4. Set policies for enrolled Chrome browsers

Applies to Chrome browsers on Windows, Mac, and Linux (managed via token enrollment).

After you enroll the Chrome browsers you want to manage, use your Admin console to customize policies.

Set policies for enrolled browsers

Policies you set here apply to all Chrome browser users, whether or not the user is signed in.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. The User & browser settings page opens by default.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserSettings.

3. (Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Click the setting you want to configure. Learn about each setting | See common policy settings

   Tip: Quickly find a setting by using the Search bar at the top.

   Settings you make for an organizational unit are inherited by browsers in child organizations, unless overridden at a lower level. The Admin console marks whether a setting is Inherited or overridden (marked Locally applied).

5. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

Settings typically take effect in minutes. But they might take up to 24 hours to apply for everyone.

Precedence of conflicting policies

If conflicting policies are set at multiple sources:

• Machine-level policies set with your on-premise platform, such as Windows Group Policy, take precedence over enrolled browser policies.
• Enrolled browser policies take precedence over policies set for user accounts. Values don't get merged if the policy is a list.
• To verify that policies are applied, on a user's computer, go to chrome://policy.

For details, see Understand Chrome policy management.

Move a browser to a different organizational unit

When you enroll Chrome browsers in your Admin console, they automatically go in the organizational unit associated with their enrollment token. To apply different settings to a set of Chrome browsers, place them in their own organizational unit. You can then apply settings to just that organizational unit.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeManaged browsers.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserManaged browsers.

3. Check the box next to the browser that you want to move.
4. At the top, click Move.
5. Choose the organizational unit that you want to move the Chrome browser to.
6. Click Move.

Next step