Accessibility settings |
ShowAccessibilityOptionsInSystemTrayMenu | Show accessibility options in system tray menu |
LargeCursorEnabled | Enable large cursor |
SpokenFeedbackEnabled | Enable spoken feedback |
HighContrastEnabled | Enable high contrast mode |
VirtualKeyboardEnabled | Enable on-screen keyboard |
KeyboardDefaultToFunctionKeys | Media keys default to function keys |
ScreenMagnifierType | Set screen magnifier type |
DeviceLoginScreenDefaultLargeCursorEnabled | Set default state of the large cursor on the login screen |
DeviceLoginScreenDefaultSpokenFeedbackEnabled | Set the default state of spoken feedback on the login screen |
DeviceLoginScreenDefaultHighContrastEnabled | Set the default state of high contrast mode on the login screen |
DeviceLoginScreenDefaultVirtualKeyboardEnabled | Set default state of the on-screen keyboard on the login screen |
DeviceLoginScreenDefaultScreenMagnifierType | Set the default screen magnifier type enabled on the login screen |
Allow Google Chrome Frame to handle the following content types |
ChromeFrameContentTypes | Allow Google Chrome Frame to handle the listed content types |
Configure Google Drive options |
DriveDisabled | Disables Drive in the Google Chrome OS Files app |
DriveDisabledOverCellular | Disables Google Drive over cellular connections in the Google Chrome OS Files app |
Configure remote access options |
RemoteAccessClientFirewallTraversal | Enable firewall traversal from remote access client |
RemoteAccessHostFirewallTraversal | Enable firewall traversal from remote access host |
RemoteAccessHostDomain | Configure the required domain name for remote access hosts |
RemoteAccessHostRequireTwoFactor | Enable two-factor authentication for remote access hosts |
RemoteAccessHostTalkGadgetPrefix | Configure the TalkGadget prefix for remote access hosts |
RemoteAccessHostRequireCurtain | Enable curtaining of remote access hosts |
RemoteAccessHostAllowClientPairing | Enable or disable PIN-less authentication for remote access hosts |
RemoteAccessHostAllowGnubbyAuth | Allow gnubby authentication for remote access hosts |
RemoteAccessHostAllowRelayedConnection | Enable the use of relay servers by the remote access host |
RemoteAccessHostUdpPortRange | Restrict the UDP port range used by the remote access host |
RemoteAccessHostMatchUsername | Requires that the name of the local user and the remote access host owner match |
RemoteAccessHostTokenUrl | URL where remote access clients should obtain their authentication token |
RemoteAccessHostTokenValidationUrl | URL for validating remote access client authentication token |
RemoteAccessHostTokenValidationCertificateIssuer | Client certificate for connecting to RemoteAccessHostTokenValidationUrl |
RemoteAccessHostDebugOverridePolicies | Policy overrides for Debug builds of the remote access host |
Content Settings |
DefaultCookiesSetting | Default cookies setting |
DefaultImagesSetting | Default images setting |
DefaultJavaScriptSetting | Default JavaScript setting |
DefaultPluginsSetting | Default plugins setting |
DefaultPopupsSetting | Default popups setting |
DefaultNotificationsSetting | Default notification setting |
DefaultGeolocationSetting | Default geolocation setting |
DefaultMediaStreamSetting | Default mediastream setting |
AutoSelectCertificateForUrls | Automatically select client certificates for these sites |
CookiesAllowedForUrls | Allow cookies on these sites |
CookiesBlockedForUrls | Block cookies on these sites |
CookiesSessionOnlyForUrls | Allow session only cookies on these sites |
ImagesAllowedForUrls | Allow images on these sites |
ImagesBlockedForUrls | Block images on these sites |
JavaScriptAllowedForUrls | Allow JavaScript on these sites |
JavaScriptBlockedForUrls | Block JavaScript on these sites |
PluginsAllowedForUrls | Allow plugins on these sites |
PluginsBlockedForUrls | Block plugins on these sites |
PopupsAllowedForUrls | Allow popups on these sites |
