DTBC-0060 - Chrome Cleanup must be disabled.

Information

If set to 'False', prevents Chrome Cleanup from scanning the system for unwanted software and performing cleanups. Manually triggering Chrome Cleanup from chrome://settings/cleanup is disabled.
If set to 'True' or unset, Chrome Cleanup periodically scans the system for unwanted software and should any be found, will ask the user if they wish to remove it. Manually triggering Chrome Cleanup from chrome://settings is enabled.
This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain.

Solution

Windows group policy:
1. Open the 'group policy editor' tool with gpedit.msc
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome
Policy Name: Enables Chrome Cleanup on Windows
Policy State: Disabled
Policy Value: N/A

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Chrome_V2R6_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12a., CAT|II, CCI|CCI-000169, Rule-ID|SV-221592r615937_rule, STIG-ID|DTBC-0060, STIG-Legacy|SV-96305, STIG-Legacy|V-81591, Vuln-ID|V-221592

Plugin: Windows

Control ID: 3e1774f4d3b30f1f8d7a915f0c24b7e029bb12987d224ba930dc215a5d5c2268