How to enable chrome bookmarks bar using Intune

In this post i’ll demonstrate how to enable the chrome bookmarks bar using an Intune policy. This post will cover how to ingest the chrome bookmarks, then how to create a custom OMA-URI to enabled the bookmarks bar.

Click here to view Googles knowledgebase article for more information on how to Manage Chrome Browser with Microsoft Intune.

What is ingesting an ADMX?

Starting in Windows 10, version 1703, you can import ADMX files (also called ADMX ingestion) and set those ADMX-backed policies for Win32 and Desktop Bridge apps by using Windows 10 Mobile Device Management (MDM) on desktop SKUs. The ADMX files that define policy information can be ingested to your device by using the Policy CSP URI, ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall. The ingested ADMX file is then processed into MDM policies.

When the ADMX policies are imported, the registry keys to which each policy is written are checked so that known system registry keys, or registry keys that are used by existing inbox policies or system components, are not overwritten. This precaution helps to avoid security concerns over opening the entire registry. Currently, the ingested policies are not allowed to write to locations within the SystemSoftware\Microsoft, and Software\Policies\Microsoft keys, except for the following locations:

https://docs.microsoft.com/en-us/windows/client-management/mdm/win32-and-centennial-app-policy-configuration#a-href-idoverviewaoverview

How to ingest the Chrome ADMX file into Intune

  1. Download the Chrome ADMX templates
  2. Sign in to Azure and navigate to Intune.
  3. Navigate to Device configuration > Profiles and click on Create Profile

When creating the profile fill in the fields as per below

FieldText to Enter
Name Windows 10 – Chrome configuration (or use any descriptive name)
Description Enter a description (optional)
PlatformWindows 10 and later
Profile TypeCustom
SettingsCustom (select from drop-dow list)

When creating the profile fill in the fields with the below

    • Name: Chrome ADMX Ingestion
    • Description: Optional
    • OMA-URI:./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Chrome/Policy/ChromeAdmx
    • Data type: String
      • Once you select String, a Value text field opens below. On your computer, go to template\windows\admx\chrome.admx and copy the text from chrome.admx. In the Value field, paste the chrome.admx text.

Once complete, click ok out of the menus and save the changes to the profile that you’ve made.

Now you’re ready to create specific policies for the chrome ADMX.

How to enable chrome bookmarks Bar using Intune

In this section i will detail the steps required to enable the chrome bookmarks bar using Intune.

  1. Navigate to the custom policy where you ingested the Chrome ADMX.
  2. Click on Settings and then on Add

Now configure the new setting with the details listed below

NameChrome – BookmarkBarEnabled
DescriptionOptional
OMA-URI./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/BookmarkBarEnabled
Data typeString
Value<enabled/>

Press ok out of the menus and save the setting.

Thats all there is to it, hope this post helps!

1 Reply to “How to enable chrome bookmarks bar using Intune”

  1. Very helpful, thanks! I’ve been looking for this one. I have trouble creating my own policies based on the admx ingestion, but copying what has been listed here for examples like this are very easy.

Leave a Reply

Your email address will not be published. Required fields are marked *