Supported editions for this feature: Frontline Starter and Frontline Standard; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, Education Plus, and Endpoint Education Upgrade; Essentials, Enterprise Essentials, and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Free and Cloud Identity Premium. Compare your edition
With the release of Google Credential Provider for Windows (GCPW) version 87.0.4280.88, you can manage GCPW settings from the Admin console instead of editing the registry settings on each Windows device. To use this feature, the GCPW client on the device provides an organization-specific token to Google when the user first signs in. The new GCPW client available for download in the Admin Console has your organization’s token embedded in the installer.
Who's affected
If you're just getting started with GCPW, you don't need to do anything. The GCPW installation file you downloaded from the Admin console includes the token.
If you don't want to manage GCPW settings in the Admin console because you want to use registry settings, you don't need to do anything.
If you already set up GCPW before version 87.0.4280.88 on a device, the user can still sign in and the GCPW registry settings you set still apply. However, to edit permitted domains from the Admin console, you must set the token value in the registry file. You don’t have to remove the existing registry settings because the Admin console settings override them.
Set the GCPW token
Expand all | Collapse allYou can update the token on devices in the following ways. We recommend you reinstall GCPW or run the registry file to avoid potential errors in the device's registry settings.
If you haven't already, download a new GCPW installation file:
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Mobile and endpoints
-
Click Google Credential Provider for Windows (GCPW) setup
- Download the 64-bit or 32-bit GCPW installation file and distribute it to devices.
To update the token, on the device, run the installer. You can double-click the installation file or run the file from Command Prompt:
- Open the Command Prompt.
- To install the 64-bit client, run gcpwstandaloneenterprise64.exe as administrator. To install the 32-bit client, run gcpwstandaloneenterprise.exe as administrator.
You must be signed in as a super administrator for this task.
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu
- Click Google Credential Provider for Windows (GCPW) setup
- Click registry file.
- Distribute the registry file to Windows devices.
- On the Windows device, double-click the registry file to run it. The token value in the registry is updated.
- Restart the device.
You must be signed in as a super administrator for this task.
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu
- Click Google Credential Provider for Windows setup
- In the box with the token, click Copy.
- Save the token somewhere convenient that you can access from other devices.
- On the Windows device, back up the current registry key then import the new one:
- From the Windows Start menu, click Run.
- In the Run box, enter regedit.
- In Registry Editor, go to HKEY_LOCAL_MACHINE\Software\Policies.
- Right-click Policies and click New
- Name the folder Google.
- Right-click Google and click New
- Name the folder CloudManagement.
- Right-click the CloudManagement folder and click New
- For the name, enter
EnrollmentToken. - Double-click the name and, in the Value data box, paste the token.
- Click OK.
- Close Registry Editor and restart the device.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.
