Managed IT provider | San Francisco | LookingPoint

How to Enable Automatic Google Chrome Updates in Microsoft Intune

Written by William Panameno | Aug 5

Keeping Google Chrome updated helps improve security, performance, and compatibility across your organization. By importing Google's ADMX templates into Microsoft Intune, administrators can centrally manage Chrome update settings and automate browser updates. This guide explains how to import the required templates and create an Intune policy to enable automatic Google Chrome updates.

Step 1 – Create a Working Folder

    1. Open File Explorer.

    2. Create a new folder named Google Auto Updates.

    3. This folder will be used to store all downloaded and copied files throughout this guide.

 

Step 2 – Download the Google Policy Templates

    1. Go to https://chromeenterprise.google/download. Scroll to bottom of page.

    2. Download the following:
      1. Policy Templates
      2. Update Management Templates

    3. When downloading the update templates, ensure you download the Google Updater ADMX templates and not the older ADM templates.


Navigate to the Downloads folder and put those downloaded folders in your Google Auto Updates folder.

Step 3 – Copy the Windows ADMX File

      1. Open File Explorer.

      2. Navigate to:

        C:\Windows\PolicyDefinitions


      3. Locate the Windows.admx file.

      4. Copy the file into your Google Auto Updates folder.

 

 

Step 4 – Copy the Windows ADML File

  1. While still in the PolicyDefinitions folder, open the en-US folder.

  2. Locate Windows.adml.

  3. Copy this file into your Google Auto Updates folder.




Step 5 – Import the Windows ADMX Files into Intune

    1. Sign in to the Microsoft Intune Admin Center.

    2. Select Devices.

    3. Under Manage devices, select Configuration.



    4. Select the Import ADMX tab.



    5. Click Import.

    6. Browse for and upload:
          •    Windows.admx
      •    Windows.adml

    7. After both files have been imported successfully, click Next.

8. Review the changes you made and click Create. The following steps will be repeating what we just did but with the GoogleUpdate ADMX files.


 

Step 6 – Import the Google ADMX Files

    1. Return to the Chrome Enterprise downloads page if required.

    2. Open the downloaded GoogleUpdateAdmx ZIP file.

    3. Open the Google Update ADMX folder.

    4. Locate the following files:
      1.    Google.admx
      2.    GoogleUpdate.admx

    5. Copy both files into your Google Auto Updates folder.

    6. Return to the Import ADMX page in Intune.

    7. Import:
      1.    Google.admx
      2.    GoogleUpdate.admx

 

Note: If prompted, also upload the matching .adml language files from the en-US folder.

 

Step 7 – Verify the ADMX Imports

Once all imports have completed successfully, you should see four imported ADMX templates with a status of Available and a green check mark.

The imported templates should include:

    • Windows.admx
    • Google.admx
    • GoogleUpdate.admx
    • Chrome.admx (if imported)

Step 8 – Create a New Imported Administrative Template Policy

    1. Select the Policies tab.

    2. Click Create.

    3. Configure the following:
      1.    Platform: Windows 10 and later
      2.    Profile type: Templates
      3.    In search bar, search for “Imported Administrative Templates”

    4. Click Create.





Step 9 – Name the Policy

  1. Enter a meaningful policy name.

    Example:

    Google Chrome Automatic Updates
  2. Add an optional description explaining the purpose of the policy.

  3. Click Next.

 

Step 10 – Configure the Update Policy Override

 

Computer Configuration

1. Double click the Google folder.



Navigate to:

  • Google Update
  • Google Chrome
  • Applications
  • Google Chrome
  • Update Policy Override

 

2. Open Update Policy Override.

3. Set the policy to Enabled.

4. Under Policy, select:

Always allow updates

5. Click OK.


 

 

Step 11 – Configure the Default Update Policy

1. Navigate back to the Applications tab on the left hand pane.
  • On the options list to the right, scroll all the way down, click on the 3rd page and select the Update Policy Override Default setting.

 

Update Policy Default

2. Open the setting.

3. Set it to Enabled.

4. Under the available options, select:

Always Allow Updates

5. Click Next.


Step 12 – Skip Scope Tags

If your organization does not use Scope Tags, simply click Next to continue.

 

Step 13 – Assign the Policy

    1. On the Assignments page, select Add Groups.

    2. Choose the Azure AD group that should receive this policy.

    3. Click Next.

 

Step 14 – Review and Create

    1. Review the policy configuration.

    2. Confirm that all settings are correct.

    3. Click Create.

 

The policy will now be deployed to the selected devices or users based on your assignment.

Allow Intune some time to propagate the newly created policy to the selected groups.

 

Congratulations! You have successfully imported the Google Administrative Templates into Microsoft Intune and created a policy to enable automatic Chrome updates. Managing updates through Intune helps keep devices secure, up to date, and consistently managed across your organization.

As always if you have any questions on your network security and would like to schedule a free consultation with us, please reach out to us at sales@lookingpoint.com and we’ll be happy to help!

 

 
View full post