SOLVED

How to block incognito mode on chrome via intune

%3CLINGO-SUB%20id%3D%22lingo-sub-2597704%22%20slang%3D%22en-US%22%3EHow%20to%20block%20incognito%20mode%20on%20chrome%20via%20intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2597704%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tried%20to%20block%20chrome%20incognito%20mode%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tried%20this%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOMA-URL%3A%26nbsp%3B.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfig%2FChrome~Policy~googlechrome%2FIncognitoModeAvailability%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Evalue%3A%26nbsp%3B%3CENABLED%3E%3C%2FENABLED%3E%3CBR%20%2F%3E%3CDATA%20id%3D%22%E2%80%9DIncognitoModeAvailability%E2%80%9D%22%20value%3D%22%E2%80%9D1%E2%80%9D%22%3E%3C%2FDATA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2597704%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Friday%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGraph%20API%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESoftware%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2598126%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20block%20incognito%20mode%20on%20chrome%20via%20intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2598126%22%20slang%3D%22en-US%22%3EMaybe%20a%20stupid%20question...%20but%20did%20you%20ingest%20the%20admx%20also%20%3F%3CBR%20%2F%3EWhat%20happens%20when%20you%20target%20the%20user%20instead%20of%20device%3F%20I%20have%20seen%20in%20it%20in%20the%20past%2C%20that%20some%20times%20the%20device%20selection%20just%20won't%20work%20while%20configuring%20this%20setting.%3CBR%20%2F%3E%3CBR%20%2F%3EDid%20you%20take%20a%20look%20on%20what%20the%20deviceenterprisemgt%20eventlog%20has%20to%20say%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2603303%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20block%20incognito%20mode%20on%20chrome%20via%20intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2603303%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F620702%22%20target%3D%22_blank%22%3E%40Rudy_Ooms%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20I%20have%20added%20the%20ADMX.%20Incognito%20is%20literally%20the%20only%20one%20that%20doesn't%20seem%20to%20work.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202021-08-03%20at%209.57.15%20AM.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F300114iD244EE14EB7E2469%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Screenshot%202021-08-03%20at%209.57.15%20AM.png%22%20alt%3D%22Screenshot%202021-08-03%20at%209.57.15%20AM.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tried%20to%20target%20the%20user%20too%20but%20no%20luck!%20Is%20this%20possible%20an%20alternative%20way%20like%20using%20powershell%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20dont%20get%20where%20im%20going%20wrong%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2604715%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20block%20incognito%20mode%20on%20chrome%20via%20intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2604715%22%20slang%3D%22en-US%22%3EYou%20could%20try%20to%20add%20a%20powershell%20script%20which%20adds%20the%2032-Bit%20DWORD%20value%20IncognitoModeAvailability%3CBR%20%2F%3EHKEY_LOCAL_MACHINE%5CSOFTWARE%5CPolicies%5CGoogle%5CChrome%3C%2FLINGO-BODY%3E
Super Contributor

Hi all,

 

I have tried to block chrome incognito mode

 

I have tried this 

 

OMA-URL: ./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome/IncognitoModeAvailability

 

value: <enabled/>
<data id=”IncognitoModeAvailability” value=”1” />

 

Please help!

10 Replies
Maybe a stupid question... but did you ingest the admx also ?
What happens when you target the user instead of device? I have seen in it in the past, that some times the device selection just won't work while configuring this setting.

Did you take a look on what the deviceenterprisemgt eventlog has to say?

Hi @Rudy_Ooms 

 

Yes I have added the ADMX. Incognito is literally the only one that doesn't seem to work. 

 

Screenshot 2021-08-03 at 9.57.15 AM.png

 

I have tried to target the user too but no luck! Is this possible an alternative way like using powershell? 

 

I just dont get where im going wrong

 

 

You could try to add a powershell script which adds the 32-Bit DWORD value IncognitoModeAvailability
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
What would I actually put in the script?

Thanks for your continued support Rudy
I did try this

New-ItemProperty -Path "HKCU:\Software\Policies\Google\Chrome" -Name "IncognitoModeAvailability" -Value ”1”  -PropertyType "REG_DWORD"

But no luck
best response confirmed by AB21805 (Super Contributor)
Solution
SOmething like this: (created it on my iphone so... no guarantees :p )

$reg = Get-Itemproperty -Path "HKLM:\SOFTWARE\Policies\Google\Chrome" -Name IncognitoModeAvailability | out-null
if(-not($reg)){

New-Itemproperty -path "HKLM:\\SOFTWARE\Policies\Google\Chrome" -name "IncognitoModeAvailability" -value "2"
} else
{
Set-ItemProperty -path "HKLM:\\SOFTWARE\Policies\Google\Chrome" -name "IncognitoModeAvailability" -value "2"
}
I will try tomorrow and let you know. Thank you!
Hi Rudy,

This didnt work. I tried it manually on the device first but no luck! Any ideas?
the error I am getting is "new-itemproperty : requested registry access is not allowed"
Ignore me this worked! I had to change value to 1 to block it. Thank you so much for your help!