Kaspersky Secure Mobility Management

The help for this version of the solution is no longer updated, so it may contain outdated information. For up-to-date information about the solution refer to the Kaspersky Secure Mobility Management 4.1 Help.

Managing Google Chrome settings

You can manage Google Chrome settings in the Google Chrome settings section in device owner mode.

To open the Google Chrome settings section:

1. In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
2. In the workspace of the group, select the Policies tab.
3. Open the policy properties window by double-clicking any column.
4. In the policy Properties window, select the Device owner mode > Google Chrome settings section.

Manage content settings

On the Content tab of the Google Chrome settings section, you can specify the following content settings:

• Set default cookie settings

  Default cookie settings.

  If the check box is selected, one of the following options will be applied to all sites by default:

  • Allow all sites to set local data (default)
  • Do not allow any site to set local data
  • Keep cookies for duration of session

    If the check box is cleared, the user's personal settings will be applied.

    The setting is supported in Google Chrome version 30 or later.

    This check box is selected by default.

    There must be no conflicting URL patterns that you specify in the Allow cookies on these sites, Block cookies on these sites, and Allow cookies on these sites for one session only fields. If no URL is specified and the Set default cookies settings check box is selected, the option selected in the drop-down list will be applied to all sites.

• Allow cookies on these sites

  A list of sites that are allowed to set cookies. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 30 or later.

• Block cookies on these sites

  A list of sites that are prohibited to set cookies. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 30 or later.

• Allow cookies on these sites for one session only

  A list of sites that are allowed to set cookies only for one session. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 30 or later.

• Set default JavaScript settings

  Default JavaScript settings.

  If the check box is selected, one of the following options will be applied and the device user will not be able to change it:

  • Allow all sites to run JavaScript (default)
  • Do not allow any site to run JavaScript

    If the check box is cleared, user personal settings will be applied.

    The setting is supported in Google Chrome version 30 or later.

    This check box is cleared by default.

    If the Allow JavaScript on these sites and Block JavaScript on these sites settings are not specified and the Set default JavaScript settings check box is selected, the selected option will be applied to all sites.

• Allow JavaScript on these sites

  A list of sites that are allowed to run JavaScript. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 30 or later.

  If the Allow JavaScript on these sites and Block JavaScript on these sites settings are not specified and the Set default JavaScript settings check box is selected, the selected option will be applied to all sites.

• Block JavaScript on these sites

  A list of sites that are prohibited to run JavaScript. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 30 or later.

  If the Allow JavaScript on these sites and Block JavaScript on these sites settings are not specified and the Set default JavaScript settings check box is selected, the selected option will be applied to all sites.

• Set default pop-up settings

  Default pop-up setting.

  If the check box is selected, one of the following options applies to pop-ups:

  • Allow all sites to show pop-ups. Lets all sites open pop-up windows. This value is selected by default.
  • Do not allow any site to show pop-ups. Prohibits all sites to open pop-up windows.

    If the check box is cleared, pop-ups are blocked, but a device user can change this behavior in Settings.

    The setting is supported in Google Chrome version 33 or later.

    The check box is cleared by default.

    If the Allow pop-ups on these sites and Block pop-ups on these sites settings are not specified and the Set default pop-up settings check box is selected, the selected option will be applied to all sites.

• Allow pop-ups on these sites

  A list of sites that are allowed to show pop-ups. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 34 or later.

  If the Allow pop-ups on these sites and Block pop-ups on these sites settings are not specified and the Set default pop-up settings check box is selected, the selected option will be applied to all sites.

• Block pop-ups on these sites

  A list of sites that are prohibited to show pop-ups. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 34 or later.

  If the Allow pop-ups on these sites and Block pop-ups on these sites settings are not specified and the Set default pop-up settings check box is selected, the selected option will be applied to all sites.

• Set user location tracking settings

  The default geographic location settings.

  If the check box is selected, one of the following options will be applied to all sites by default:

  • Allow all sites to track location
  • Do not allow any site to track location
  • Ask whenever site wants to track location (default)

    If the check box is cleared, user personal settings will be applied.

    The setting is supported in Google Chrome version 30 or later.

    This check box is cleared by default.

