Enable option to disable manual updates allow only scheduled about omaha HOT 15 CLOSED

We'd like to improve the Chrome self-update experience soon -- in the meantime, 
you can prevent Google Chrome from installing self-updates entirely, via group 
policies for Google Update.

http://www.google.com/support/installer/bin/answer.py?answer=146164 has a 
description of our GPOs, and an ADM template for download.  You can mark Chrome 
as not being allowed to update, and that should prevent the UAC prompt from 
ever appearing.

Let us know if this doesn't solve your issue :)

Actually, I want to understand this a bit better.  The Google Update GPOs 
currently provide three options for allowing a process to update:

* Allow both scheduled task automated self-update and on-demand updates
* Only allow manually-requested on-demand updates
* Don't allow any updates

From the sound of the above report, you're looking for a fourth option, "Only 
do scheduled-task automatic updates, no on-demand."  Is that correct?

The need for a fourth option is correct. During lab testing over the last 3 
weeks in our environment, we found that all available options to disable the 
manual on-demand update via browser, also disable the scheduled updates.

Makes sense.  We'll see if we can get this implemented soon.  :)

Allot quicker response than I expected after filing a request, label me happy 
:-) 

Please let me know if I can assist with any testing in our labs, thanks!

Ryan -- we'd probably also need crbug.com/101868 for this to be smooth.  
Otherwise, the  user would still see an "update" button in the Chrome about 
dialog and it would just fail every time.

We've implemented this in the internal builds of Omaha.  :)  I'll mark this bug 
as Fixed once it has received QA sign-off and starts being included in 
installers for Google products.

That is great to hear Ryan. Thanks for the quick turn around on this one. I am 
highly impressed with the response time to get this update into the next build.

Ryan,
I've noticed that with the current version of Google Update GPOs that what was 
"Allow Updates" (manual and automatic) has been replaced by "Automatic Silent 
Updates" (presumably manual disabled)
Therefore we still only have 3 options, rather then 4. Was this intentional? 
Thanks.

Ryan,
Additionally to the last comment; when we began to roll out Chrome/Google 
Update, we were not in a position to set GPOs via domain policy, so we added a 
few needed GPO registry keys via a transform script.  One of these was to allow 
automatic silent updates but not to permit manual updates (value of 3 at the 
time). It now seems that a value of 3 is not used. What now have is:

Automatic Silent Updates = 1
Manual Updates = 2
Updates Disabled = 0

However Wrench > About Google Chrome, with anything apart from a value of "3" 
allows me to perform a manual update!
If I set it to 3, I get the message we've always seen "Updates are disabled by 
the Administrator" which I think you advised was misleading and really 
means/should read "Manual Updates are disabled by the Administrator"

This begs a couple of questions:
1. Is Chrome still going to update automatically with the update value set to 3?
2. Are your new GPOs correct, given that manual updates seem to occur when 
update values of 0 and 1 are set?

Thanks,

Duncan

We just updated the ADM templates; you should see four options now.

http://dl.google.com/dl/update2/enterprise/GoogleUpdate.adm

The options are:
0 = all updates disabled
1 = all updates allowed
2 = only manual (on-demand) updates allowed / automatic updates disabled
3 = only automatic (scheduled task) updates allowed / manual updates disabled

Double check that you don't have a policy for Chrome overriding a default 
policy for apps :)

Ryan, fantastic quick response/fix. Many thanks! So was it a regression? ;)
You said: "Double check that you don't have a policy for Chrome overriding a 
default policy for apps"
We do, the Chrome overriding policy says Automatic Update (3), while the 
default policy says don't Update! That's ok isn't it? -  We're still auto 
updating as far as I can tell; nobody's complained that we're not (except for 
the false positives generated by the users who are misled by the message in the 
Chrome About Box!) ;)

...leading neatly on:
What can be done about that misleading Chrome About Box message "Updates are 
disabled by the Administrator"? Can we get this changed to read "Manual Updates 
are disabled by the Administrator" or something that accurately describes the 
current Update policy?  I'm guessing this is a Chrome issue though, huh? ;)

Thanks.

I'm not actually sure what happened there -- nothing's changed on that download 
in months.

The messages in the "About Google Chrome" box are defined on the Chrome side; 
I'll see if we can do anything on the Update side to improve this, though.

Ryan, thanks.
I hadn't looked closely at that particular ADM before. As mentioned we've not 
set GPOs yet via domain policy for Chrome/Omaha, all I've done is enforce the 
bare minimum via a transform script and the ADM I used as reference was an 
older version still, although it had the "automatic updates allowed / manual 
updates disabled" option.

Would it be worth my while to log a new issue for the wording of the update 
status in the Chrome about box or is there perhaps an open issue I can bump to 
get some visibility?  Thanks.  

Google Update for Enterprise documentation only refers to the 3 update override 
options rather than 4:
http://support.google.com/installer/bin/answer.py?hl=en&answer=146164