In this post i’ll demonstrate how to enable the chrome bookmarks bar using an Intune policy. This post will cover how to ingest the chrome bookmarks, then how to create a custom OMA-URI to enabled the bookmarks bar.
Click here to view Googles knowledgebase article for more information on how to Manage Chrome Browser with Microsoft Intune.
What is ingesting an ADMX?
Starting in Windows 10, version 1703, you can import ADMX files (also called ADMX ingestion) and set those ADMX-backed policies for Win32 and Desktop Bridge apps by using Windows 10 Mobile Device Management (MDM) on desktop SKUs. The ADMX files that define policy information can be ingested to your device by using the Policy CSP URI,
./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall. The ingested ADMX file is then processed into MDM policies.
When the ADMX policies are imported, the registry keys to which each policy is written are checked so that known system registry keys, or registry keys that are used by existing inbox policies or system components, are not overwritten. This precaution helps to avoid security concerns over opening the entire registry. Currently, the ingested policies are not allowed to write to locations within the System, Software\Microsoft, and Software\Policies\Microsoft keys, except for the following locations:
https://docs.microsoft.com/en-us/windows/client-management/mdm/win32-and-centennial-app-policy-configuration#a-href-idoverviewaoverview
How to ingest the Chrome ADMX file into Intune
- Download the Chrome ADMX templates
- Sign in to Azure and navigate to Intune.
- Navigate to Device configuration > Profiles and click on Create Profile
When creating the profile fill in the fields as per below
| Field | Text to Enter |
| Name | Windows 10 – Chrome configuration (or use any descriptive name) |
| Description | Enter a description (optional) |
| Platform | Windows 10 and later |
| Profile Type | Custom |
| Settings | Custom (select from drop-dow list) |
When creating the profile fill in the fields with the below
- Name: Chrome ADMX Ingestion
- Description: Optional
- OMA-URI:./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Chrome/Policy/ChromeAdmx
- Data type: String
- Once you select String, a Value text field opens below. On your computer, go to template\windows\admx\chrome.admx and copy the text from chrome.admx. In the Value field, paste the chrome.admx text.
Once complete, click ok out of the menus and save the changes to the profile that you’ve made.
Now you’re ready to create specific policies for the chrome ADMX.
How to enable chrome bookmarks Bar using Intune
In this section i will detail the steps required to enable the chrome bookmarks bar using Intune.
- Navigate to the custom policy where you ingested the Chrome ADMX.
- Click on Settings and then on Add
Now configure the new setting with the details listed below
| Name | Chrome – BookmarkBarEnabled |
| Description | Optional |
| OMA-URI | ./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/BookmarkBarEnabled |
| Data type | String |
| Value | <enabled/> |
Press ok out of the menus and save the setting.
Thats all there is to it, hope this post helps!
Very helpful, thanks! I’ve been looking for this one. I have trouble creating my own policies based on the admx ingestion, but copying what has been listed here for examples like this are very easy.
Hi.
Is it possible to create additional bookmark folders? I want to create seperate ones for different groups.
One for Accounts,
One for Production
One for Sales
I keep getting conflicts. I suspect I need to modify the Groups allowed to make use of one policy and have another policy for another group, etc.