Manage proxy settings

On the Proxy tab of the Google Chrome settings section, you can specify the following proxy settings:

• Set proxy mode

  Proxy settings for Google Chrome and ARC-apps.

  If the check box is selected, one of the following options will be applied and the device user is prevented from changing proxy settings:

  • Never use proxy. Prohibits use of proxies and all other proxy settings are ignored. This option is selected by default.
  • Detect proxy settings automatically. Detects proxy settings automatically and all other options are ignored.
  • Use PAC file. Uses the proxy PAC file specified in the PAC file URL field.
  • Use fixed proxy servers. Uses the data specified in the Proxy server URL and Bypass list fields.
  • Use system proxy settings. Uses the system proxy settings.

    If the check box is cleared, user personal settings will be applied.

    The setting is supported in Google Chrome version 30 or later.

    This check box is selected by default.

• Proxy server URL

  A URL of the proxy server.

  The setting is supported in Google Chrome version 30 or later.

• PAC file URL

  A URL to a proxy .PAC file.

  The setting is supported in Google Chrome version 30 or later.

• Bypass list

  A list of hosts for which the proxy will be bypassed.

  The setting is supported in Google Chrome version 30 or later.

Manage search settings

On the Search tab of the Google Chrome settings section, you can specify the following search settings:

• Enable Touch to Search

  Selecting or clearing this check box specifies whether the device user is allowed to use Touch to Search and turn the feature on or off.

  The setting is supported in Google Chrome version 40 or later.

  This check box is selected by default.

• Enable default search provider

  Default search provider settings.

  If the check box is selected, a default search provider is used when a user enters non-URL text in the address bar. The default search provider depends on search provider settings below this check box:

  • If you leave search provider settings empty, the device user can choose the search provider in the browser settings.
  • If you configure settings of the default search provider, this search provider is always used, and the device user can't choose the search provider in the browser.

  This check box is selected by default, but the default search provider settings are not configured.

  If you want to disable search in Google Chrome, we recommend that you leave the Enable default search provider check box selected and set the Search provider name parameter to the site of a non-search system. On some Google Chrome versions, there can be problems in Google Chrome operation if the check box is cleared.

  The setting is supported in Google Chrome version 30 or later.

  The default search provider parameters are:

  • Search provider name
  • Keyword
  • Search URL
  • Suggest URL
  • Icon URL
  • Encodings
  • Alternate URLs
  • Image URL
  • New tab URL
  • Parameters for search URL that uses POST
  • Parameters for suggest URL that uses POST
  • Parameters for image URL that uses POST
• Search provider name

  The default search provider name.

  The setting is supported in Google Chrome version 30 or later.

• Keyword

  A keyword or shortcut used in the address bar to trigger the search for the search provider.

  The setting is supported in Google Chrome version 30 or later.

• Search URL

  The URL of the search engine used during default searches.

  The setting is supported in Google Chrome version 30 or later.

• Suggest URL

  The URL of the search engine to provide search suggestions.

  The setting is supported in Google Chrome version 30 or later.

• Icon URL

  The URL of the default search provider's favicon.

  The setting is supported in Google Chrome version 30 or later.

• Encodings

  Character encodings supported by the search provider. The supported encodings are:

  • UTF-8
  • UTF-16
  • GB2312
  • ISO-8859-1

    The setting is supported in Google Chrome version 30 or later.

• Alternate URLs

  A list of alternate URLs to retrieve search terms from the search engine.

  The setting is supported in Google Chrome version 30 or later.

• Image URL

  The URL of the search engine used for image search.

  The setting is supported in Google Chrome version 30 or later.

• New tab URL

  The URL of the search engine used to provide a New Tab page.

  The setting is supported in Google Chrome version 30 or later.

• Parameters for search URL that uses POST

  URL parameters when searching a URL with the POST method. The parameters are comma-separated key-value pairs. If a value is a template parameter, for example, '{searchTerms}', it is replaced with real search terms. For example:

  q={searchTerms},ie=utf-8,oe=utf-8

  The setting is supported in Google Chrome version 30 or later.

