🎯 Purpose
✅ Make sure Google Chrome updates are applied within 48 hours, meeting Essential Eight – Patch Applications (Maturity Level 3).
➡️ A copy of E8-PatchApps-Google Chrome Updates with a shorter relaunch deadline. The M1/M2 policy is unchanged.
👥 Who is affected
✅ Devices: All Windows devices with Google Chrome installed (Maturity Level 3 tenants)
🚫 Exclusions: None
☁️ What is protected
✅ Application: Google Chrome
✅ Type: Settings catalog
🔐 How updates are enforced
Setting | Value |
Google Update › Update policy override default | Enabled – Always allow updates (recommended) |
Google Update › Auto‑update check period override | Enabled – 240 minutes (every 4 hours) |
Chrome › Notify a user that a browser relaunch or device restart is recommended or required | Enabled – Relaunch required (recurring prompt) |
Chrome › Set the time period for update notifications | Enabled – 172800000 ms (48 hours) |
➡️ Chrome is forced to relaunch within 48 hours of an update being downloaded.
⚙️ What this policy does NOT enforce
🚫 Chrome hardening settings (see E8‑User Application Hardening – Chrome)
🚫 Version pinning or rollback
🟢 Policy status
✅ Enabled
✅ Assigned to all devices
ℹ️ Note: Unassign E8-PatchApps-Google Chrome Updates from devices that receive this policy. Both set the update notification period to different values, which causes an Intune conflict.
📘 Essential Eight Alignment
✅ Patches for web browsers are applied within 48 hours when a working exploit exists (ISM‑1692)
ℹ️ Applies to Maturity Level 3
📘 Practical Interpretation (Executive‑Friendly)
This policy ensures that:
✅ Critical Chrome security fixes are running on every device within two days
This meets the fastest patching timeframe in the Essential Eight.