Chrome browser version 74 and later.
For administrators who manage Chrome browser on Windows for a business or school.
You can use the Google Admin Console or the Group Policy Management Editor to control integrated Legacy Browser Support (LBS) on managed Microsoft Windows computers.
Step 1: Add the Chrome browser policy template (Group Policy only)
You can use Group Policy to control LBS policies that are included in the chrome.admx file. When you load the file, each policy is active with a setting that can be modified at any time.
To add the policy template:
- Open the downloaded Chrome browser bundle and go to Configuration
admx.
- Copy the
google.admx
andchrome.admx
files to your Policy Definition template folder. (Example:C:\Windows\PolicyDefinitions
) - In the admx folder, open the appropriate language folder.
For example, if you’re in the U.S., open the en-US folder. - Copy the
google.adml
andchrome.adml
files to the matching language folder in your Policy Definition folder. (Example:C:\Windows\PolicyDefinitions\en-US
) - Open Group Policy to confirm the files loaded correctly.
If an error occurs, it’s usually because the files are in an incorrect location. - Check the locations and confirm again.
Step 2: Review policies
Expand to see the full set of policies and descriptions.
Full set of policies and descriptions
Policy | Description and settings |
---|---|
Specifies the parameters to be passed to the alternative browser’s executable. If this policy is turned on, the provided parameters are used when the alternative browser is invoked. You can use the special placeholder You don't have to specify the placeholder if it's the only argument or if it should be appended to the end of the command line. Unset: Only the URL is passed as a parameter to the alternative browser. |
|
Specifies the program to be used as an alternative browser. You can specify a file location or use one of these variables:
Unset: The default alternative browser is Internet Explorer, |
|
BrowserSwitcherChromeParameters | Specifies the parameters to be passed to Chrome browser’s executable. If this policy is turned on, the provided parameters are used when Chrome is invoked.
You can use the special placeholder You don't have to specify the placeholder if it's the only argument or if it should be appended to the end of the command line. Unset: Only the URL is passed as a parameter to Chrome browser when returning from the alternative browser. |
BrowserSwitcherChromePath |
Specifies the executable of Chrome browser to be launched when returning from the alternative browser. You can specify a file location or use the variable Unset: The default installation of Chrome browser, |
Specifies the length of time, in milliseconds, that it takes to open the alternative browser. During this time, users see an interstitial page that lets them know they're switching to another browser. If there are issues, users see an error message on the page. Unset: The URL immediately opens in the alternative browser without showing the interstitial page. |
|
Enables the Legacy Browser Support feature. If this policy is turned on, users can open some URLs in an alternative browser, such as Internet Explorer. If this policy is turned on, you must configure at least one of these policies: Unset: Chrome browser will not open URLs in an alternative browser. |
|
BrowserSwitcherExternalGreylistUrl |
Specifies the URL of the XML file that contains the list of URLs that do not trigger a browser switch. Unset: Chrome browser doesn’t use an XML file to control which URLs do not trigger a browser switch. |
Specifies the URL of the XML file that contains the list of URLs that open in an alternative browser. You can review this sample XML file. Unset: Chrome browser doesn’t use an XML file to control whether URLs open in an alternative browser. |
|
Specifies whether to close Chrome browser after the last tab in the window switches to the alternative browser. Chrome browser tabs automatically close after switching to the alternative browser. If this policy is turned off and the last tab is open in the window before switching, Chrome browser closes completely. Unset: After switching to the alternative browser, at least one tab stays open in Chrome browser. |
|
Controls how Chrome browser interprets the LBS sitelist and greylist policies that you set:
If this policy is turned on, URL matching is more strict. Rules that do not contain / only match at the end of the hostname. They must also be at a domain name boundary. Matching the path component of a URL is not case-sensitive. This makes URL matching more compatible with Internet Explorer and Edge. Unset: URL matching is less strict. |
|
Specifies a list of website URLs that open in Chrome browser or an alternative browser and do not trigger a browser switch. Unset: URLs open in Chrome browser, unless specified in BrowserSwitcherExternalSitelistUrl, BrowserSwitcherUrlList , or BrowserSwitcherUseIeSitelist. |
|
BrowserSwitcherUrlList |
Specifies a list of website URLs that open in an alternative browser. Unset: No URLs are listed in the Chrome policy. |
BrowserSwitcherUseIeSitelist |
Use your Internet Explorer site list to control whether URLs open in Chrome browser or Internet Explorer. Unset: Chrome doesn’t use the Internet Explorer site list. |
Step 3: Configure LBS
Click below for the steps, based on how you want to manage these policies.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Chrome
Settings. The User & browser settings page opens by default.
If you signed up for Chrome Browser Cloud Management, go to Menu
Chrome browser
Settings.
-
(Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how
Group settings override organizational units. Learn more
-
Go to Legacy Browser Support.
-
To open URLs in an alternative browser, such as Microsoft Internet Explorer:
-
Click Legacy Browser Support.
