How to Disable Chrome Guest Mode via Group Policy

Chrome guest mode provides a browsing option that keeps user data separate from their regular profile. While useful for temporary browsing on personal devices, many organizations need to disable this feature for security and compliance reasons. This guide explains how to disable Chrome guest mode using group policy, with practical examples for Windows, macOS, and Linux environments.

Understanding Chrome Guest Mode

Guest mode in Chrome creates a temporary profile that disappears when all guest windows close. This profile does not access the user’s bookmarks, history, passwords, or other personal data. However, in enterprise environments, this feature can bypass security controls and create blind spots in compliance logging.

Group policy provides centralized management for Chrome across organization devices. By configuring the appropriate policies, administrators can remove the guest mode option entirely from the Chrome interface.

Group Policy Prerequisites

Before configuring group policy, ensure you have the necessary tools installed:

Windows: Group Policy Management Console (built into Windows Pro/Enterprise)
macOS: Apple Remote Desktop or configuration profiles
Linux: Chrome Browser Cloud Management or local policy files

You also need the Chrome Browser Enterprise bundle, which includes the administrative templates (ADMX files) for group policy configuration.

Configuring Guest Mode Disablement on Windows

Step 1: Install Administrative Templates

Download the Chrome Browser Enterprise installer from Google’s official support site. Run the installer and ensure the group policy templates are installed to the default location: C:\Windows\SysWOW64\GroupPolicy.

Step 2: Open Group Policy Editor

Press Win + R, type gpedit.msc, and press Enter. Navigate to:

Computer Configuration > Administrative Templates > Google Chrome

Step 3: Configure the Guest Mode Policy

Find and enable the policy named “Enable guest mode” (or “Enable Guest Browsing” in newer versions). Set it to Disabled.

This policy configuration appears under:

Google Chrome > Browser mode > Enable guest mode

After enabling this policy, restart Chrome or wait for group policy to refresh. The guest mode option disappears from the Chrome profile switcher.

Verification Command

You can verify the policy application using Chrome’s policy diagnostics:

# Check applied policies in Chrome
Start-Process "chrome://policy" -WindowStyle Normal

Look for the “GuestMode” policy listed in the active policies table.

Configuring Guest Mode Disablement on macOS

macOS does not use traditional group policy, but you can achieve the same result through configuration profiles or MDM (Mobile Device Management) solutions.

Using Configuration Profile (plist)

Create a configuration profile with the following payload:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDisplayName</key>
            <string>Chrome Settings</string>
            <key>PayloadType</key>
            <string>com.google.Chrome</string>
            <key>PayloadUUID</key>
            <string>YOUR-UUID-HERE</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>Name</key>
            <string>Chrome Settings</string>
            <key>GuestModeEnabled</key>
            <false/>
        </dict>
    </array>
</dict>
</plist>

Save this as chrome_guest_disable.mobileconfig and install it using:

sudo profiles install -type=configuration -path=chrome_guest_disable.mobileconfig

Configuring Guest Mode Disablement on Linux

Linux systems using Chrome require JSON policy files placed in specific directories.

JSON Policy File Method

Create a JSON file at /etc/opt/chrome/policies/managed/guest_mode.json:

{
  "GuestModeEnabled": false
}

For per-user policies, place the file in the user’s Chrome policies directory:

mkdir -p ~/.config/google-chrome/policies/managed
echo '{"GuestModeEnabled": false}' > ~/.config/google-chrome/policies/managed/guest_mode.json

Verifying Linux Configuration

Check that Chrome recognizes the policy:

google-chrome --show-policy-menu

This opens Chrome’s internal policy viewer. Confirm that “GuestModeEnabled” appears with a value of false.

Managing Multiple Devices with Chrome Browser Cloud Management

For organizations with devices across platforms, Chrome Browser Cloud Management provides a unified interface for policy deployment.

Setting Up Cloud Management

Sign up for Chrome Browser Cloud Management through the Google Admin console
Enroll your Chrome Browser instances
Create a browser configuration with the guest mode setting disabled

The cloud management console allows you to target specific organizational units and apply policies with rollback capabilities.

Troubleshooting Common Issues

Policy Not Applying

If policies fail to apply, check these common causes:

Cache interference: Clear the Chrome policy cache by visiting chrome://policy and clicking “Reload policies”
Conflicting policies: Verify no other policy overrides your guest mode setting
Template issues: Ensure you use the correct ADMX files for your Chrome version

Testing Before Deployment

Always test policy changes in a controlled environment:

# Force immediate policy refresh on Windows
gpupdate /force

For non-domain computers, use the Chrome policy test extension or local policy files.

Removing Guest Mode Access Completely

Beyond group policy, consider these additional hardening measures:

Disable Chrome flags: Use group policy to prevent users from enabling experimental features
Restrict profile creation: Limit users to managed profiles only
Network-level controls: Block access to Chrome’s profile switching URLs

Summary

Disabling Chrome guest mode via group policy requires understanding your platform’s policy mechanisms. Windows environments use the traditional Group Policy Editor with ADMX templates. macOS relies on configuration profiles, while Linux uses JSON policy files. Regardless of platform, the core setting remains consistent: set GuestModeEnabled to false.

For mixed environments, Chrome Browser Cloud Management provides the most comprehensive solution. Remember to test policies thoroughly before broad deployment and document your configuration for audit purposes.

By controlling guest mode, organizations maintain better security posture and ensure all browser activity traces to identifiable user profiles.

Built by theluckystrike — More at zovo.one