Deploy Google Chrome Update with SCCM Step by Step Guide 0-Day Bug

1
Deploy Google Chrome Update

In this post, you will learn how to install and update Chrome x64 version with SCCM application model. I also explained other methods to deploy Chrome updates with SCCM third-party patching solutions.

NOTE! – There is a 0-Day bug with Chrome Browsers. Update the Google Chrome browsers immediately. More details – Chrome’s audio component (CVE-2019-13720) while the other resides in the PDFium (CVE-2019-13721) library.

Download Google Chrome

You can download the Google Chrome x64 version (Chrome v. 78.0.3904.87) from the following Google Server. Set up and deploy Chrome browser in your organization with SCCM application model.

Create Google Chrome Application Package

  • Copy the downloaded Google Chrome MSI (GoogleChromeStandaloneEnterprise64.msi) to package source location of SCCM server
Deploy Google Chrome with SCCM - Package Source  GoogleChromeStandaloneEnterprise64.msi
Deploy Google Chrome with SCCM – Package Source GoogleChromeStandaloneEnterprise64.msi
  • Navigate to SCCM Console \Software Library\Overview\Application Management\Applications
  • Right click on Applications and select Create Application
Deploy Google Chrome with SCCM  - Create Google Chrome Application
Creation Google Chrome with SCCM Application – Create Google Chrome Application
  • Browse through the package source location and Select GoogleChromeStandaloneEnterprise64.msi
  • Click on open from Windows Explorer
Deploy Google Chrome Update with SCCM Step by Step Guide 0-Day Bug 1
Deploy Google Chrome with SCCM – Package Source
  • Click on NEXT to continue Google Chrome with SCCM (Specify Settings for this application)
Google Chrome with SCCM - Specify Settings for this application
Deploy Google Chrome with SCCM update – Specify Settings for this application
  • Click NEXT to continue
Application name: Google Chrome
Publisher:
Software version:
Deployment type name: Google Chrome - Windows Installer (*.msi file)
Product Code: {5F3900B4-8F6A-3918-9E34-4966E92196D8}
Installation behavior: Install for system
Content location: \SCCM_Prod\Sources\MSI\Chrome\
Number of files: 1
Content files:
GoogleChromeStandaloneEnterprise64.msi
Deploy Google Chrome with SCCM - View Imported information
Creation Google Chrome with SCCM Application – View Imported information
  • Google Chrome Command Line for SCCM Application deployment
    • msiexec /i “GoogleChromeStandaloneEnterprise64.msi” /q
  • Click on NEXT to continue Specify the Information about the application Window
Deploy Google Chrome Update with SCCM Step by Step Guide 0-Day Bug 2
Creation Google Chrome with SCCM Application – Specify the Information about the application
  • Confirm the settings for the application Google Chrome and Click on NEXT

NOTE! – All the descriptions are automatically populated Google Chrome MSI.

General Information:
• Application name: Chrome
• Administrator comments:
• Publisher: Google
• Software version: 78.0.3904.87
• Optional reference:
Categories:
Deployment type name: Google Chrome - Windows Installer (*.msi file)
Requirement rules:
Content:
• Content location: \SCCM_Prod\Sources\MSI\Chrome\
• Installation program: msiexec /i "GoogleChromeStandaloneEnterprise64.msi" /q
Detection Method:
• Product code: {5F3900B4-8F6A-3918-9E34-4966E92196D8}
User Experience:
• Installation behavior: Install for system
Deploy Google Chrome with SCCM - Confirm the Settings for this Application
Creation Google Chrome with SCCM Application – Confirm the Settings for this Application
  • Click on Complete button to finish the creation Google Chrome with SCCM.
Success: General Information:
• Application name: Chrome
• Administrator comments:
• Publisher: Google
• Software version: 78.0.3904.87
• Optional reference:
Success: Categories:
Success: Deployment type name: Google Chrome - Windows Installer (*.msi file)
Success: Requirement rules:
Success: Content:
• Content location: \SCCM_Prod\Sources\MSI\Chrome\
• Installation program: msiexec /i "GoogleChromeStandaloneEnterprise64.msi" /q
Success: Detection Method:
• Product code: {5F3900B4-8F6A-3918-9E34-4966E92196D8}
Success: User Experience:
• Installation behavior: Install for system
Deploy Google Chrome with SCCM - Create Application Wizard Completed Successfully
Create Google Chrome with SCCM – Create Application Wizard Completed Successfully

