Policy
Add restrictions on managed accounts
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Default behavior (Policy unset) When an account is added in the content area a small dialog may appear asking the user to create a new profile. This dialog is dismissable. ManagedAccountsSigninRestriction = 'primary_account' If a user signs into a Google service for the first time in a Google Chrome browser, a dialog will appear asking the user to create a new profile for their enterprise account. The user may click Cancel and get signed out, or Continue to create a new profile. Any existing browsing data will not be added to the new profile. The newly created profile is allowed to have secondary accounts, for example the user can sign into another account in the content area. ManagedAccountsSigninRestriction = 'primary_account_strict' This is the same behavior as 'primary_account' except the newly created profile is not allowed to have secondary accounts. ManagedAccountsSigninRestriction = 'primary_account_keep_existing_data' This is the same behavior as 'primary_account' except a checkbox will be added to the dialog to allow the user to keep local browsing data. If the user checks the box, then the existing profile data becomes associated with the Managed account. - All existing browsing data will be present in the new profile. - This data includes bookmarks, history, password, autofill data, open tabs, cookies, cache, web storage, extensions, etc. If the user does not check the box: - The old profile will continue to exist, no data will be lost. - A new profile will be created. ManagedAccountsSigninRestriction = 'primary_account_strict_keep_existing_data' This is the same behavior as 'primary_account_keep_existing_data' except the newly created profile is not allowed to have secondary accounts. Example value: primary_account
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Add restrictions on managed accounts ID ManagedAccountsSigninRestriction | enum | HKLM\Software\Policies\Google\Chrome\ManagedAccountsSigninRestriction Type REG_SZ | Options: A Managed account must be a primary account and importing existing browsing data is allowed at the time of profile creation (primary_account), A Managed account must be a primary account and have no secondary accounts and importing existing browsing data is allowed at the time of profile creation (primary_account_strict), No restrictions on managed accounts (none), A Managed account must be a primary account and the user can import existing data at the time of its creation (primary_account_keep_existing_data), A Managed account must be a primary account and have no secondary accounts and the user can import existing data at the time of its creation (primary_account_strict_keep_existing_data) |
Other policies in this category
Explore related policies at the same level.
- UserAbusive Experience Intervention EnforceMicrosoft Windows 7 or later
- ComputerAbusive Experience Intervention EnforceMicrosoft Windows 7 or later
- UserAdd restrictions on managed accountsMicrosoft Windows 7 or later
- ComputerAds setting for sites with intrusive adsMicrosoft Windows 7 or later
- UserAds setting for sites with intrusive adsMicrosoft Windows 7 or later
- ComputerAllow access to a list of URLsMicrosoft Windows 7 or later
- UserAllow access to a list of URLsMicrosoft Windows 7 or later
- UserAllow Chrome for TestingMicrosoft Windows 7 or later
- ComputerAllow Chrome for TestingMicrosoft Windows 7 or later
- ComputerAllow Chrome to block navigations toward external protocols in sandboxed iframesMicrosoft Windows 7 or later
- UserAllow Chrome to block navigations toward external protocols in sandboxed iframesMicrosoft Windows 7 or later
- ComputerAllow collection of WebRTC event logs from Google servicesMicrosoft Windows 7 or later