Disable PDF viewer plugin with AD policy - not working

[asbole]

I need to disable the internal PDF viewer plugin with a GPO/AD policy,
Chrome should support this (see http://www.chromium.org/administrators/policy-templates).

I configured the "Specify a list of plugins that are disabled" policy
with "Chrome PDF Viewer" but it's not working (plugin not disabled),
even after GPUPDATE /FORCE and reboots (Windows XP PRO SP3, Chrome
8.0.552.224)

Other Chrome policies are applied successfully to my PC, and rsop.msc
reports that the "Specify plugins.." policy is activated.

Any idea? Maybe I should use a different name for the PDF viewer
plugin in the policy configuration?

[asbole]

update: I can't disable any plugin with that policy..

[PhistucK]

Did you follow these instructions?

http://www.chromium.org/administrators/policy-list-3#DisabledPlugins

☆PhistucK

--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
   http://groups.google.com/a/chromium.org/group/chromium-discuss

[asbole]

On 15 Dic, 11:46, PhistucK <phist...@gmail.com> wrote:
> Did you follow these instructions?http://www.chromium.org/administrators/policy-list-3#DisabledPlugins
>
> ☆*PhistucK*

Yep, it looks like that the group policy is applied correctly to my
PC, in fact in the windows registry I have the following keys:

HKLM\Software\Policies\Google\Chrome\DisabledPlugins=1
HKLM\Software\Policies\Google\Chrome\DisabledPluginsList=Chrome PDF
Viewer

but Chrome just ignores it (I also tried with other plugin names).

(other policies, like Homepage, HomepageIsNewTabPage,HomepageLocation
are recognized correctly by Chrome).

[PhistucK]

Mmm... the keys you stated below do not look like the ones on the referenced page.

Can you export the "HKLM\Software\Policies\Google\Chrome\" key to a .reg file and post the contents of the .reg files here (as text)?

☆PhistucK

--

[asbole]

On 15 Dic, 12:09, PhistucK <phist...@gmail.com> wrote:
> Mmm... the keys you stated below do not look like the ones on the referenced
> page.
>
> Can you export the "HKLM\Software\Policies\Google\Chrome\" key to a .reg
> file and post the contents of the .reg files here (as text)?
>

> ☆*PhistucK*

Here it is (Italian locale, but it should be clear enough):

Nome chiave: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google
\Chrome
Nome classe: <NESSUNA CLASSE>
Ora ultima scrittura: 15/12/2010 - 10.02
Valore 0
Nome RestoreOnStartup
Tipo REG_DWORD
Dati 0x0

Valore 1
Nome Homepage
Tipo REG_DWORD
Dati 0x1

Valore 2
Nome HomepageIsNewTabPage
Tipo REG_DWORD
Dati 0x0

Valore 3
Nome HomepageLocation
Tipo REG_SZ
Dati http://intra....it

Valore 4
Nome DisabledPlugins
Tipo REG_DWORD
Dati 0x1

Valore 5
Nome DisabledPluginsList
Tipo REG_SZ
Dati Chrome PDF Viewer

[PhistucK]

You did not export the keys the right way.

Select the Chrome key, right click on it and select "Export", save the file, right click on the saved file and select "Edit". Copy the text and paste it into the message.

It will look like this structure -

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"NoAutoUpdate"=dword:00000000

"AUOptions"=dword:00000004

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:0000000d

"NoAutoRebootWithLoggedOnUsers"=dword:00000001

"RebootRelaunchTimeoutEnabled"=dword:00000001

"RebootRelaunchTimeout"=dword:0000001e

"UseWUServer"=dword:00000001

"NoAUShutdownOption"=dword:00000000

"DetectionFrequencyEnabled"=dword:00000001

"DetectionFrequency"=dword:00000003

☆PhistucK

On Wed, Dec 15, 2010 at 13:17, asbole <asb...@gmail.com> wrote:

On 15 Dic, 12:09, PhistucK <phist...@gmail.com> wrote:

> Mmm... the keys you stated below do not look like the ones on the referenced
> page.
>
> Can you export the "HKLM\Software\Policies\Google\Chrome\" key to a .reg
> file and post the contents of the .reg files here (as text)?