Deploy Google Chrome with SCCM

  • Select Google Chrome application
  • Right Click Google Chrome application and Deploy
Deploy Google Chrome with SCCM
Deploy Google Chrome with SCCM – Select the Chrome application
  • Select Deploy
Deploy Google Chrome with SCCM - Click on Deploy
Deploy Google Chrome with SCCM – Click on Deploy
  • Select Collection which you want to deploy Google Chrome update
  • Click on NEXT
Deploy Google Chrome with SCCM - Select collection and click NEXT
Deploy Google Chrome Update with SCCM – Select collection and click NEXT
  • Select DPs or DP groups which you want to distribute in the Specify the Content Distribution window.
  • Click on Next to continue
Deploy Google Chrome with SCCM - Add the DP - Specify the Content Distribution
Deploy Google Chrome Update with SCCM – Add the DP – Specify the Content Distribution
  • Select Action Install or Uninstall. I selected Install to install Google Chrome on those devices.
  • Select Purpose Required or you can make it as an available application if you want
  • Click NEXT to continue
Deploy Google Chrome Update with SCCM - Specify settings to control how the software is deployed
Deploy Google Chrome Update with SCCM – Specify settings to control how the software is deployed
  • Google Chrome Scheduling options from Specify the schedule for this deployment window. You have loads of Chrome deployment schedule options
  • Schedule the application to be available at
  • You can also specify the deadline if you want to deploy the Chrome update after off hours
    • As Soon As Possible after the available time
    • You can schedule the deadline as per your requirement
Deploy Google Chrome with SCCM - Schedule the deployments
Deploy Google Chrome Update with SCCM – Schedule the deployments
  • Specify the user experience for the installation of Chrome software on the selected devices
  • Specify user experience setting for the deployment
    • Display in Software Center and only show notifications for computer restarts
  • Click on Next button
Deploy Google Chrome with SCCM - User Experience
Deploy Google Chrome with SCCM – User Experience
  • Specify Configuration Manager and Operations Manager alert option
  • Click on NEXT (All default settings selected)
Deploy Google Chrome with SCCM - SCCM SCOM Alert options for Google Chrome
Deploy Google Chrome with SCCM – SCCM SCOM Alert options for Google Chrome
  • Click on NEXT button to complete the Google Chrome Deployment Wizard
General
• Software: Chrome
• Collection: Test Static Collection (Member Count: 1)
• Use default distribution point groups associated to this collection: Disabled
• Automatically distribute content for dependencies: Enabled
Deployment Settings
• Action: Install
• Purpose: Required
• Allow end users to attempt to repair this application: Disabled
• Pre-deploy software to the user's primary device: Disabled
• Send wake-up packets: Disabled
• Allow clients to use a metered Internet connection to download content: Disabled
Application Settings (retrieved from application in software library)
• Application Name: Chrome
• Application Version: 78.0.3904.87
• Application Deployment Types: Windows Installer (*.msi file)
Scheduling
• Time based on: UTC
• Available Time: As soon as possible
• Deadline Time: Disabled
• Delayed enforcement on deployment: Disabled
User Experience
• User notifications: Display in Software Center, and only show notifications for computer restarts
• Ignore Maintenance Windows: Disabled
• System restart (if required to complete the installation): Disabled
• Commit changes at deadline or during a maintenance window (requires restarts): Enabled
Alerts
• Enable System Center Operations Manager maintenance mode: Disabled
• Generate System Center Operations Manager alert when a software installation fails: Disabled
• Create a deployment alert when the threshold is lower than the following: Disabled
• Create a deployment alert when the threshold is higher than the following: Disabled
Content (1):
• SCCM_PROD.INTUNE.COM
Deploy Google Chrome with SCCM - Confirm the settings for this new deployment
Deploy Google Chrome with SCCM – Confirm the settings for this new deployment
  • Click on CLOSE button to finish the wizard
Deploy Google Chrome with SCCM -  Deploy Software Wizard completed Successfully
Deploy Google Chrome with SCCM Deploy Software Wizard completed Successfully

Set Up Google Chrome Icon for Software Center

  • Select the Chrome application and Click on Properties
Set Up Google Chrome Icon for Software Center
Set Up Google Chrome Icon for Software Center
  • Select “Software Center” tab
  • Click on Browse button near Icon
 Set Up Google Chrome Icon - Browse
Set Up Google Chrome Icon – Browse
  • Copy the Chrome ICON
Download Chrome ICON
Download Chrome ICON
  • Click on OK button to complete
Google Chrome ICON ready
Google Chrome ICON ready

Deployment PropertiesDeployment Types

  • Select the deployment types and select the deployment -> select properties
    • Google Chrome – Windows Installer (*.msi file)
Deployment Properties -  Deployment Types
Deployment PropertiesDeployment Types

SCCM Third-Party Software Update Options

You can use SCCM third-party software update option to update chrome. I have explained those featured in the following blog posts. Those are not free solutions but those are paid custom catalogs.

Additional Tip

I have recently seen a post from Nawaz kazi and I think this is nice way of updating Chrome! More details https://mn-techforum.com/fix-google-chrome-security-alert-zero-day-in-minutes-chrome-0-day-exploit-cve-2019-13720/

Results

You can see more detailed results in the video tutorial below.

Resources

1 COMMENT

  1. As always you saved our day. Sometimes others are shocked by the lightening fast solution provided by me but they don’t know that from where it came. We feel privileged by getting these fixes about bug or any other issues on the same day when declared critical by MS.

    I guess that’s the benefit you get if you follow the right community member of your platform you are providing support for your current role.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.