How to Deploy Google Chrome via Intune (Win32 App Packaging Guide)
Google Chrome is one of the most commonly deployed Win32 apps in Intune environments. Google provides an enterprise MSI installer that makes packaging straightforward. This guide covers the MSI approach, which gives you silent install, automatic detection, and the option to pre-configure settings via group policy or registry at deploy time.
Download the enterprise installer
Google publishes an enterprise MSI installer specifically designed for managed deployments. Do not use the standard consumer installer - it is a stub downloader that will fail in Intune.
Download URL (64-bit MSI):
https://dl.google.com/dl/chrome/install/googlechromestandaloneenterprise64.msi
Wrap with the Content Prep Tool
Create a source folder, drop the MSI in, then run:
IntuneWinAppUtil.exe -c "C:\AppSource\Chrome" -s "googlechromestandaloneenterprise64.msi" -o "C:\IntunePackages"
Add the app in Intune
- Upload the .intunewin file
- Name: Google Chrome
- Publisher: Google LLC
- App version: check the MSI properties for the version number
Install and uninstall commands
Requirements
Detection rule
Use MSI detection with the product code. Intune reads this from the MSI automatically if you select Use rules to detect the presence of this app and choose MSI as the rule type.
Alternatively, use a file detection rule:
Known gotchas
Chrome updates itself
Once installed, Chrome auto-updates via the Google Update service. This is usually fine for business use - Chrome stays current without you repackaging it. If you want to control update frequency, deploy a Chrome ADMX policy via Intune Settings Catalog to manage the update channel (Stable, Beta, Dev).
Chrome asking users to sign in with personal accounts
Deploy a Settings Catalog policy to restrict sign-in to your organisation's domain. Search for Chrome in the Settings Catalog and set RestrictSigninToPattern to your domain pattern (e.g. .*@yourdomain.com).
Frequently Asked Questions
Use the enterprise MSI with the command: msiexec /i "googlechromestandaloneenterprise64.msi" /qn /norestart. This installs Chrome silently for all users with no reboot required.
Always use the enterprise MSI from dl.google.com/dl/chrome/install/googlechromestandaloneenterprise64.msi - not the standard consumer installer, which is a stub downloader that will fail in Intune.
Use a file detection rule checking for chrome.exe in C:\Program Files\Google\Chrome\Application, or use MSI detection with the product code found after installing manually.
Yes. Chrome updates itself via the Google Update service once deployed. You can control the update channel using the Chrome ADMX policy via Intune Settings Catalog.