Hello,
We are currently testing updating Google Chrome with Ivanti Patch for SCCM. Our goal is to ensure that we have control over the versions we deploy in the production environment.
We control the environments by disabling Google Chrome updates via GPO which works very well. No user is able to update Chrome.
We noticed that during deployments, even if a GPO is in place to disable updates, during installation the registry keys that prevent automatic updating are deleted and reapplied later when refreshing GPO. So when we updating Chrome but it still check if there is not a newer version available and if so installs the latest version available on the Google site. Which could cause a major impact if this version have not passed the testing process in order to approve deployment without impact.
Example: we are deploying version 61.0.3163.91 and during the deployment version 61.0.3163.100 becomes available then it installs on the worstation, despite the control that we put in GPO, because the update erases the keys of register related to this GPO.
Do you have any idea how we could properly controle the updates
Thank you