RegisteredProtocolHandlers | Register protocol handlers |
PopupsBlockedForUrls | Block popups on these sites |
NotificationsAllowedForUrls | Allow notifications on these sites |
NotificationsBlockedForUrls | Block notifications on these sites |
Default HTML renderer for Google Chrome Frame |
ChromeFrameRendererSettings | Default HTML renderer for Google Chrome Frame |
RenderInChromeFrameList | Always render the following URL patterns in Google Chrome Frame |
RenderInHostList | Always render the following URL patterns in the host browser |
AdditionalLaunchParameters | Additional command line parameters for Google Chrome |
SkipMetadataCheck | Skip the meta tag check in Google Chrome Frame |
Default search provider |
DefaultSearchProviderEnabled | Enable the default search provider |
DefaultSearchProviderName | Default search provider name |
DefaultSearchProviderKeyword | Default search provider keyword |
DefaultSearchProviderSearchURL | Default search provider search URL |
DefaultSearchProviderSuggestURL | Default search provider suggest URL |
DefaultSearchProviderInstantURL | Default search provider instant URL |
DefaultSearchProviderIconURL | Default search provider icon |
DefaultSearchProviderEncodings | Default search provider encodings |
DefaultSearchProviderAlternateURLs | List of alternate URLs for the default search provider |
DefaultSearchProviderSearchTermsReplacementKey | Parameter controlling search term placement for the default search provider |
DefaultSearchProviderImageURL | Parameter providing search-by-image feature for the default search provider |
DefaultSearchProviderNewTabURL | Default search provider new tab page URL |
DefaultSearchProviderSearchURLPostParams | Parameters for search URL which uses POST |
DefaultSearchProviderSuggestURLPostParams | Parameters for suggest URL which uses POST |
DefaultSearchProviderInstantURLPostParams | Parameters for instant URL which uses POST |
DefaultSearchProviderImageURLPostParams | Parameters for image URL which uses POST |
Extensions |
ExtensionInstallBlacklist | Configure extension installation blacklist |
ExtensionInstallWhitelist | Configure extension installation whitelist |
ExtensionInstallForcelist | Configure the list of force-installed extensions |
ExtensionInstallSources | Configure extension, app, and user script install sources |
ExtensionAllowedTypes | Configure allowed app/extension types |
Home page |
HomepageLocation | Configure the home page URL |
HomepageIsNewTabPage | Use New Tab Page as homepage |
Locally managed users settings |
SupervisedUsersEnabled | Enable supervised users |
SupervisedUserCreationEnabled | Enable creation of supervised users |
Native Messaging |
NativeMessagingBlacklist | Configure native messaging blacklist |
NativeMessagingWhitelist | Configure native messaging whitelist |
NativeMessagingUserLevelHosts | Allow user-level Native Messaging hosts (installed without admin permissions). |
Password manager |
PasswordManagerEnabled | Enable the password manager |
PasswordManagerAllowShowPasswords | Allow users to show passwords in Password Manager |
Policies for HTTP Authentication |
AuthSchemes | Supported authentication schemes |
DisableAuthNegotiateCnameLookup | Disable CNAME lookup when negotiating Kerberos authentication |
EnableAuthNegotiatePort | Include non-standard port in Kerberos SPN |
AuthServerWhitelist | Authentication server whitelist |
AuthNegotiateDelegateWhitelist | Kerberos delegation server whitelist |
GSSAPILibraryName | GSSAPI library name |
AllowCrossOriginAuthPrompt | Cross-origin HTTP Basic Auth prompts |
Power management |
ScreenDimDelayAC | Screen dim delay when running on AC power |
ScreenOffDelayAC | Screen off delay when running on AC power |
ScreenLockDelayAC | Screen lock delay when running on AC power |
IdleWarningDelayAC | Idle warning delay when running on AC power |
IdleDelayAC | Idle delay when running on AC power |
