Posts made by LJ

@LJ Oops. left out something. thanks coliver.

@DustinB3403 Thanks. I have never used chocolatey but I guess I need to learn.

@notverypunny I would love Firefox because many patrons ask for it but in the past I was unable to get it to update automatically. Has that changed or do you know a work around?

Thanks to everyone who helped me. I believe my problem is solved now. Here is a little re-cap and some random ideas.
I jumped to conclusions late in the day when confronted with a problem. I now believe that the problem with the two PCs was that the Chrome.adm template was not applied or misconfigured or something. Since I copied the contents of Windows/System32/grouppolicy and Windows/System32/grouppolicyusers from another machine I will never know for sure. The other 18 public computers have no Chrome browser problems that I can find.
I still think its possible that enterprise policies might override local group policy or registry settings but I don’t think that is what happened here. Probably like active directory in the sense that unless it is configured at the higher level it probably doesn’t affect the local level.
The contributors here have given me several new ideas to try. I am continuously trying to improve my public computer configuration.
I learned a lot from this thread and am truly thankful for all the help. This is an awesome forum!

I just tried setting the setting "restrict which users are allow to sign in to Google Chrome" to enabled and used*.@nologin as the allowed user.
I was still able to login from the restricted user. For this setting should you leave it blank for users or what? thanks.

@Dashrender I am wrong . The setting isn't in place. the setting to clear contents etc on exit is in place and that must be what logged him out when he closed Chrome.
I'll go install that setting on some right now.

@Dashrender I don't know darn it. I went back out there and he was getting in a car. Maybe some more students will come in. I wish I had had him try to install extensions while he was logged in.
I create an MMC for computer policy and non admin users then log in and out to create these folders

After that I paste into the contents of the GP and GP users folders from an already configured computer. I may have just missed a couple when I was updating my policies. I hope that is all it is.

@LJ That setting was in place already. I had a student who was using Google classroom on IE open Chrome, and login to his school email and Google Classroom. Then I had him close the browser without logging out. When he re-opened Chrome he was not logged in on either.
I either have a couple of computers not configured correctly or it may be that once logged in he could have had it remember his account and password and install extensions etc. He was heavily involved in school work but I told him to find me when he was though if his ride wasn't here. More info later.

@Dashrender I just booted up another public computer and found that setting. I will try to get to a public PC and set that and see find a student to try it.

@Dashrender Do you think this prevents them from signing into Chrome while still allowing them to sign in to the Gsuite and email?

I have been out in the public area for a while. No students are signed into school work- they are all playing. When it calms down I will pick one and ask them how they go about finding their assignments and doing their work on our computers. I will report back later today or tomorrow.

Tomorrow I will see if I find a PC with extra extensions, not logged out etc and remove the group policy restrictions and then log back in to the restricted user and see if the chrome settings have been changed. that is what I think might be happening.

@LJ Chrome extensions haven't been a problem either until students started started logging into their School managed gmail and google apps.

@jmoore I am open to any suggestions. I have locked them down a good bit. There are a lot of group policy restrictions and also file permissions. No right click on the desktop or within file explorer. No command prompt. No run. Nothing on start or desktop except Office applications, browsers etc. Additional path rules in group policy.
I don't really get anything installed in Windows it is Chrome extensions that are the problem.

I just realized that I did not personally reboot yesterday. I took the word of a fairly competent staff person but they do sometimes get confused while multi-tasking.
I am hopeful that today after closing I can check some computers and find that rebooting or even signing out of google then logging off and back in will work. I didn't get to check this yesterday.

For now I am about to put the PC that I have been working on earlier back into public service before the school crowd gets here. Maybe some of the changes I made will work but I don't really have my hopes up.
I'll be away from this discussion for a few minutes.

@DustinB3403 Thanks again. I need to expand my abilities. If more than ten PCs backup from the same workstation will that violate Windows licensing? It might be better for me to try to get it going on a linux box.

@scottalanmiller I like the frozen concept. If you read above I used it until the hard drives started filling up.
I have been lucky so far as far as viruses through lots of restrictions including additional path rules that block executables from running in any location the restricted user has access to.

@DustinB3403 OK. Sounds good. I will look into it

@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?