Google Chrome Group Policy settings
744 settings · 157.0.8103.79 · 11 Nov 2026 · 8 retiring
- Accessibility settings2
- Allow or deny screen capture5
- Certificate management settings6
- Content settings75
- Cryptography compliance policies2
- Default search provider12
- Deprecated policies39
- Extensions13
- Generative AI19
- Google Cast6
- HTTP authentication9
- Idle Browser Actions2
- Legacy Browser Support13
- Local Network Access settings9
- Microsoft® Active Directory® management settings1
- Native Messaging3
- Network settings6
- Password manager8
- Printing16
- Protected Content1
- Proxy server1
- Relaunch4
- Remote access15
- Removed policies161
- Safe Browsing settings9
- Sign-in settings2
- Startup, Home page and New Tab page7
- WebRtc settings4
- Enable deleting browser and download history
- Enable desktop sharing in the omnibox and 3-dot menu
- Enable ending processes in Task Manager
- Enable extended lifetime for SharedWorkers
- Enable Get Image Descriptions from Google.
- Enable globally scoped HTTP auth cache
- Enable Google Developer Program Profiles in Chrome DevTools
- Enable Google Search Side Panel
- Enable guest mode in browser
- Enable High Efficiency Mode
- Enable mandatory cloud management enrollment
- Enable Media Recommendations
- Enable network prediction
- Enable online OCSP/CRL checks
- Enable opaque origins for data URLs in Web Workers
- Enable or disable bookmark editing
- Enable or disable spell checking web service
- Enable PDF Annotations
- Enable Process Isolation
- Enable QR Code Generator
- Enable Renderer App Container
- Enable reporting of usage and crash-related data
- Enable Safe Browsing for trusted sources
- Enable scrolling to text specified in URL fragments
- Enable search suggestions
- Enable security warnings for command-line flags
- Enable showing promotional content
- Enable Signed HTTP Exchange (SXG) support
- Enable signin interception
- Enable Silent Printing
- Enable Site Isolation for specified origins
- Enable spellcheck
- Enable Standardized Browser Zoom Behavior
- Enable strict MIME type checking for worker scripts
- Enable the network service sandbox
- Enable TLS 1.3 Early Data
- Enable TLS Encrypted ClientHello
- Enable Translate
- Enable URL-keyed anonymized data collection
- Enable User Web App Install From Browser
- Enable Window Occlusion
- Enable WPAD optimization
- Enables experimental policies
- Enables managed extensions to use the Enterprise Hardware Platform API
- Enables merging of user cloud policies into machine-level policies
- Enables the concept of policy atomic groups
- Enforce browser guest mode
- Enterprise Logo URL for a managed browser
- Enterprise Logo URL for a managed profile
- Enterprise search aggregator settings
- Ephemeral profile
- Explicitly allowed network ports
- Fetch keepalive duration on Shutdown
- Force disable spellcheck languages
- Force enable spellcheck languages
- Force foreground priority for all tabs
- Force foreground priority for specific URLs
- Force Google SafeSearch
- Force minimum YouTube Restricted Mode
- Force Windows executable Native Messaging hosts to launch directly
- Google Chrome cloud policy overrides Platform policy.
- Hide the web store from the New Tab Page and app launcher
- HTTP Allowlist
- Import autofill form data from default browser on first run
- Import bookmarks from default browser on first run
- Import browsing history from default browser on first run
- Import of homepage from default browser on first run
- Import saved passwords from default browser on first run
- Import search engines from default browser on first run
- Incognito mode availability
- Intranet Redirection Behavior
- Keep browsing data when creating enterprise profile by default
- Limits the number of user data snapshots retained for use in case of emergency rollback.
- List of file types that should be automatically opened on download
- List of names that will bypass the HSTS policy check
- List of types that should be excluded from synchronization
- List of URL patterns for which Chrome DevTools are allowed to be opened
- List of URL patterns for which Chrome DevTools are blocked
- Make SharedWorker blob URL behavior aligned with the specification
- Managed Bookmarks
- Maximal number of concurrent connections per proxy server for non-WebSocket requests
- Maximal number of concurrent connections per proxy server for WebSocket requests
- Maximum fetch delay after a policy invalidation
- Origins or hostname patterns for which restrictions on insecure origins should not apply
- Override for the CPU performance tier
- Profile picker availability on startup
- Prompt users to re-authenticate to the profile
- Prompt when multiple certificates match
- Proxy settings
- Refresh rate for user policy
- Require online OCSP/CRL checks for local trust anchors
- Require Site Isolation for every site
- Restrict Background Fetch API when called from a Service Worker
- Restrict CPU core sharing for renderer process
- Restrict eligible Google accounts for saving PDF files to Google Drive from the Google Chrome PDF Viewer
- Restrict the range of local UDP ports used by WebRTC
- Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome
- Set a custom enterprise label for a managed browser
- Set a custom enterprise label for a managed profile
- Set disk cache directory
Google Chrome · template release
157.0.8103.79
Published 11 Nov 2026 · 744 settings · 6 releases kept
Wording and support text only since 157.0.8103.51
Open a folder on the left and pick a setting to see what it does, what it writes, output for your own values, and every release that changed it.