• Parameters for suggest URL that uses POST

  URL parameters for search suggestions using the POST method. The parameters are comma-separated key-value pairs. If a value is a template parameter, for example, '{searchTerms}', it is replaced with real search terms. For example:

  q={searchTerms},ie=utf-8,oe=utf-8

  The setting is supported in Google Chrome version 30 or later.

• Parameters for image URL that uses POST

  URL parameters for image search using the POST method. The parameters are comma-separated key-value pairs. If a value is a template parameter, for example, '{imageThumbnail}', it is replaced with the real image thumbnail. For example:

  content={imageThumbnail},url={imageURL},sbisrc={SearchSource}

  The setting is supported in Google Chrome version 30 or later.

Manage password settings

On the Passwords tab of the Google Chrome settings section, you can specify the following password settings:

• Enable saving passwords

  Selecting or clearing the check box specifies whether Google Chrome will remember the passwords the device user enters and also offer them the next time the device user signs in.

  The setting is supported in Google Chrome version 30 or later.

  This check box is selected by default.

Manage page settings

On the Pages tab of the Google Chrome settings section, you can specify the following page settings:

• Enable alternate error pages

  Selecting the check box specifies whether Google Chrome is allowed to use built-in error pages, such as "Page not found".

  The setting is supported in Google Chrome version 30 or later.

  This check box is selected by default.

• Enable AutoFill for addresses

  Autofill settings for addresses.

  If the check box is selected, the device user is allowed to manage AutoFill for addresses in the user interface.

  If the check box is cleared, AutoFill never suggests or fills in address information, nor does it save additional address information that the device user submits while browsing the web.

  The setting is supported in Google Chrome version 69 or later.

  This check box is selected by default.

• Enable AutoFill for credit cards

  Autofill settings for credit cards.

  If the check box is selected, the device user is allowed to manage AutoFill suggestions for credit cards in the user interface.

  If the check box is cleared, AutoFill never suggests or fills in credit card information, nor does it save additional credit card information that the device user might submit while browsing the web.

  The setting is supported in Google Chrome version 63 or later.

  This check box is selected by default.

Manage other settings

On the Other tab of the Google Chrome settings section, you can specify the following settings:

• Enable printing

  Selecting or clearing this check box specifies whether the device user is allowed to print in Google Chrome.

  The setting is supported in Google Chrome version 39 or later.

  This check box is selected by default.

• Set Google Safe Browsing settings

  Google Safe Browsing protection level.

  If the check box is selected, the device user is allowed to manage the Google Safe Browsing settings in Google Chrome, as well as select the protection level. The protection levels are:

  • Google Safe Browsing is never active. Disables Google Safe Browsing completely.
  • Google Safe Browsing is active in standard mode. Makes Google Safe Browsing always enabled in standard protection mode. This option is selected by default.
  • Google Safe Browsing is active in enhanced mode. Makes Google Safe Browsing always enabled in enhanced protection mode, but device user browsing experience data will be sent to Google.

    If the check box is cleared, Google Safe Browsing will operate in standard protection mode and the device user is allowed to change Google Safe Browsing settings.

    The setting is supported in Google Chrome version 87 or later.

    This check box is selected by default.

• Disable saving browser history

  Selecting or clearing this check box specifies whether browsing history is saved and tab syncing is on.

  The setting is supported in Google Chrome version 30 or later.

  This check box is cleared by default.

• Disable proceeding from Google Safe Browsing warning page

  Selecting or clearing this check box specifies whether the device user is allowed to proceed to the flagged site on Google Safe Browsing warnings, such as malware and phishing. The restriction does not apply to issues related to SSL certificate, such as invalid or expired certificates.

  The setting is supported in Google Chrome version 30 or later.

  This check box is cleared by default.

• Enable network prediction

  Selecting or clearing this check box specifies whether Google Chrome will predict such network actions as DNS prefetching, TCP and SSL preconnection and prerendering of webpages.

  If the check box is cleared, network prediction is disabled, but the device user can enable it.

  The setting is supported in Google Chrome version 38 or later.

  This check box is cleared by default.

• Force Google SafeSearch

  Selecting or clearing this check box specifies whether Google Search queries will be performed via Google SafeSearch.

  The setting is supported in Google Chrome version 41 or later.

  This check box is cleared by default.

• Set Restricted Mode for YouTube

  Minimum required Restricted Mode level for YouTube.

