Category filter

Script to enroll cloud-managed Chrome browser on Windows devices

Chrome Browser Cloud Management (CBCM) offered by Google, allows administrators to manage Chrome browser installations across their organization. From the Google Admin console, admins can enforce policies and settings for users accessing Chrome on registered devices.

To enroll cloud-managed Chrome browsers on your Windows devices, you must sign up for Chrome Browser Cloud Management. After signing up, you can generate an enrollment token which can be used to enroll Chrome browsers and add them to your management console. This document includes a PowerShell script that helps you enroll cloud-managed Chrome browsers on your Windows devices using the generated enrollment token. You can deploy this script to multiple devices using the Execute Custom Script feature.

Disclaimer:

The sample scripts provided below are adapted from third-party open-source sites.

Pre-requisite:

The Windows devices must already have the Google Chrome app installed.

PowerShell script

Before pushing the script to devices, you need to replace the placeholder XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX with the generated enrollment token.

$token = "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX" 
try{
$path = 'HKLM:\SOFTWARE\Policies\Google'
if(-not (Test-Path $path))
{
$status = New-Item -Path 'HKLM:\SOFTWARE\Policies' -Name 'Google'
}
$path = 'HKLM:\SOFTWARE\Policies\Google\Chrome'
if(-not (Test-Path $path))
{
$status = New-Item -Path 'HKLM:\SOFTWARE\Policies\Google' -Name 'Chrome'
}
$status = Set-ItemProperty -Path $path -Name "CloudManagementEnrollmentToken" -Value $token
Write-Host "Execution successfully completed"
}
catch{
Write-Output $_.Exception.Message
}

$token = "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"

try{

$path = 'HKLM:\SOFTWARE\Policies\Google'

if(-not (Test-Path $path))

{

$status = New-Item -Path 'HKLM:\SOFTWARE\Policies' -Name 'Google'

}

$path = 'HKLM:\SOFTWARE\Policies\Google\Chrome'

if(-not (Test-Path $path))

{

$status = New-Item -Path 'HKLM:\SOFTWARE\Policies\Google' -Name 'Chrome'

}

$status = Set-ItemProperty -Path $path -Name "CloudManagementEnrollmentToken" -Value $token

Write-Host "Execution successfully completed"

}

catch{

Write-Output $_.Exception.Message

}

After the enrollment process is finished, the user must restart the Chrome application. You can verify the enrollment status from the Google Admin console.

Once the Chrome browsers are enrolled, you can manage them by using the available features in the Google Admin console.

Notes:

It is recommended to manually validate the script execution on a system before executing the action in bulk.
Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.

Need more help?

Raise a Ticket

Ask Community

Chat With us