ScreenDimDelayBattery | Screen dim delay when running on battery power |
ScreenOffDelayBattery | Screen off delay when running on battery power |
ScreenLockDelayBattery | Screen lock delay when running on battery power |
IdleWarningDelayBattery | Idle warning delay when running on battery power |
IdleDelayBattery | Idle delay when running on battery power |
IdleAction | Action to take when the idle delay is reached |
IdleActionAC | Action to take when the idle delay is reached while running on AC power |
IdleActionBattery | Action to take when the idle delay is reached while running on battery power |
LidCloseAction | Action to take when the user closes the lid |
PowerManagementUsesAudioActivity | Specify whether audio activity affects power management |
PowerManagementUsesVideoActivity | Specify whether video activity affects power management |
PresentationIdleDelayScale | Percentage by which to scale the idle delay in presentation mode (deprecated) |
PresentationScreenDimDelayScale | Percentage by which to scale the screen dim delay in presentation mode |
AllowScreenWakeLocks | Allow screen wake locks |
UserActivityScreenDimDelayScale | Percentage by which to scale the screen dim delay if the user becomes active after dimming |
WaitForInitialUserActivity | Wait for initial user activity |
PowerManagementIdleSettings | Power management settings when the user becomes idle |
ScreenLockDelays | Screen lock delays |
Proxy server |
ProxyMode | Choose how to specify proxy server settings |
ProxyServerMode | Choose how to specify proxy server settings |
ProxyServer | Address or URL of proxy server |
ProxyPacUrl | URL to a proxy .pac file |
ProxyBypassList | Proxy bypass rules |
Remote Attestation |
AttestationEnabledForDevice | Enable remote attestation for the device |
AttestationEnabledForUser | Enable remote attestation for the user |
AttestationExtensionWhitelist | Extensions allowed to to use the remote attestation API |
AttestationForContentProtectionEnabled | Enable the use of remote attestation for content protection for the device |
Startup pages |
RestoreOnStartup | Action on startup |
RestoreOnStartupURLs | URLs to open on startup |
AllowFileSelectionDialogs | Allow invocation of file selection dialogs |
AllowOutdatedPlugins | Allow running plugins that are outdated |
AlternateErrorPagesEnabled | Enable alternate error pages |
AlwaysAuthorizePlugins | Always runs plugins that require authorization |
ApplicationLocaleValue | Application locale |
AudioCaptureAllowed | Allow or deny audio capture |
AudioCaptureAllowedUrls | URLs that will be granted access to audio capture devices without prompt |
AudioOutputAllowed | Allow playing audio |
AutoCleanUpStrategy | Selects the strategy used to free up disk space during automatic clean-up (deprecated) |
AutoFillEnabled | Enable AutoFill |
BackgroundModeEnabled | Continue running background apps when Google Chrome is closed |
BlockThirdPartyCookies | Block third party cookies |
BookmarkBarEnabled | Enable Bookmark Bar |
BrowserAddPersonEnabled | Enable add person in profile manager |
BrowserGuestModeEnabled | Enable guest mode in browser |
BuiltInDnsClientEnabled | Use built-in DNS client |
ChromeOsLockOnIdleSuspend | Enable lock when the device become idle or suspended |
ChromeOsMultiProfileUserBehavior | Control the user behavior in a multiprofile session |
ChromeOsReleaseChannel | Release channel |
ChromeOsReleaseChannelDelegated | Whether the release channel should be configurable by the user |
ClearSiteDataOnExit | Clear site data on browser shutdown (deprecated) |
CloudPrintProxyEnabled | Enable Google Cloud Print proxy |
CloudPrintSubmitEnabled | Enable submission of documents to Google Cloud Print |
ContextualSearchEnabled | Enable Touch to Search |
DataCompressionProxyEnabled | Enable the data compression proxy feature |
DefaultBrowserSettingEnabled | Set Google Chrome as Default Browser |
