Google Chrome versus NTLM

Since Google pushed out the stable version of Google Chrome 47.0.2526.73, many people experience the issue with NTLM authentication.  This NTLM authentication is the way that transparent proxy software authenticates the user rights with Active Directory.  So, in order to fix this, there are a few steps that we need to do.

  1. Back it down to the version of Google Chrome 46.0.2490.86
  2. Stop Google Chrome from upgrading itself to the latest version by adding the following registries.  Following is the reg file to import into your computer.

    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Update]
    "AutoUpdateCheckPeriodMinutes"=dword:00000000
    "Update{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}"=dword:00000000
    

    Or you can run the following commands in Command Prompt

    reg add HKLM\SOFTWARE\Policies\Google\Update /v AutoUpdateCheckPeriodMinutes /t REG_DWORD /d 00000000
    
    reg add HKLM\SOFTWARE\Policies\Google\Update /v Update{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D} /t REG_DWORD /d 00000000

If you have multiple computers, you can use the following powershell script to push the registries to the client computer.  Please create a Computers_Target.txt file and enter all the computer names that you want, each per line.

$lines = Get-Content "Computers_Target.txt" | Where {$_ -notmatch '^\s+$'}
$specialkey = "Update{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}"
foreach ($computer in $lines) {
  write-Host "---------------------------------------------" -ForegroundColor Yellow
  if (-Not [string]::IsNullOrEmpty($computer)){
    write-Host "Pushing Google Chrome Registry to the computer $computer"
    reg delete \\$computer\HKLM\SOFTWARE\Policies\Google\Update /v DisableAutoUpdateChecksCheckboxValue /f
    reg add \\$computer\HKLM\SOFTWARE\Policies\Google\Update /v $specialkey /t REG_DWORD /d 00000000 /f
    }
  write-Host "---------------------------------------------" -ForegroundColor Green
}

Comments are closed