ManagedBookmarks and GPO deployment

[Luca Fabbri]

Hello,

I have a question regarding Chrome Managed Bookmarks deployed by GPO.

Consider this bookmarks structure:

• Company Bookmarks
• Folder 1
• Link 1
• Link 2
• Folder 2
• Link 1
• Link 2

Objectives

All users must see Company Bookmarks/Folder 1 (and its content) only.

Some users must see bookmarks above and Company Bookmarks/Folder 2 (and its content).

I already read these articles:

• Complex policies on Windows
  
• Policy List

So I created one GPO for all users containing Company Bookmarks/Folder 1 => works.

I created another GPO for some users containing Company Bookmarks/Folder 2 only => not works. 

As I understood "ManagedBookmarks" are not merged (can you confirm ?), so I have to create one policy with Company Bookmarks/Folder 1 for all users and another policy with Company Bookmarks/Folder 1 AND Folder 2 for some users: this becomes a little bit complex to manage.

I have another way: "expanded JSON in the registry"; so I can create a GPO that add registry keys but as I can see, by using this solution, I cannot set the "toplevel_name" (can you confirm ?).

Do you have any advice on how I can reach the "Objectives" ?

Thank you very much.

Thank you,

Luca

[Julian Pastarmov]

Hello Luca,

yes policies are not merged so you will have to create folder1+folder2 for the users that need both if you put them as a single JSON string. 

For your second question I don't see a reason not to have the "toplevel_name" string value in the "ManagedBookmarks" level of the three structure.

If you want to use the ADM[X] templates provided by us you are stuck with option number one. If you decide to go with option number two you will have to create the GPO yourself or set the registry keys directly as long as you are managing AD joined machines this should work too.

Best,

Julian