DeveloperToolsDisabled | Disable Developer Tools |
DeviceAllowNewUsers | Allow creation of new user accounts |
DeviceAllowRedeemChromeOsRegistrationOffers | Allow users to redeem offers through Chrome OS Registration |
DeviceAppPack | List of AppPack extensions |
DeviceAutoUpdateDisabled | Disables Auto Update |
DeviceAutoUpdateP2PEnabled | Auto update p2p enabled |
DeviceBlockDevmode | Block developer mode |
DeviceDataRoamingEnabled | Enable data roaming |
DeviceEphemeralUsersEnabled | Wipe user data on sign-out |
DeviceGuestModeEnabled | Enable guest mode |
DeviceIdleLogoutTimeout | Timeout until idle user log-out is executed |
DeviceIdleLogoutWarningDuration | Duration of the idle log-out warning message |
DeviceLocalAccountAutoLoginBailoutEnabled | Enable bailout keyboard shortcut for auto-login |
DeviceLocalAccountAutoLoginDelay | Public session auto-login timer |
DeviceLocalAccountAutoLoginId | Public session for auto-login |
DeviceLocalAccountPromptForNetworkWhenOffline | Enable network configuration prompt when offline |
DeviceLocalAccounts | Device-local accounts |
DeviceLoginScreenPowerManagement | Power management on the login screen |
DeviceLoginScreenSaverId | Screen saver to be used on the sign-in screen in retail mode |
DeviceLoginScreenSaverTimeout | Duration of inactivity before the screen saver is shown on the sign-in screen in retail mode |
DeviceMetricsReportingEnabled | Enable metrics reporting |
DeviceOpenNetworkConfiguration | Device-level network configuration |
DevicePolicyRefreshRate | Refresh rate for Device Policy |
DeviceRebootOnShutdown | Automatic reboot on device shutdown |
DeviceShowUserNamesOnSignin | Show usernames on login screen |
DeviceStartUpFlags | System wide flags to be applied on Google Chrome start-up |
DeviceStartUpUrls | Load specified urls on demo login |
DeviceTargetVersionPrefix | Target Auto Update Version |
DeviceTransferSAMLCookies | Transfer SAML IdP cookies during login |
DeviceUpdateAllowedConnectionTypes | Connection types allowed for updates |
DeviceUpdateHttpDownloadsEnabled | Allow autoupdate downloads via HTTP |
DeviceUpdateScatterFactor | Auto update scatter factor |
DeviceUserWhitelist | Login user white list |
Disable3DAPIs | Disable support for 3D graphics APIs |
DisablePluginFinder | Specify whether the plugin finder should be disabled |
DisablePrintPreview | Disable Print Preview (deprecated) |
DisableSSLRecordSplitting | Disable SSL record splitting |
DisableSafeBrowsingProceedAnyway | Disable proceeding from the Safe Browsing warning page |
DisableScreenshots | Disable taking screenshots |
DisableSpdy | Disable SPDY protocol |
DisabledPlugins | Specify a list of disabled plugins |
DisabledPluginsExceptions | Specify a list of plugins that the user can enable or disable |
DisabledSchemes | Disable URL protocol schemes |
DiskCacheDir | Set disk cache directory |
DiskCacheSize | Set disk cache size in bytes |
DnsPrefetchingEnabled | Enable network prediction |
DownloadDirectory | Set download directory |
EasyUnlockAllowed | Allows Smart Lock to be used |
EditBookmarksEnabled | Enables or disables bookmark editing |
EnableDeprecatedWebBasedSignin | Enables the old web-based signin |
EnableDeprecatedWebPlatformFeatures | Enable deprecated web platform features for a limited time |
EnableOnlineRevocationChecks | Whether online OCSP/CRL checks are performed |
EnabledPlugins | Specify a list of enabled plugins |
EnterpriseWebStoreName | Enterprise web store name (deprecated) |
EnterpriseWebStoreURL | Enterprise web store URL (deprecated) |
ExternalStorageDisabled | Disable mounting of external storage |
ForceEphemeralProfiles | Ephemeral profile |
ForceGoogleSafeSearch | Force Google SafeSearch |
ForceSafeSearch | Force SafeSearch |
ForceYouTubeSafetyMode | Force YouTube Safety Mode |
FullscreenAllowed | Allow fullscreen mode |
GCFUserDataDir | Set Google Chrome Frame user data directory |
