SOLVED

Google Chrome ADMX template for YouTube Restricted

Copper Contributor

Has anyone tried setting YouTubeRestricted mode in Intune? I have ingested the Google Chrome admx template and I am successfully setting safe search and extension whitelist and blacklists but I cannot figure out the correct syntax for forcing YouTubeRestricted mode, has anyone attempted this? 

19 Replies

Can you post your OMA-URIs so we can verify?

So I will post a OMA-URL that i know is working, because its in my policy now. 

 

./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/ForceGoogleSafeSearch

 

<enabled/>

 

 

I have tried. 

./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/YouTubeRestricted

<enabled/>

and that broke the policy

and then I tried. 

 

./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/YouTubeRestricted

<enabled/> <data id="YouTubeRestricted_Strict" value="2&#xF000;"/>

 

But that broke as well, so I am not sure I have the syntax anywhere close. Google does have a sheet with known OMA-URI's for managing chrome, but youtube restricted mode is not one of them. We are a K12 school district so its pretty important for us to be able to set that.

 

 

 

best response confirmed by adamedtech (Copper Contributor)
Solution

Hi adamedtech,

 

I've implemented the setting in my lab, here is how it works:

 

OMA-URI: ./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/ForceYouTubeRestrict

Type: String

Value: <enabled/><data id="ForceYouTubeRestrict" value="2"/>

 

SNAG-0055.png

 

SNAG-0056.png

 

SNAG-0057.png

 

best,

Oliver

Thanks Oliver, 

I have implemented this setting and I will see if it works.

 

 

Oliver's suggestion is correct. I was able to successfully deploy this OMA-URI

 

Thanks!

@Oliver Kieselbach How do you figure out the settings?  Are you going to the registry and mapping what they should be or something else?  I'm trying to allow popups for a particular site in Chrome using ADMX but seems like I just need to trial and error until it succeeds.

 

Tried these so far and none work: 

 

2019-08-14_7-53-31.png

 

 

 

Hey @illnasty,

 

this is how it works in my tenant:

 

OMA-URI:

./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~ContentSettings/PopupsAllowedForUrls

 

Value:

SNAG-0017.png

 

URL Delimiter URL

so the URL to whitelist added twice and then the next URL.

 

I use this guide to construct the value and oma-uri: https://docs.microsoft.com/en-us/windows/client-management/mdm/understanding-admx-backed-policies

 

best,

Oliver

@Oliver Kieselbach of course your suggestion worked.  2019-08-14_7-53-31.png

 

May have spoke to soon.  Policy is being pushed down successfully which is good but the Value in Chrome is blank.

2019-08-14_7-53-31.png

 

@illnasty  @Oliver Kieselbach Got it.  Needed to be delimiterURL.  Thanks Oliver!

2019-08-14_7-53-31.png

@illnasty correct, I tried to explain this fact by writing the sentence below (not that obvious I know :-)):

 

[...]

URL Delimiter URL

so the URL to whitelist added twice and then the next URL

[...]

 

I'm glad that it works for you! :thumbs_up:

@adamedtech 

For the general public; here is a working OMA-URI to allow popups from just one site:

 

./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~ContentSettings/PopupsAllowedForUrls

<enabled/><data id="PopupsAllowedForUrlsDesc" value="1&#xF000;http://example.com"/>

 

what if i wanted to add multiple sites. i haven't been able to find anything really concrete when it comes to adding multi. i tried this, but i wasn't getting any data listed in the policies.

./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~ContentSettings/PopupsAllowedForUrls

<enabled/><data id="PopupsAllowedForUrlsDesc" value="1&#xF000[*.]google.com&#xF000;2&#xF000[*.]yahoo.com&#xF000;3&#xF000[*.]facebook.com"/>

 

As mentioned above, I think you have to add the url twice for one entry and then the next entry twice.
Url1-delimiter-Url1-delimiter-Url2-delimiter-Url2

[...]
URL Delimiter URL
so the URL to whitelist added twice and then the next URL
[...]

@Oliver Kieselbach so, like this? 

 

./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~ContentSettings/PopupsAllowedForUrls

<enabled/><data id="PopupsAllowedForUrlsDesc" value="
[*.]google.com&#xF000;[*.]google.com&#xF000;
[*.]yahoo.com&#xF000;[*.]yahoo.com&#xF000;
[*.]facebook.com&#xF000;[*.]facebook.com
"/>
Yes correct, I think that was the way I implemented it. Did it work out for you as well?

@Oliver Kieselbach if it is working, nothing is showing up in the values section. 

@Oliver Kieselbach, i finally got it to work. Here is what i did to get it to work for me. 

 

<enabled/><data id="PopupsAllowedForUrlsDesc" value="1&#xF000;[*.]google.com&#xF000;2&#xF000;[*.]yahoo.com"/>

 

perfect :thumbs_up:
I checked my policy, and yes for me it is working as well.
Tip: chrome://policy
1 best response

Accepted Solutions
best response confirmed by adamedtech (Copper Contributor)
Solution

Hi adamedtech,

 

I've implemented the setting in my lab, here is how it works:

 

OMA-URI: ./Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/ForceYouTubeRestrict

Type: String

Value: <enabled/><data id="ForceYouTubeRestrict" value="2"/>

 

SNAG-0055.png

 

SNAG-0056.png

 

SNAG-0057.png

 

best,

Oliver

View solution in original post