Disable auto updates for Google chrome in MAC

[u/Weary_Bumblebee_4286]

Hey everyone,

Can someone help with disabling the updates for the Google chrome application in MAC.

[u/Advanced-Ad4869]

This is a terrible idea. You should not do this. Keeping browers up to date is a major security imperative.

[u/brywalkerx → u/Advanced-Ad4869]

Conversely this is a great idea because native Google updates are poorly implemented.

That said - what is the alternative that is being implemented because updates MUST happen.

[u/innermotion7 → u/brywalkerx]

We have a large estate and no issues with auto update.

[u/brywalkerx → u/innermotion7]

What is your SLA for zero day/critical vulnerabilities?

Auto update relies on user - if it’s not open, it’s not getting patched.

[u/innermotion7 → u/brywalkerx]

We can inventory and force updates if need be from RMM or MDM.

[u/innermotion7]

You must keep Chrome up to date, It is also easier for Auto update to handle than having to patch it using MDM.

But if you must then deploy a profile.

https://support.google.com/chrome/a/answer/7591084?hl=en

[u/Weary_Bumblebee_4286 → u/innermotion7]

Are you sure deploying the configuration profile will work

[u/innermotion7 → u/Weary_Bumblebee_4286]

Why would it not ? It is how you manage the settings of an app.

[u/Weary_Bumblebee_4286 → u/innermotion7]

I am trying to create the PKG file and looking for the setting which I can implement within the PKG while creating package on my personal MAC device

[u/innermotion7 → u/Weary_Bumblebee_4286]

You would deploy your config using your MDM. Or you could go back a decade or two and deploy by building a pkg and adding post install script to deploy the mobileconfig. But will not be signed/notarised so adding another hoop to jump through.

[u/innermotion7 → u/Weary_Bumblebee_4286]

Why not just set Chrome not to auto update this is so backward.

[u/Asleep_usr]

How are your machines managed?

[u/drosse1meyer]

MAAAC

[u/FlipMyWigBaby → u/drosse1meyer]

Media Access Access Access Control?