HideWebStoreIcon | Hide the web store from the New Tab Page and app launcher |
HideWebStorePromo | Prevent app promotions from appearing on the new tab page |
ImportAutofillFormData | Import autofill form data from default browser on first run |
ImportBookmarks | Import bookmarks from default browser on first run |
ImportHistory | Import browsing history from default browser on first run |
ImportHomepage | Import of homepage from default browser on first run |
ImportSavedPasswords | Import saved passwords from default browser on first run |
ImportSearchEngine | Import search engines from default browser on first run |
IncognitoEnabled | Enable Incognito mode |
IncognitoModeAvailability | Incognito mode availability |
InstantEnabled | Enable Instant |
JavascriptEnabled | Enable JavaScript |
ManagedBookmarks | Managed Bookmarks |
MaxConnectionsPerProxy | Maximal number of concurrent connections to the proxy server |
MaxInvalidationFetchDelay | Maximum fetch delay after a policy invalidation |
MediaCacheSize | Set media disk cache size in bytes |
MetricsReportingEnabled | Enable reporting of RAPPOR, usage, and crash-related data |
NetworkPredictionOptions | Enable network prediction |
OpenNetworkConfiguration | User-level network configuration |
PinnedLauncherApps | List of pinned apps to show in the launcher |
PolicyRefreshRate | Refresh rate for user policy |
PrintingEnabled | Enable printing |
RebootAfterUpdate | Automatically reboot after update |
ReportDeviceActivityTimes | Report device activity times |
ReportDeviceBootMode | Report device boot mode |
ReportDeviceHardwareStatus | Report hardware status |
ReportDeviceNetworkInterfaces | Report device network interfaces |
ReportDeviceSessionStatus | Report information about active kiosk sessions |
ReportDeviceUsers | Report device users |
ReportDeviceVersionInfo | Report OS and firmware version |
ReportUploadFrequency | Frequency of device status report uploads |
RequireOnlineRevocationChecksForLocalAnchors | Whether online OCSP/CRL checks are required for local trust anchors |
RestrictSigninToPattern | Restrict which users are allowed to sign in to Google Chrome |
SAMLOfflineSigninTimeLimit | Limit the time for which a user authenticated via SAML can log in offline |
SSLVersionFallbackMin | Minimum SSL version to fallback to |
SSLVersionMin | Minimum SSL version enabled |
SafeBrowsingEnabled | Enable Safe Browsing |
SavingBrowserHistoryDisabled | Disable saving browser history |
SearchSuggestEnabled | Enable search suggestions |
SessionLengthLimit | Limit the session length |
SessionLocales | Set the recommended locales for a public session |
ShelfAutoHideBehavior | Control shelf auto-hiding |
ShowAppsShortcutInBookmarkBar | Show the apps shortcut in the bookmark bar |
ShowHomeButton | Show Home button on toolbar |
ShowLogoutButtonInTray | Add a logout button to the system tray |
SigninAllowed | Allows sign in to Google Chrome |
SpellCheckServiceEnabled | Enable or disable spell checking web service |
SuppressChromeFrameTurndownPrompt | Suppress the Google Chrome Frame turndown prompt |
SyncDisabled | Disable synchronization of data with Google |
SystemTimezone | Timezone |
SystemUse24HourClock | Use 24 hour clock by default |
TermsOfServiceURL | Set the Terms of Service for a device-local account |
TouchVirtualKeyboardEnabled | Enable virtual keyboard |
TranslateEnabled | Enable Translate |
URLBlacklist | Block access to a list of URLs |
URLWhitelist | Allows access to a list of URLs |
UptimeLimit | Limit device uptime by automatically rebooting |
UserAvatarImage | User avatar image |
UserDataDir | Set user data directory |
UserDisplayName | Set the display name for device-local accounts |
VideoCaptureAllowed | Allow or deny video capture |
VideoCaptureAllowedUrls | URLs that will be granted access to video capture devices without prompt |
WPADQuickCheckEnabled | Enable WPAD optimization |
WallpaperImage | Wallpaper image |