Uninstall Google Chrome for a Specific User and Block Future Installation

After reviewing my typical Monday morning report of server activity, I noticed a handful of users installed Google Chrome.

I can’t uninstall this globally as an Administrator so I had to run the following from the command-line as their user.  Start -> Run -> “cmd” right-click and “Run As Different User…” and enter the user’s credentials.

C:UsersdoejohnAppDataLocalGoogleChromeApplication21.0.1180.60Installersetup.exe –uninstall –force-uninstall

The Application folder still exists, so the following removes it

rd /S /Q “c:usersdoejohnAppDataLocalGoogleChrome”

Further, I decided to remove the entire “Google” folder

rd /S /Q “c:usersdoejohnAppDataLocalGoogle”

After that, I decided it was time to enforce not allowing Google Chrome to be installed on this terminal server.  Sorry Google.  =)

  1. Open the Group Policy Management Console (GPMC).
  2. Right-click your domain and choose the Create a GPO in this domain, and link it here option.
  3. Name the Group Policy Object (GPO) Block Google Chrome and click OK.
  4. Right-click the policy you just created and click Edit.
  5. Navigate to the User ConfigurationPoliciesWindows SettingsSecurity SettingsSoftware Restriction Policies folder.
  6. Right-click Software Restriction Policies and select New Software Restriction Policies.
  7. Right click Additional Rules and choose New Path Rule.
  8. In the Path field, type chromesetup.exe.
  9. In the Security level drop-down box, choose Disallowed and click OK.
  10. Repeat steps 7 through 9 for the chrome.exe and gears-chrome-opt.msi files.
  11. Repeat steps 7 through 9 for the path C:Users%username%AppDataLocalGoogleChromeApplicationchrome.exe for Vista machines or C:Documents and Settings%username%Local SettingsApplication DataGoogleChromeApplicationchrome.exe for XP machines. You should include this rule in case some of your users have already installed the browser. After you implement the GPO and the Group Policy settings refresh on those users’ local machines, they’ll no longer be able to successfully run Google Chrome.
  12. Open a command-prompt window and run the command
    gpupdate /force

    to apply the new rules.

  13. Run the command
    gpresult /R

    in Vista SP1 or the command


    in XP and Vista (pre-SP1) to verify that the newly created GPO has successfully been applied.

  14. As a final test, attempt to run the installer from the Google Chrome website. If the policy is successful, you should see the error that shows.


Posted by Rich Kreider

Father, geek, caffeine addict, IT guy, photographer and after-hours hacker...

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.