[Desktop] Group policy - Brave specific settings

brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.

https://brave.com

Mozilla Public License 2.0

17.02k stars 2.22k forks source link

[Desktop] Group policy - Brave specific settings #9458

Open bsclifton opened 4 years ago

bsclifton commented 4 years ago

Description

The group policy supported by Chrome / Chromium are supported by Brave. For more info about that, you can see https://support.brave.com/hc/en-us/articles/360039248271-Group-Policy

However there are some Brave specific settings, such as TorDisabled.

Users have requested other Brave specific settings and this issue can track them 😄

bsclifton commented 4 years ago

Requested:

setting for the " Show autocomplete in address bar " Brave parameter
setting for the " Automatically send completely private product analytics to Brave " Brave parameter.

Source: https://community.brave.com/t/setting-autocomplete-in-address-bar-and-private-product-analytics-throught-registry-keys/120887

bsclifton commented 4 years ago

Very cool 😄 @Prowler2 shared this first attempt at Brave GPO templates: https://github.com/Prowler2/Brave-Browser-GPO-Policy

We will be working on these too, hopefully soon. But great there is something available for folks now 😄

r3pek commented 4 years ago

Just a couple more:

Brave Shields (and its suboptions)
Brave Shields WhiteList
Show Wayback Machine prompt on 404 pages
Extensions (WebTorrent and Hangouts for example)
Enable/Disable CryptoWallets
Send a "Do Not Track" request

Prowler2 commented 4 years ago

@bsclifton, if you add any of these GPO requests let me know. I will be updating the templates to the latest version this weekend.

Prowler2 commented 3 years ago

@bsclifton, the Brave admx templates have been updated to v87.0.4280.88 using the latest available source Chromium policy templates. I wrote a PowerShell script to download and and extract the Chromium templates. The script will then parse, modify and save the Brave specific versions. These now only take a few minutes to generate for testing. https://github.com/Prowler2/Brave-Browser-GPO-Policy

Meth0d007 commented 3 years ago

So aparently there is nothing going on here, are there any (undocumented) registry keys fo the brave specific settings?

We would like to rollout Brave in our company but frankly to fiddle around in the "Preferences" file just to disable some stuff you dont want in an enterprise environment will just not do.

Having a copy of the chromium GPO is nice and all but all of that could be changed via registry, i really dont understand why there is nothing for the brave specific settings.

EHRETic commented 3 years ago

So aparently there is nothing going on here, are there any (undocumented) registry keys fo the brave specific settings?

I came here yesterday for the first time! 😄 I'm testing an hardened Brave browser since yesterday. Hardening is made with a manual copy of Chrome CIS settings, based on @Prowler2 GPO templates.

It seems to be fine, but I've noticed I miss the GPO setting for "Automatically send completely private product analytics to Brave This anonymous info only lets Brave estimate the overall usage of certain features."

Maybe I didn't see it but if not, this would be one to cover! 😉

bsclifton commented 2 years ago

Per https://github.com/brave/brave-browser/issues/14496 it would be good to have a group policy setting for this setting:

DPBattaglia commented 2 weeks ago

@EHRETic did you ever get to the bottom of a hardened template/baseline for Brave Browser based off the CIS benchmarks for Chrome? And what has been your method to deploy it?