-
Select Enable Legacy Browser Support.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
-
(Optional) To open specific URLs in an alternative browser:
-
Click Websites to open in alternative browser.
-
Enter the URLs of pages to open in an alternative browser.
-
Click Save.
-
-
(Optional) To use your Internet Explorer site list to specify which URLs open in Internet Explorer:
-
Click Use Internet Explorer site list.
-
Select Use Internet Explorer’s Sitelist policy as a source or rules.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
-
(Optional) To use an XML file to specify which URLs open in an alternative browser:
-
Click Legacy Browser Support site list.
-
Enter the URL of the XML file.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
Applies to Windows users who sign in to a managed account on Chrome browser.
- Open Group Policy and go to Administrative Templates
Google
Google Chrome.
- Turn on Enable the Legacy Browser Support feature.
- (Optional) To open specific URLs in an alternative browser:
- Turn on Websites to open in alternative browser.
- Under Options, specify the URLs of pages to open in an alternative browser.
- (Optional) To use your Internet Explorer site list to specify which URLs open in Internet Explorer, enable Use Internet Explorer's SiteList policy for Legacy Browser Support.
- (Optional) To use an XML file to specify which URLs open in an alternative browser:
- Enable URL of an XML file that contains URLs to load in an alternative browser.
- Under Options, specify the URL of the XML file.
Step 4: (Recommended) Enable Browser Helper Object
The first time that LBS switches browser and opens a URL from Internet Explorer back to Chrome browser again, users are prompted to enable the Browser Helper Object (BHO). As an admin, you can use Group Policy to automatically enable BHO so that users don’t have to manually enable it.
Applies to Windows users who sign in to a managed account on Chrome browser.
- Open Group Policy and go to Administrative Templates
Windows Components
Internet Explorer
Security Features
Add-on Management.
- If Add-on List isn’t already turned on, select Enabled.
- Under Options, click Show.
- For Value name, enter the Globally Unique Identifier (GUID), {08B5789A-BD8E-4DAE-85DF-EF792C658B86}. Include the brackets.
- For Value, enter 1. The add-on is enabled and users can’t change it.
Step 5: (Optional) Customize LBS
Click below for the steps, based on how you want to manage these policies.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Chrome
Settings. The User & browser settings page opens by default.
If you signed up for Chrome Browser Cloud Management, go to Menu
Chrome browser
Settings.
-
(Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how
Group settings override organizational units. Learn more
-
Go to Legacy Browser Support.
-
(Optional) To specify which browser to use as an alternative:
- Click Alternative browser path.
- Enter the location of the browser’s executable file. Or, use one of these variables:
${ie}
—Internet Explorer${edge}
—Edge${chrome}
—Chrome browser${firefox}
— Firefox${opera}
—Opera${safari}
—Safari
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
Click Alternative browser parameters.
-
Enter the parameters that you want to pass on to the alternative browser’s executable file.
- Click Save.
- (Optional, Windows only) Specify the Chrome browser file to use when returning from the alternative browser:
- Click Chrome path.
- Enter the location of the Chrome browser executable file. Or, use the variable
${chrome}
. -
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
- (Optional, Windows only) To pass command line arguments to Chrome browser:
-
Click Chrome parameters.
-
Enter the parameters to pass on to the Chrome browser executable file.
- Click Save.
-
- (Optional) To allow URLs to open in either browser, such as a single sign-on (SSO) page:
-
Click Websites to open in either browser.
-
Enter the URLs that can open in both browsers and don't trigger a transition.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
Click Keep last Chrome tab.
-
Select Keep at least one Chrome tab open.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
- Click URL to list of websites to open in either browser.
- Enter the URL of the XML file.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
-
Applies to Windows users who sign in to a managed account on Chrome browser.
- Open Group Policy and go to Administrative Templates
Google
Google Chrome.
- (Optional) To specify which browser to use as an alternative:
- Turn on Alternative browser to launch for configured websites.
- Choose an option:
- Under Options, specify the location of the browser’s executable file.
- Use one of these variables:
${ie}
—Internet Explorer${edge}
—Edge${chrome}
—Chrome browser${firefox}
—Firefox${opera}
—Opera${safari}
—Safari
- (Optional) To pass command line arguments to the alternative browser:
- Turn on Command-line parameters for the alternative browser.
- Under Options, specify the arguments to pass on to the alternative browser’s executable file.
- (Optional) To specify the Chrome browser file to use when returning from the alternative browser:
- Turn on Path to Chrome for switching from the alternative browser.
- Under Options, specify the location of the Chrome browser executable file. Or, use the variable
${chrome}
.
- (Optional) To pass command line arguments to Chrome browser:
- Turn on Command-line parameters for switching from the alternative browser.
- Under Options, specify the arguments to pass on to the Chrome browser executable file.
- (Optional) To allow URLs open in either browser, such as a single sign-on (SSO) page:
- Turn on Websites that should never trigger a browser switch.
- Under Options, list the URLs that can open in both browsers and don't trigger a transition.
