Exciting things are coming - our community is moving to a new home!
Whilst we make this move, the community is now in READ-ONLY mode today and there maybe some downtime (we will try to keep this to a minimum). Learn more here.

Forum Discussion

Arone's avatar
Arone
Level 1.5: Cupcake
5 months ago

Manage Google Chrome Update With intune

 

 

 

Hello,
I’m reaching out because I’m trying to understand why my Google Chrome browsers are taking so long to update.
I have deployed the ADMX/ADML templates and configured the required policies, but despite this, the update process works poorly.

You will find attached some screenshots that may help ?

Thanks

 

 

PS : The update engine is always up to date, but the browser itself is not.

 

 

chrome enterprise core
troubleshooting

3 Replies

  • Lynda's avatar
    Lynda
    Google Community Manager
    5 months ago

    Hi Arone​ 

     

    Thank you for reaching out and providing details about the issue you're facing with Google Chrome updates. It’s great that you’ve already deployed the ADMX/ADML templates. We can provide some more context on how the update process works and offer a few recommendations that should help.

     

    Google Chrome updates are designed to be largely automatic and seamless, ensuring users always have the latest security fixes, performance improvements, and new features. Here's a breakdown of how they work:

     

    FeatureDescription
    Automatic Updates & FrequencyChrome typically updates in the background without you needing to do anything. When a new version is available, Chrome downloads it, and the update is applied the next time you close and reopen your browser. This helps maintain security by quickly patching vulnerabilities.
    Staggered Rollouts & Vulnerability PatchesFor high-severity issues, Google aims to get a fix out to the Stable channel (the version most users have) within seven days of identifying an actively exploited vulnerability. In many cases, it can be even faster.

     

    Recommended policies

     

    While the update engine is always up to date, the browser itself may not be. To ensure a more consistent update experience, we recommend you configure the following policies:

     

    PolicyLink
    RelaunchNotificationhttps://chromeenterprise.google/policies/#RelaunchNotification
    RelaunchNotificationPeriodhttps://chromeenterprise.google/policies/#RelaunchNotificationPeriod

     

    Google uses different "channels" to gradually roll out updates and test new features:

     

    ChannelCadence
    CanaryUpdated twice daily, highly unstable.
    DevUpdated once or twice weekly, showing active development, prone to bugs.
    BetaA preview of upcoming Stable features, usually 4-6 weeks in advance, more stable than Dev.
    StableThe most widely used and fully tested channel, updated every 2-3 weeks for minor releases and every 4 weeks for major releases. This is the recommended channel for most users.
    Extended StableOffers less frequent feature updates (every 8 weeks) but still receives critical security fixes, primarily for organizations preferring a slower cadence.

     

    Finally, just wanted to mention that for ease of use, we recommend using Chrome Enterprise Core (CEC) to seamlessly set policies for Chrome browser across users. Many of our customers have reported it is ultimately more user friendly that intune in that regard, especially as it relies on ADMX as you mentioned.

    Relevant videos on Chrome Enterprise Core (CEC):

     

     

    I hope this helps!

    • Arone's avatar
      Arone
      Level 1.5: Cupcake
      5 months ago

      Hello, I have already configured the following two policies: RelaunchNotification and RelaunchNotificationPeriod.
      The problem is not there, I repeat: the update engine is always up to date, but the browser itself is not.
      I deploy Google Chrome Enterprise via the MSI, which is itself deployed through Intune MDM in the SYSTEM context.
      Can you tell me why I am facing this issue?

  • nicolas's avatar
    nicolas
    Level 1.6: Donut
    4 months ago

    Hi Arone, 

     

    I understand that you GoogleUpdate seems to be working correctly but it does not update the Browser. 

     

    There are multiple reasons that can explain why the browser is not updating: 

    • Permissions issues
    • Network, proxy, and firewall issues (the URLs needed for Google Update to work have
      been blocked)
    • Disk space (there is not enough space to download the update)
    • Conflicting group policies (Google update has been disabled)
    • Corrupted Google Chrome installation (possible uninstall and then re-install with a profile
      cache clearing is needed) 

    Also, as an additional questions, what happens if the user goes into the Chrome settings>About Chrome>Check for updates? 

     

    Some useful resources that could help: 

    If we cannot find where the issue comes from, please can you raise a support case so that our dedicated team can investigate the specific instance and better advise.