Here it is (Italian locale, but it should be clear enough):

Nome chiave:          HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google
\Chrome
Nome classe:        <NESSUNA CLASSE>
Ora ultima scrittura:   15/12/2010 - 10.02
Valore 0
 Nome            RestoreOnStartup
 Tipo            REG_DWORD
 Dati            0x0

Valore 1
 Nome            Homepage
 Tipo            REG_DWORD
 Dati            0x1

Valore 2
 Nome            HomepageIsNewTabPage
 Tipo            REG_DWORD
 Dati            0x0

Valore 3
 Nome            HomepageLocation
 Tipo            REG_SZ

 Dati            http://intra.sichenia.it

Valore 4
 Nome            DisabledPlugins
 Tipo            REG_DWORD
 Dati            0x1

Valore 5
 Nome            DisabledPluginsList
 Tipo            REG_SZ
 Dati            Chrome PDF Viewer

--

[asbole]

On 15 Dic, 12:25, PhistucK <phist...@gmail.com> wrote:
> You did not export the keys the right way.

ok, sorry..:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"RestoreOnStartup"=dword:00000000
"Homepage"=dword:00000001
"HomepageIsNewTabPage"=dword:00000000
"HomepageLocation"="http://intra.......it"
"DisabledPlugins"=dword:00000001
"DisabledPluginsList"="Chrome PDF Viewer"

[PhistucK]

But why did you use "DisabledPluginsList"? there is nothing that documents this name anywhere.

I think it should look like this -

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"RestoreOnStartup"=dword:00000000
"Homepage"=dword:00000001
"HomepageIsNewTabPage"=dword:00000000
"HomepageLocation"="http://intra.......it"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\DisabledPlugins]

"1"="Chrome PDF Viewer"

☆PhistucK

[asbole]

On 15 Dic, 12:33, PhistucK <phist...@gmail.com> wrote:
> But why did you use "DisabledPluginsList"? there is nothing that documents
> this name anywhere.
>
> I think it should look like this -
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
> "RestoreOnStartup"=dword:00000000
> "Homepage"=dword:00000001
> "HomepageIsNewTabPage"=dword:00000000
> "HomepageLocation"="http://intra.......it"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\DisabledPlugins]
> "1"="Chrome PDF Viewer"

I don't know, this is a screenshot of my GPO editor snap-in: http://goo.gl/eI2FJ

and this is the relevant part of my chrome.adm template:

POLICY !!DisabledPlugins
#if version >= 4
SUPPORTED !!SUPPORTED_WINXPSP2
#endif
EXPLAIN !!DisabledPlugins_Explain
VALUENAME "DisabledPlugins"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0

PART !!DisabledPluginsList EDITTEXT
VALUENAME "DisabledPluginsList"
END PART
END POLICY

[PhistucK]

Got it.

Seems like something is either wrong with the documentation, with the group policy templates, or with both of them.

Can you try to import the following into the registry and see whether it is working for you?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\DisabledPlugins]
"1"="Chrome PDF Viewer"

(Copy these lines and paste them in a text file, save it as something.reg and double click on the saved file)

☆PhistucK

--

[PhistucK]

I think the implementation of the enterprise feature is not complete yet, so that is probably the reason for not advertising it yet. But it seems like they are getting there.

The list of enterprise related bugs\features can be found here.

☆PhistucK

On Wed, Dec 15, 2010 at 16:38, Argia Sbolenfi <asb...@gmail.com> wrote:

2010/12/15 PhistucK <phis...@gmail.com>:

> Got it.
> Seems like something is either wrong with the documentation, with the group
> policy templates, or with both of them.

OK, I found the solution.
I was using an early .adm template file, dated Oct, 22 2010. I
replaced it with the current version and everything works fine. There
may have been a period of time when the template wasn't aligned with
the documentation..

By the way, GPO support is a great feature of Chrome but maybe not
very well known. I think it should be advertised in a better way (for
example, with a post in the various Chrome / Google blogs); if you
google for "chrome administrative template" or similar, and read the
wrong results, you could think that this feature doesn't exist yet..

thanks for your help..

[asbole]

On 15 Dic, 16:19, PhistucK <phist...@gmail.com> wrote:
> I think the implementation of the enterprise feature is not complete yet, so
> that is probably the reason for not advertising it yet. But it seems like
> they are getting there.

Well, it has just happened!!
http://googleenterprise.blogspot.com/2010/12/chrome-is-ready-for-business.html

coincidence?? :)