developers only support Chrome.  During my investigation I've found the instructions to allow me to install it for all users on a device.  But I'm left wondering about the link to gmail accounts.

As we're in a business environment we don't want staff innocently logging in to Chrome with their personal gmail accounts, as this will then draw all of their personal browsing history & settings into their working environment.  Conversely we don't want their work browsing history going home with them!

Is there a way to block people from logging into Chrome?  We could tell them now not to use their personal gmail, but some still innocently do it (or not so innocently).
Avatar of Chris H
Chris H
Flag of United States of America image

OPen chrome

go here:  (paste in your address bar of chrome)
chrome://settings/content

click manage exceptions.

block cookies from *.google.com


I think this works...  Let me know.
Avatar of bosshognz

ASKER

I just tried that on my own Chrome - no it doesn't work.
You can create a group policy to clear browsing history upon logoff.
I found that option to enable clearing on exit just not the option on what I want it to clear on exit (this is all in group policy).
At what point does it send history to the cloud account?  Is it when you close the browser ..... or when you send the request to go to a new page?
The history is stored locally, the only cloud materials are downloaded apps, groups, and google+
History is also stored in the cloud.  My google right now shows me my History from last night's browsing on my Mac at home.
Sorry, my google Chrome right now shows me that.
I also found this tip:
just go to  C:\Users\User Name\AppData\Local\Google\Chrome\User Data\Default\

find the file named History and make it read only
Going to be very hard to roll that out for all users on an RDS server.  And the issue still exists that if they sign into Chrome on the work computer, they see their Personal profile.
http://www.latesttricks.org/2011/02/disable-auto-sign-in-gmail-on-google.html

Going through all the Google groups and dev Q&A, I notice one commonality with the answer to this question.  No one knows and Google's devs are not answering.  I'm assuming this is how google chrome remains free, by invading your privacy and tracking everything about you.


I did find two interesting settings in the preferences file for the user which could be rolled out globablly:

C:\User\%username%\AppData\Local\Google\Chrome\User Data\Default\preferences.

-----------------------
   "autofill": {
      "enabled": false,
      "negative_upload_rate": 1.0,
      "positive_upload_rate": 1.0
-----------------------------

and

---------------------------------

   },
   "reverse_autologin": {
      "enabled": false

-----------------------------------

Hope those point you in the right direction
I had a look, but people still have the sign in options, and it still tells them they're missing out.  I don't know what it does, but I was able to log in.  Closed Chrome, reopened and I was still logged in. :(
ASKER CERTIFIED SOLUTION
Avatar of alphaphaedrus
alphaphaedrus
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Web filter hardware no, but we have software based yes.  And there is a policy whereby staff acknowledge they are not to use non-work related sites during work time.... but if you log into chrome outside of work hours, you're then logged in until you disconnect your account.

For the web filtering software, yes we can block staff from accessing certain websites, but how do you block them logging into google but still allow them access to google?
I figured it out!

Just poison accounts.google.com on your internal DNS servers with 127.0.0.1 or in my case, a "I TOLD YOU NOT TO LOG INTO YOUR GOOGLE ACCOUNT!!!  ACTIVITY HAS BEEN LOGGED!" web page.
My bad if you read this earlier, I posted one of my internal domains....  I've corrected in the post above.
nice! good old loopback special
hmmmm not such a bad idea.....I've blocked accounts.google.com and that works well if they're not already logged in.  Some will be though, and that will cause a headache as they can't sign out when its blocked!
I've also blocked plus.google.com - which comes up if they click on their profile in IE.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
No idea.  Is there?
Unfortunately I've not been able to solve this, so have decided to close the question and offer
'effort' points to the 2 contributors.  
I think the answer here is: no, there is no way to stop users from logging into Google on Chrome.  We will approach our 3rd party software vendors RE our concerns, and review again in 6 months time.