Policy
Add restrictions on managed accounts
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Default behavior (Policy unset) When an account is added in the content area a small dialog may appear asking the user to create a new profile. This dialog is dismissable. ManagedAccountsSigninRestriction = 'primary_account' If a user signs into a Google service for the first time in a Google Chrome browser, a dialog will appear asking the user to create a new profile for their enterprise account. The user may click Cancel and get signed out, or Continue to create a new profile. Any existing browsing data will not be added to the new profile. The newly created profile is allowed to have secondary accounts, for example the user can sign into another account in the content area. ManagedAccountsSigninRestriction = 'primary_account_strict' This is the same behavior as 'primary_account' except the newly created profile is not allowed to have secondary accounts. ManagedAccountsSigninRestriction = 'primary_account_keep_existing_data' This is the same behavior as 'primary_account' except a checkbox will be added to the dialog to allow the user to keep local browsing data. If the user checks the box, then the existing profile data becomes associated with the Managed account. - All existing browsing data will be present in the new profile. - This data includes bookmarks, history, password, autofill data, open tabs, cookies, cache, web storage, extensions, etc. If the user does not check the box: - The old profile will continue to exist, no data will be lost. - A new profile will be created. ManagedAccountsSigninRestriction = 'primary_account_strict_keep_existing_data' This is the same behavior as 'primary_account_keep_existing_data' except the newly created profile is not allowed to have secondary accounts. Example value: primary_account
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Add restrictions on managed accounts ID ManagedAccountsSigninRestriction | enum | Path Software\Policies\Google\Chrome Value name ManagedAccountsSigninRestriction Type REG_SZ | Options: A Managed account must be a primary account and importing existing browsing data is allowed at the time of profile creation (primary_account), A Managed account must be a primary account and have no secondary accounts and importing existing browsing data is allowed at the time of profile creation (primary_account_strict), No restrictions on managed accounts (none), A Managed account must be a primary account and the user can import existing data at the time of its creation (primary_account_keep_existing_data), A Managed account must be a primary account and have no secondary accounts and the user can import existing data at the time of its creation (primary_account_strict_keep_existing_data) |