Deploying the Google Phish Alert Button (GPAB) for Chrome through Group Policy

This guide provides instructions on how to deploy the GPAB through Group Policy to Windows machines on your domain. This deployment method is useful if you are force-installing other Chrome extensions through a GPO. If you manage your users' Chrome settings through Google Suite Device Management, you can review our GSuite GPAB deployment method documentation.

When you're ready to install the GPAB for Chrome using Group Policy, follow the steps below.

Section 1: Install Google and Chrome ADMX files

1. Go to https://support.google.com/chrome/a/answer/187202.
2. Select "Windows and Linux".
3. Download the "Zip file of Google Chrome templates and documentation".
   Direct Link: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip

4. Extract the windows folder within the policy_templates.zip file.
5. Browse to windows > admx folder.
6. Copy the chrome.admx file, google.admx file, and en-US folder (see image below).
7. Add the files to C:\Windows\PolicyDefinitions on a local Domain Controller.

Section 2: Install KnowBe4 GPAB ADMX file

1. Download the KnowBe4 GPAB ADMX policy template zip file from this link: KnowBe4 GPAB ADMX.
2. Unzip the file, then copy the KB4-GPAB.admx file and en-US folder to C:\Windows\PolicyDefinitions.

Section 3: Create the GPAB Deployment GPO

1. Create a new GPO, then navigate to Computer Configuration > Policies > Administrative Templates > Google > Google Chrome > Extensions.
   
   
2. Select “Configure the list of force-installed apps and extensions”.
   
   

3. Enable the policy, click "Show", then add this value:

   hfokdlmjeppdmpbngjpnlnijogcecaop;https://clients2.google.com/service/update2/crx  

4. Add the below value, then click "OK".

   hfokdlmjeppdmpbngjpnlnijogcecaop;https://clients2.google.com/service/update2/crx  

Section 4: Specify Base URL and Phish Alert Key in GPO

1. In GPO Editor, navigate to Computer Configuration > Policies > Administrative Templates > KnowBe4 > GPAB.

2. Select “Config”.
   1. Select "Enabled".
   2. Enter your Phish Alert Key, which can be found in your KnowBe4 Account Settings.
   3. Select US or EU Server, depending on where you KnowBe4 account is located.
      1. EU = eu.knowbe4.com
      2. US = training.knowbe4.com
   4. Click "Apply".

Visit our User Experience section to see how the GPAB will display and function for your users after installation.

References

• Deploying Chrome Extension Using Group Policy 
• Deploying Custom Registry Changes Through Group Policy
• Phish Alert Installation Guide
• Phish Alert Videos
• How Do I Use the Phish Alert Button?