- (Optional) To use an XML file to specify which URLs do not trigger a browser switch:
- Enable URL of an XML file that contains URLs that should never trigger a browser switch.
- Under Options, specify the URL of the XML file.
- (Optional) To make URL matching more strict, enable Sitelist parsing mode. Set the policy to 1=More compatible with Microsoft IE/Edge enterprise mode sitelists.
- (Optional) To prevent Microsoft Edge redirection from interfering with LBS, set the Edge policy RedirectSitesFromInternetExplorerRedirectMode to 0.
This prevents Edge from installing the IEToEdge add-on in Internet Explorer. This add-on tries to redirect the user from IE to Edge for some sites that are chosen by Microsoft. For details, see Microsoft's documentation for RedirectSitesFromInternetExplorerRedirectMode.
Step 6: Verify policies are applied
After you apply any Chrome policies, users need to restart Chrome browser for the settings to take effect. Check users’ devices to make sure the policy was applied correctly.
- On a managed device, go to chrome://policy.
- Click Reload policies.
- Check the Show policies with no value set box.
- For the policies that you set, make sure that:
- The status is set to OK.
- The policy values match what you set in the policy.
For Chrome 76 and later, you can check to see which browser opens specific URLs.
- On a managed device, go to chrome://browser-switch/internals.
- In the URL Checker box, enter the URL to see which browser opens it.
- Under Sitelist, review the list to see which URLs open in the alternative browser.
- Under Greylist, review the list to see which URLs open in either browser.
LBS Configuration Options
URL patterns described apply if BrowserSwitcherParsingMode policy is left unset or configured to 0=Default behavior for LBS.
There are three types of rules: hostname rules, prefix rules, and the wildcard rule. A rule of any type can be inverted by prepending a !.
- Hostname rules: the rule does not contain a /
- The specified string can be present anywhere in the hostname. For example, the rule acme matches http://foo.acme.com/
- Prefix rules: the rule contains a /
- These rules ignore port number. For example, the rule //example.com/ matches http://example.com:8000/
- They do not match subdomains. For example, the rule //example.com/ does not match http://foo.example.com/
- Some examples:
- http://example.com/ (only HTTP)
- //example.com/ (HTTP and HTTPS, and file://)
- example.com/ (same as //example.com/)
- example.com/something
- Wildcard rule: * (matches everything)
- * (changes the default: all URLs open in IE)
- in combination with this, you can use other rules, such as:
- *
- !google.com
- !yahoo.com
- *.example.com is NOT a valid rule, you can only use a * by itself
- Inverted rules: ! prefixed in front of a rule
- Rules in the greylist cannot be negated (only the sitelist)
- !google.com (all google.com URLs open in Chrome and NOT in the legacy browser)
- !* (everything opens up in Chrome and NOT in the legacy browser; this effectively switches off LBS)
Important: If multiple rules match the same URL, then the longest rule is used to make the decision. Longest is determined by the rule's string length. This is particularly useful for negated rules.
You can specify URL lists using an XML file, just like Enterprise Mode IE, and they can use either the v1 schema or the v2 schema.
Since Chrome 100, the BrowserSwitcherParsingMode policy affects how Google Chrome interprets an XML file.
BrowserSwitcherParsingMode policy left unset or configured to 0=Default Behavior for LBS
- In v1 sitelists, the doNotTransition attribute means:
- true: open in Google Chrome
- Anything else or unspecified: open in the alternative browser
-
In v2 sitelists, the <open-in> tag means:
- IE11: open in the alternative browser
- None: open in Google Chrome
- Unspecified: open in Google Chrome
- Anything else: open in the alternative browser
BrowserSwitcherParsingMode policy configured to 1=More compatible with Microsoft IE or Edge enterprise mode sitelists
- In v1 sitelists, the doNotTransition attribute means:
- true: open in any browser
- Anything else or unspecified: open in the alternative browser
- In v2 sitelists, the <open-in> tag means:
- IE11: open in the alternative browser
- None: open in any browser
- MSEdge: open in Google Chrome
- Chrome: open in Google Chrome
- Anything else or unspecified: open in any browser
Users can browse most of the Internet with the browser they prefer, while still opening certain URLs with the browser that you specify. Negative entries in the URL list specify the pages that open in Chrome browser. Positive entries specify the pages that open in the alternative browser.
In the example, all URLs that contain example.com open in an alternate browser and all URLs that contain google open in Chrome browser. URLs that don't contain example.com or google can open in either browser.
URLs to trigger transition:
- example.com
URLs not to trigger transition:
- *
Rules are evaluated by their order of precision. So, mail.yahoo.com will be guaranteed to be evaluated before !yahoo.com.
All URLs are subject to proper normalization. This means that domain names are lowercase, whereas paths are preserved as specified. So,EXAMPLE.COM is the same as example.com but example.com/somefile is not the same as example.com/SOMEFILE.
This means that http://www is assumed to mean http://www/ and will not match any domain starting with www. To match domains by their prefixes only, use a specification such as www.
Related topics
Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.