How to block and uninstall Chrome Apps?

Question

Hi,

Just need your help please. We have a few users who has downloaded the Youtube App from Chrome. It can be downloaded by going to Youtube.com using chrome and clicking on this icon located on the top right corner.

It can be installed without admin permissions and we want to uninstall this and hopefully block users from installing this.

I have tried the following so far:

1. using the uninstall string however this asks for the user's permission whether they want to "remove" or "cancel" it.

Uninstall string: "C:\Program Files\Google\Chrome\Application\chrome.exe" --profile-directory=Default --uninstall-app-id=agimnkijcaahngcdmfeangaknmldooml

This is located in HCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\75d6065a2255cf71e6e9cdde214f046

If i can deploy this via SCCM that would be great. Unfortunately it prompts the user to remove it or cancel.

I have used the following switches but nothing works: --quiet, --q, --silent, --s, --force-uninstall, --qb

2. I have tried to use this GPO called Configure extension installation blocklist. Enabled this and added the youtube app-id and the extension id i found in google.

Agimnkijcaahngcdmfeangaknmldooml

 

blpcfgokakmgnkcojhhkbfbldkacnbeo

Any other ideas or suggestions you can recommend? i can confirm i dont have any other conflicting gpos here.

thanks.

regards,

C

Answer 1

To uninstall the YouTube app installed via Chrome as a Progressive Web App (PWA), you need to use a combination of Group Policy Object (GPO) settings and PowerShell scripts to remove the app without prompting the user. Since the typical uninstall method you're using prompts the user, consider alternative approaches.

Here's a comprehensive approach to address the issue:

1. Disable PWA Installation with GPO

To prevent users from installing Progressive Web Apps (PWAs) from Chrome, you can use Group Policy. This setting prevents users from installing PWAs, which should help prevent further installations.

Configure GPO to Block Installation:

Open the Group Policy Management Console (gpmc.msc).

Navigate to the desired policy location (e.g., Computer Configuration > Administrative Templates > Google > Google Chrome).

Locate and enable the "Block access to a list of URLs" policy.

Add the following patterns to block installation from YouTube:

https://.youtube.com/

https://*.youtube.com/

This setting should prevent new installations from Chrome-based YouTube links or PWAs.

2. Uninstall YouTube PWA with PowerShell

To uninstall the YouTube PWA without user interaction, you can write a PowerShell script and deploy it via SCCM (System Center Configuration Manager). Use PowerShell to remove the application and ensure that user prompts are suppressed.

PowerShell Script for Uninstallation:

#Get the uninstall command from the registry

$uninstallPath = (Get-ItemProperty "HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\75d6065a2255cf71e6e9cdde214f046").UninstallString

#Execute the uninstall command with no user interaction

Start-Process -FilePath $uninstallPath -ArgumentList '--force-uninstall', '--silent', '--no-prompt' -NoNewWindow -Wait

Deploy this PowerShell script through SCCM to remove the YouTube PWA without user interaction. Be sure to test this script in a safe environment before widespread deployment.

3. Check GPO for Extensions and PWAs

Verify Existing GPOs:

In Group Policy Management Console, check for GPOs related to Chrome extension management.

Look for policies that allow certain extensions or PWAs, and ensure there are no exceptions allowing YouTube or similar apps.

Configure GPO to Block Extensions:

You mentioned configuring "Configure extension installation blocklist." This should work, but make sure you've enabled the policy and added the correct app IDs. Recheck the IDs for the YouTube app:

agimnkijcaahngcdmfeangaknmldooml

blpcfgokakmgnkcojhhkbfbldkacnbeo

4. Use Third-Party Software Management

If these methods do not work, consider using third-party software management tools like Chocolatey or SCCM to forcibly uninstall specific applications and prevent future installations.

These steps should help you uninstall the YouTube PWA without user interaction and prevent further installations by restricting access to PWAs and extensions in Chrome through Group Policy.

Answer 2

Hi Christian Africa,

Thanks for your post. From your description, I understand that you would like to forbidden user to download apps from Chrome. Please understand that Chrome is a third-party software, you can contact the Chrome support for any related issue.

Support Channel: Google Chrome Help

Also, based on my research, it can bypass the administrator rights because Chrome itself can be installed bypass the administrator rights. Therefore, based on the test results, the system Settings do not prevent standard users from installing these applications, because these installers have bypassed administrator privileges. It is highly recommended to use the Microsoft Edge browser and as an enterprise, it is necessary to deploy some monitoring in staff’s PCs to scan such risk in time.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.