Enroll browsers with Microsoft Intune (Android)

Applies to Android users who use managed Chrome browser.

As a Chrome Enterprise administrator, you can use Microsoft Intune to deploy a Chrome Enterprise Core enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Android device.

Before you begin

• Make sure you connect your Intune account to your Managed Google Play Account. For details, see the Microsoft documentation.  

Enroll browsers

Step 1: Generate the enrollment token

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Generate an enrollment token. See Generate enrollment token.

3. Copy the token to use in step 3.

Step 2: Add the Google Chrome app

1. Sign into the Microsoft Endpoint Manager admin center.

2. Click AppsAll AppsAdd.

3. Click Add.

4. For App type, select the Managed Google Play app and then click Select.

5. Search for and select the Google Chrome app.

6. At the bottom, click Select.

7. Click Approve to add the app to the list.

8. In the box that opens, click Approve.

9. (Optional) If prompted for permission handling, select the policy that applies for your enterprise.
   We recommend you select Keep approved.

10. Click Sync to sync the Google Play Store and then click Refresh.

11. Click Google Chrome.

12. Click Properties.

13. Next to the Assignments title, click Edit.

14. For Assignment type, select Required and add one of the following:

    • a group of users or devices

    • all users

    • all devices

15. Click Review + save.

Step 3: Assign the enrollment token to Chrome browser 

1. Still in the Microsoft Endpoint Manager admin center, select AppsApp configuration policiesAdd.

2. Select Managed devices or Managed apps based on the device management status.
   Below shows the configuration for managed devices.

3. Enter a configuration name, for example Chrome Browser Management.

4. For platform, select Android Enterprise and then choose a profile type that matches your use case.

5. For Targeted app, click Select app, select Chrome, and click Ok.

6. Click Next.

7. For Configuration format, select Use configuration designer.

8. Click +Add.

9. In the search bar on the left, search for Enrollment token.

10. Check the box next to Enrollment token and click Ok. 

11. In the Configuration value box, paste the enrollment token you generated in Step 1.

12. Click Next.

13. Select the Connected apps policy that matches your enterprise policy and click Next.

14. Select any applicable Included groups and Excluded groups.

15. Click NextCreate.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.