How to Deploy Google Chrome Enterprise Policies via the Windows Registry

Introduction

While managing Google Chrome via Google Workspace (Cloud Management) is the preferred method for modern organizations, many environments still rely on local or Active Directory-based deployment. If you need to force specific Chrome settings—such as setting a mandatory homepage, blocking incognito mode, or enforcing safe browsing—on a standalone Windows machine without using Group Policy Objects (GPOs), you can deploy Chrome Enterprise policies directly via the Windows Registry. This guide explains how to inject these policies manually or via scripts.

Prerequisites

You must have local Administrator privileges on the Windows machine. The policies will apply to Google Chrome; it does not matter if the user installed the standard consumer version or the Chrome Enterprise MSI.

Step 1: Understand the Chrome Policy Registry Path

Google Chrome reads policies from a specific location in the Windows Registry. The primary path for computer-wide (all users) mandatory policies is:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome

If you only want to apply a policy to the current logged-in user, you would use:

HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome

By default, the Google\Chrome keys do not exist in the Policies hive. You must create them.

Step 2: Create the Registry Keys

Open the Registry Editor:

1. Press Win + R, type regedit, and press Enter.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies.
3. Right-click the Policies folder, select New > Key, and name it Google.
4. Right-click the new Google key, select New > Key, and name it Chrome.

Step 3: Add a String Value Policy (e.g., HomepageLocation)

Many policies require a String (REG_SZ) value. For example, to force the homepage URL:

1. Click on the Chrome key.
2. Right-click in the empty space in the right-hand pane, select New > String Value.
3. Name the value exactly HomepageLocation.
4. Double-click HomepageLocation and set the Value data to your desired URL (e.g., https://intranet.company.com).
5. To ensure the homepage button is visible, create a new DWORD (32-bit) Value named ShowHomeButton and set its value to 1.

Step 4: Add a Boolean Value Policy (e.g., IncognitoModeAvailability)

Boolean policies use DWORDs where `0` usually means False/Disabled, and `1` means True/Enabled. Some policies use specific integers. To disable Incognito mode:

1. In the Chrome key, right-click and select New > DWORD (32-bit) Value.
2. Name it IncognitoModeAvailability.
3. Double-click it and set the value to 1. (According to Google’s documentation, 0 = Available, 1 = Disabled, 2 = Forced).

Step 5: Verify the Policies in Chrome

You do not need to restart the computer. Simply open Google Chrome (or restart it if it is already running). Type the following into the address bar and press Enter:

chrome://policy

You should see HomepageLocation, ShowHomeButton, and IncognitoModeAvailability listed under Chrome Policies, indicating they were successfully read from the Registry. The status will show “Applies to: Machine” and “Level: Mandatory.” If a user tries to change the homepage in the Chrome settings, the option will be greyed out and marked with a building icon, stating “Managed by your organization.”