Google Chrome Deployment using Intune Line of Business Application

Let’s learn how to download and install Google Chrome using Intune Line of Business Application model. I have explained the steps in the above video (Google Chrome Deployment).

To add a custom or in-house app, upload the app’s installation file. Make sure the file extension matches the app’s intended platform. Intune supports the following line-of-business app platforms and extensions:

  • Android (APK)
  • iOS (IPA)
  • macOS (.IntuneMac)
  • Windows (.msi, .appx, .appxbundle, .msix, and .msixbundle)

In this post, we are looking into Windows LOB application deployment. Let’s see how to deploy the Google Chrome” (Intune Google Chrome?) browser to Windows 10 or Windows 11 devices using Microsoft Intune. I have a post that explains, “Deploy Google Chrome Update with SCCM.”

Patch My PC

NOTE! – There is a 0-Day bug with Chrome Browsers. Update the Google Chrome browsers immediately. More details – Chrome’s audio component (CVE-2019-13720) while the other resides in the PDFium (CVE-2019-13721) library.

Download Chrome Enterprise Version MSI

You can download the enterprise version of the Google Chrome browser from the following Google Server.

I usually download the FULL version of the Google Chrome browser. But, you have an option to download Google Chrome update MSI as well.

Introduction Google Chrome Deployment

Recently Google published a post about the latest vulnerabilities of Google Chrome. And they highlighted this as Zero-day Patch. 0-day patches are highly critical, and you need to update the browsers as soon as possible.

Let’s download the Patch or the latest version of Google MSI from the Google server and follow the steps mentioned in the above video to deploy Chrome update to Windows 10 devices.

Google Chrome Deployment using Intune Line of Business Application

Create Intune Chrome Browser Line of Business App

To create Intune line of business (LOB) application, you need to log into the device management portal. Once you log in to the device management portal you can go to the windows application and start creating Intune LOB application.

The creation of the application is straightforward as I have shown in the video (Google Chrome Deployment options). I don’t think you have to worry about the application version shown Intune console. I don’t know how it is getting that MSI version details when we select the Google Chrome MSI.

  • Login to Intune Portal https://endpoint.microsoft.com/
  • Select Apps > All apps > + Add.
  • Select Windows 10 in the Office 365 Suite section of the Select app type pane.
  • Click Select. The Add Office 365 Suite steps are displayed.

Thoughts – If you check the MSI version of the properties of that MSI file and compare that with the version which shows in Intune portal, you will get confused. So, don’t worry about that at the moment. There could be some bug in Intune.

Create Google Chrome Browser Application
Create Google Chrome Browser Application Google Chrome Deployment using Intune Line of Business Application

Select Line-of-business app to create Google chrome browser application

 Google Chrome Deployment using Intune Line of Business Application
Google Chrome Deployment using Intune Line of Business Application

Click on the App package file and select Application and Click on the FOLDER icon.

 Select Application - Intune Google Chrome Browser Application
Select Application Intune Google Chrome Browser Application

Browse using Windows Explorer and Select the MSI – the Google Chrome Browser MSI ( GoogleChromeStandaloneEnterprise64.msi). Click OK to continue

Name:  Google Chrome 
Platform: Windows
App version: 67.208.87
Size: 57.44 MiB
MAM Enabled: No
Execution Context: Per-Machine
App Package File Selection - Intune Google Chrome Browser - Upload Google Chrome Browser using Intune Line of Business Application
App Package File Selection – Intune Google Chrome Browser – Upload Google Chrome Browser using Intune Line of Business Application
  • Click on App Information Configuration
  • Fill the App Information (Mandatory information for Line of Business app)
    • Name – Google Chrome
    • Description – Google Chrome
    • Publisher – Google
App Information - Intune Google Chrome Browser
Upload Google Chrome Browser using Intune Line of Business Application

Select the Logo for the Google Chrome Browser application. Click on Browse (FOLDER ICON).

Select Logo and Upload - Intune Google Chrome Browser
Select Logo and Upload Intune Google Chrome Browser

Copy and Save the Chrome ICON to your computer

Chrome Browser
Chrome Browser

Select the saved chrome icon. Intune will automatically upload and analyze the icon. Google Chrome Deployment using Intune Line of Business Application.

ICON Chrome - Intune Google Chrome Browser
ICON Chrome – Intune Google Chrome Browser
  • Click OK
  • Click OK
  • Select the Scope (Tags)
  • Click +Add
  • Select Tags -> Test
  • Click on Select
  • Click OK

NOTE! – Intune scope tag guide – Intune Scope Tags Implementation Guide.

Scope Tags - Intune Google Chrome Browser
Scope Tags Intune Google Chrome Browser

Click Add

Add to complete the creation of  Intune Google Chrome Browser
Add to complete the creation of Intune Google Chrome Browser

Upload Google Chrome Browser using Intune Line of Business Application

Once you save the Google Chrome application, Intune will start uploading the MSI 2 Microsoft cloud. This process it’s going to take the same depending on your Internet speed and the size of the MSI.  

You can see the starters of the upload in intunes console itself.  You can see the percentage of uploads do Intune in the device management portal itself as you can see in the video (Google Chrome Deployment scenarios).

Thoughts – This % of upload notification is very useful instead of some gas works which we used to do in previous versions of Intune.

  • Chrome Browser application is now getting uploaded
    • Uploading Google Chrome 64% completed
Uploading Google Chrome - Google Chrome Browser
Uploading Google Chrome – Google Chrome Browser

Let’s wait to complete the upload

Completed the Upload  - Google Chrome Browser
Completed the Upload – Google Chrome Browser

Google Chrome Assignments to Device Groups

Deployment is called assignment in Intune. I have explained How to assign an application like Google Chrome to the 2 Azure Active Directory device groups. There are different types of assignment types in Intune.

Similar to SCCM, required and available are 2 prominent options. Apart from these 2, you will have another option which is called available for all enrolled devices. This option will make the application available for all MDM-enrolled devices.

Thoughts – If you select available for all enrolled devices, you are in turn removing the dependency of Azure AD assignments. I think this will help to improve the performance of Microsoft Intune in some way.

  • Click on Assignments
  • Click on Add Groups
Assignment - Add Group - Google Chrome Browser
Assignment – Add Group Google Chrome Browser

This will also help to reduce the workload for Azure Active Directory to analyze different groups’ different logics for dynamic groups etc similar to dynamic collections in the SCCM world.  I have used the required option in this Chrome application deployment or assignment.

  • Add Groups – Select Assignment TypeRequired
Assignment Type - Required -  Google Chrome Browser
Assignment Type – Required – Google Chrome Browser
  • Select the Azure AD Device Groups to include
  • Search for Chrome AAD Device Groups
  • Click on Select to confirm the AAD Group select
Select Azure AD Device Group -  Google Chrome Browser
Select Azure AD Device Group – Google Chrome Browser

Click OK to complete the Google Chrome application assignment

Assignment - Google Chrome Browser
Assignment – Google Chrome Browser

Click OK (1 group selected – Included Group)

Click OK (1 group selected ) -  Google Chrome Browser
Click OK (1 group selected ) – Google Chrome Browser

Click on Save

Save - Google Chrome Browser
Save – Google Chrome Browser

Success – Assignments saved Successfully

Success - IGoogle Chrome Browser
Success – Google Chrome Browser

Results Windows 10 – Intune Google Chrome

Google Chrome Browser Got Installed
Google Chrome Browser Got Installed

Device Management Console Status

Device Status - Google Chrome
Device Status – Google Chrome

Resources

1 thought on “Google Chrome Deployment using Intune Line of Business Application”

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.