asked on

Chrome browser / Sync settings / Domain business environment best practices

I'm not sure what I'm asking for but I'll try to describe what I'm looking for in my situation with Chrome. I'm investigating the requirements to change the environment's default browser to chrome. I know how to add GPO's and manage the behavior of chrome at the pc/domain level but I want to also control the disablement of sync access for a user if/when they leave the company for security reasons; saved passwords,etc.

Here is my main questions -
1. Can I tie Chrome's sync login to our domain accounts so I can control the Chrome access to the sync passwords when they leave?

McKnife

Hi Joe.

I don't understand that idea. If they leave, what tells you that they haven't synced anything already before?
Anyway, you could install the chrome administrative templates and see what you can control by using those: https://support.google.com/chrome/a/answer/187202?hl=en

Joe G

ASKER

Hey McKnife - If I force the browser only to sync to @workdomain.com I thought there would be a way to control it centrally from either a chrome menu or tie it into AD.

I'll review the link and my research results again but there has to be a way to control the chrome login syncs in a work domain environment outside of just allowing it or disabling it.

McKnife

Scenario: user has access to passwords of the company. He uses the pw manager in chrome and is logged into his google account. He chooses pw sync. He goes home and on his laptop, logs on to the google account and has access to the same passwords and is able to export them.
That's why I ask again: "If they leave, what tells you that they haven't synced anything already before?" - Could you please answer that?

Joe G

ASKER

I understand your scenario, this may help.

They don't have Chrome now. Default browser currently is IE, i'm looking to make a change but before I do I want to control their sync behavior.

McKnife

Following my scenario, you shouldn't allow syncing at all. Look at the options that you have, for example https://support.google.com/chrome/a/answer/7572556?hl=en
Or
https://support.google.com/chrome/forum/AAAAP1KN0B0lD3Bttc2h8o/?hl=en

Joe G

ASKER

Thank you. Sort of activating a roaming profile settings I guess there is no option that you are aware of that can keep the bookmarks and autofill synced with the users in a domain environment with chrome?

Joe G

ASKER

what about this - ever heard of it?

https://tools.google.com/dlpage/dirsync

Shaun Vermaak

That is used to sync users and groups from AD to Google directory. It is not what you want

McKnife

Don't understand why you want that. Do your users use several computers each?

Joe G

ASKER

Yes they do. There are satellite offices that users go to depending on their schedule. Currently I have win 7 with roaming profiles turned on to help with favs and autofill in IE but I want to avoid bringing roaming profiles over when I start rolling out win 10.

Joe G

ASKER

this looks promising. If I change the roaming profile file location of each chrome install I can save it to their map drives or folder direction folders, then i can disable sync all together.

https://support.google.com/chrome/a/answer/7349337?hl=en

ASKER CERTIFIED SOLUTION

Joe G

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial