If you are using PDQ Deploy like I am, create a new package and add each script as a new step. Here is the script to close the Google Chrome process: get-process chrome | stop-process -forceĪnd here is the script to delete the Chrome “Login Data” file: Remove-Item "C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Login Data" Powershell Script to Delete Chrome Saved Logins I turned this into a PDQ Package that runs both steps. It’s also important to note that the Login Data file gets rebuilt everytime the browser is launched, so it’s best to do this once across the entire organization. The browser HAS to be closed otherwise it won’t delete this file. Delete a Login Data file (located at C:\Users\username\AppData\Local\Google\Chrome\Default\Login Data\).This script is pretty simple and has two parts: So, I wrote a simple Powershell script that took care of this issue. Disabling the “Browser sign-in settings” and “Disable synchronization of data with Google” in Group Policy Management doesn’t delete these passwords. However, I quickly noticed that even though our users were completely signed out, there was still a cache of saved personal passwords. Once that change was made, it signed everyone’s gmail account out of their browser. We also blocked the ability to store passwords to Google Chrome. Then, we force-installed Bitwarden using GPO.Īfter that, we sent a company email letting employees that they would no longer be able to sign & sync their personal gmail account into corporate browsers. The first thing we did was block the install of unapproved extensions (and added Bitwarden to our Allowed Extensions list). ADMX templates to our Domain Controller which allows us to manage everyone’s browser. ![]() (You may want to read up on the Bitwarden offboarding process if you choose to do the same at your company, though)įor this rollout to effective, we first pushed out Google Chrome Enterprise, Edge Enterprise, and Firefox Enterprise. In our corporate environment, we just finished implementing Bitwarden as our corporate password manager. If you don’t have a deployment tool like PDQ, you can still follow this guide and instead push this out as Startup Task/batch file using a GPO. To do this, I am using a combination of Powershell and pushing it out with PDQ Deploy. ![]() I will also show you how to delete the Microsoft Edge cache of saved credentials as the process is very similar. In this guide, I’m going to show you how to delete Google Chrome’s cached logins using Powershell.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |