Why You Should Never Use the Chrome MSI to Disable Auto Updates
disable chrome msi auto update
The MSI can be Exploited by Attackers
The Chrome MSI, which is designed for enterprise installations, enables administrators to disable auto-updates of Chrome as well as enable or disable specific plugins. Unfortunately, this tool can also be used by attackers in order to prevent security updates from being applied in an organization's environment.
This can happen if the administrator installs an older version of Chrome and disables auto-update while a newer version is available on the web store. The attacker could then exploit the vulnerability using these old versions of Chrome and install malicious software. To avoid this issue, organizations should use Google's G Suite (or similar) instead of their own software installation tools.
# A Step-by-Step Guide to Starting a Business
# Why You Should Never Use the Chrome MSI
There are Better Ways to Disable Auto Updates
You might think that Chrome's MSI would be a good way to disable auto updates. It isn't. The Chrome MSI is designed for deployment and has no options for disabling auto updates. Here's why you should never use it:
1. In order to prevent an installation error, when you install the Chrome MSI it must download and install the latest version of Chrome. This means that if you want to keep your version of Chrome on a specific version, then you need to do so before installing the installer package (which will update).
2. If you ever have any issues with the version you're using now, the one on which you are currently pinned will be overwritten by the newer version when it updates automatically. If this happens to you, then manually removing older versions from C:\Program Files\Google\Chrome\Application can help get things back in order again; but remember that this is something only experienced users should try.
3. Deleting GoogleSoftwareUpdate3xl-chrome_updater-0.1-alt1_amd64*.exe files or updating via the About Google Chrome menu won't help because they're installed separately in another location - C:\Program Files (x86)\Google\Update\Installer\.
4. Using Windows' built-in Group Policy Editor to set policies like UpdateExeDblClick disabled or UpdateExeWarningOnExecution disabled won't work either because there are no such settings available.
5. There's also the issue of 64bit vs 32bit architecture support - while both Windows 7 x64 and Windows 8 x64 allow you to set policies like UpdateExeDblClick disabled, there is not a single policy in place for Window XP/Vista/8 x86!
Read more info "Why You Should Never Use the Chrome MSI to Disable Auto Updates" on the next page :
Editor :Techno Guide