  If the check box is selected, a minimum required Restricted Mode level for YouTube is set and the device user cannot pick a less restricted mode. Restricted mode levels are:

  • Do not enforce Restricted Mode. Specifies that Google Chrome does not force Restricted mode. However, external policies might still enforce Restricted mode. This option is selected by default.
  • Enforce at least Moderate Restricted Mode. Lets a device user enable the Moderate and Strict Restricted mode on YouTube, but prohibits turning Restricted mode off.
  • Enforce Strict Restricted Mode. Makes Strict Restricted mode on YouTube be always active.

    If the check box is cleared, Google Chrome does not require use of Restricted mode for YouTube, but Restricted mode can be enforced by external rules, such as YouTube rules.

    The setting is supported in Google Chrome version 55 or later.

    This check box is selected by default.

• Set availability of Incognito mode

  Availability of Incognito mode in Google Chrome.

  If the check box is selected, the admin can specify whether the device user is allowed to open pages in Incognito mode by selecting one of the following options:

  • Incognito mode is available (default)
  • Incognito mode is disabled

    If the check box is cleared, the device user cannot open pages in Incognito mode in Google Chrome.

    The setting is supported in Google Chrome version 30 or later.

    This check box is selected by default.

• Enable search suggestions

  Selecting or clearing this check box specifies whether search suggestions are enabled in Google Chrome's address bar.

  The setting is supported in Google Chrome version 30 or later.

  This check box is selected by default.

• Set Translate settings

  Enabling translation functionality.

  If the check box is selected, the administrator can set the following translation options:

  • Always offer translation. Shows the integrated translation toolbar and a translate option on the right-click context menu. This option is selected by default.
  • Never offer translation. Disables all built-in translation functionality.

    If the check box is cleared, the user's personal settings will be applied.

    The setting is supported in Google Chrome version 30 or later.

    This check box is cleared by default.

• Enable bookmark editing

  Selecting or clearing this check box specifies whether the device user is allowed to add, remove, or modify bookmarks.

  The setting is supported in Google Chrome version 30 or later.

  This check box is selected by default.

• Managed bookmarks

  An admin-managed list of bookmarks. The list is a dictionary where the keys are the "name" and "url". In other words, the key holds a bookmark's name and target. You can also set up a subfolder with a "children" key, which also has a list of bookmarks.

  By default, the folder name for managed bookmarks is "Managed bookmarks". You can change it by adding a new sub-dictionary. To do this, specify the "toplevel_name" key with the required folder name as its value.

  If you enter an incomplete URL as a bookmark's target, Google Chrome will substitute it with a URL as if it was submitted through the address bar. For example, "kaspersky.com" becomes "https://www.kaspersky.com".

  For example:

  "ManagedBookmarks": [{

  //Changes the default folder name

  "toplevel_name": "My managed bookmarks folder"

  },

  {

  //Adds a bookmark to the managed bookmarks folder

  "name": "Kaspersky",

  "url": "kaspersky.com"

  },

  {

  "name": "Kaspersky products",

  "children": [{

  "name": "Kaspersky Endpoint Security",

  "url": "kaspersky.com/enterprise-security/endpoint"

  },

  {

  "name": "Kaspersky Security for Mail Server",

  "url": "kaspersky.com/enterprise-security/mail-server-security"

  }

  ]

  }

  ]

  The setting is supported in Google Chrome version 37 or later.

• Block access to these URLs

  A list of forbidden URLs. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 86 or later.

• Allow access to these URLs (exceptions to blocked URLs)

  A list of URLs that are exceptions to the list specified in Block access to these URLs. You can also set URL patterns, for example: [*.]example.com.

  The setting is supported in Google Chrome version 86 or later.

• Set minimum SSL version

  Minimum allowed SSL version.

  If the check box is selected, Google Chrome will not use SSL and TLS older than the selected version. Available version are:

  • TLS 1.0 (default)
  • TLS 1.1
  • TLS 1.2

    If the check box is cleared, Google Chrome will report an error for TLS 1.0 and TLS 1.1 protocols, but the device user will be able to bypass it.

    The setting is supported in Google Chrome version 66 or later.

    This check box is cleared by default.