Hayden

In enterprise environments, organizations may need to restrict Chrome’s Incognito Mode to strengthen security policies and monitor web browsing activities. This guide provides step-by-step instructions for effectively disabling Chrome Incognito Mode using Active Directory Group Policy Objects (GPO).

 

 

1. Downloading and Installing Chrome ADMX Templates

1.1 Template Download

To manage Chrome policies, you must first download the official ADMX templates provided by Google.

  1. Visit Chrome Enterprise Download Page
  2. Select the “Manage policies” tab
  3. Choose “Policy templates – Chrome ADM/ADMX templates” and click Download
  4. Accept the Terms of Service and download the policy_templates.zip file

1.2 Template Installation

Install the downloaded templates in the correct location.

Local Computer Installation:

  1. Extract the policy_templates.zip file
  2. Copy chrome.admx and google.admx files from \policy_templates\windows\admx\ folder
  3. Paste them into %systemroot%\PolicyDefinitions (typically C:\Windows\PolicyDefinitions)
  4. Copy the English chrome.adml and google.adml files from \policy_templates\windows\admx\en-US\ folder
  5. Paste them into %systemroot%\PolicyDefinitions\en-US

Domain Environment Installation (Central Store):

  1. On the domain controller, copy ADMX files to C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions
  2. Copy ADML files to C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\en-US

 

 

2. Disabling Incognito Mode via Group Policy

2.1 Local Group Policy Editor Configuration

  1. Press Win + R to open the Run dialog
  2. Type gpedit.msc and press Enter
  3. Navigate to:
    • Computer Configuration → Administrative Templates → Google → Google Chrome
  4. Double-click the “Incognito mode availability” policy
  5. Select “Disabled”
  6. Click OK

2.2 Domain Group Policy Configuration (GPMC)

  1. Open Group Policy Management Console (GPMC)
  2. Create a new GPO or edit an existing one
  3. Navigate to Computer Configuration → Policies → Administrative Templates → Google → Google Chrome
  4. Edit the “Incognito mode availability” policy
  5. Select “Disabled” and apply

Mode

Setting Value Meaning Behavior
Not Configured Default value Incognito mode available
Enabled Policy active Select detailed options from dropdown
Disabled Incognito mode disabled Completely blocks Incognito mode

 

 

3. Direct Registry Configuration

In environments where GPO is not available, you can directly edit the registry.

3.1 Command Prompt Configuration

Run Command Prompt as administrator and enter the following command:

REG ADD HKLM\SOFTWARE\Policies\Google\Chrome /v IncognitoModeAvailability /t REG_DWORD /d 1

3.2 Registry Value Details

Registry Value Behavior
0 or No value Allow Incognito mode (default)
1 Disable Incognito mode
2 Force Incognito mode

3.3 Removing Configuration

To revert the setting, use the following command:

REG DELETE HKLM\SOFTWARE\Policies\Google\Chrome /v IncognitoModeAvailability /f

 

 

4. Policy Application and Verification

4.1 Applying Policy

  1. Run gpupdate /force command to immediately apply policy
  2. Completely close and restart Chrome browser
  3. Changes typically apply within a few minutes

4.2 Verifying Policy Application

Verification in Chrome:

  1. Enter chrome://policy in Chrome browser
  2. Click Reload policies
  3. Check the IncognitoModeAvailability entry
  4. Verify the value is set to 1 with Status: OK

UI Verification:

  • Click the ⋮ menu in the top-right corner of Chrome
  • Verify the “New incognito window” option has disappeared
  • Ctrl + Shift + N shortcut should also be disabled

 

 

5. Additional Security Settings

Additional Chrome security policies that work well with Incognito mode restrictions:

Policy Name English Name Description
Disable Guest Mode BrowserGuestModeEnabled Block guest browsing
Block Adding Profiles BrowserAddPersonEnabled Prevent new profile creation
Block Browsing History Deletion AllowDeletingBrowserHistory Prevent history deletion

 

Disabling Chrome Incognito mode is an important component of enterprise security policies. Using the methods outlined in this guide, you can effectively manage Chrome browsers according to your organization’s security requirements. Always test policies in a test environment before applying them to production systems.

References

 

Leave a Reply