Google Chrome Enterprise – Controlling Updates with Group Policy

deploymentgoogle-chromegroup-policy

We have been using Chrome's MSI and chrome's group policy templates to deploy it to all our users.

Lately we have been bitten by a few bugs that made it into release updates. The latest being scroll bars in select dropdowns not being draggable.

We want more control over when people get updated – so we can have a few of the more tech savvy staff try the newest version with our internal applications before everyone gets it.

I found the documentation on disabling automatic updates and pushing out new MSIs to upgrade, but:

  • I couldn't find out if google puts out a new MSI for every update or only major version updates?
  • If it is only major updates is there a way for everyone to still get security updates until the next major version is releases? (and hope the minor updates don't break anything)

Best Answer

I have Chrome deployed fairly widely in a few different Customers and I've had to contend with this.

Here's where Google relates the policy:

We release a new "major" version to the stable channel about every six weeks. We also update the stable channel between major updates if we have important crash or security fixes.

If you're looking to repair an existing MSI installation, and you left auto-updates on, you can repair with the latest stable MSI.

That's not as crystal-clear as I'd like it to be, and I suspect you'll feel the same way.

We have disabled automated updates, test new versions in limited deployments and, when they test "good", deploy the new MSIs to "upgrade" the old versions. Sounds like something very similar to what you're looking to do.

Related Topic