Skip to main content

Oloid Vault (Chrome / Chromium) - How to Deploy Oloid Vault Using Group Policy Object (GPO) at Machine Scope

This document provides step by step instructions to deploy Oloid Vault (Chrome / Chromium) using Group Policy Object (GPO) at Machine Scope.

Introduction

This article describes how to deploy Oloid Vault to Windows computers using a Group Policy Object (GPO) at the machine scope. The deployment uses the Oloid Vault Administrative Template (ADMX/ADML) to centrally configure and enforce Oloid Vault browser extension settings for Google Chrome and Microsoft Edge.

Prerequisites

  • Group Policy Management Console (GPMC) is installed and accessible.

  • The domain Central Store (PolicyDefinitions) is available for deploying the Oloid Vault ADMX and ADML templates.

  • The OloidVault.admx and OloidVault.adml template files are available.

  • Google Chrome, Microsoft Edge, or both are installed on the target computers, depending on your deployment requirements.

  • You have access to the Tenant Admin Portal to generate the Auto-Pair configuration. To generate the Auto-Pair config. file, refer Oloid Vault (Chrome / Chromium)- How to Generate and Download Auto-Pair Config File in the Tenant Admin Portal | Oloid Help Center.

  • The Auto-Pair Configuration base64 string is available if devices need to pair automatically with the Oloid tenant.

Steps to Deploy Oloid Vault via GPO

Stage the Oloid Vault Template

Create the GPO

Configure Oloid Vault Policy Settings

Scope the GPO

Verify Delegation and Select GPO Status

Apply and Verify the Policy

Stage the Oloid Vault Template

Before configuring the Oloid Vault GPO settings, add the Oloid Vault Administrative Template files to the domain Central Store. This makes the Oloid Vault policy settings available in the Group Policy Management Editor.

Copy OloidVault.admx to the domain Central Store under PolicyDefinitions, and copy OloidVault.adml to the en-US folder under PolicyDefinitions. Ensure the final folder structure is as follows:

PolicyDefinitions\
├── OloidVault.admx
└── en-US\
└── OloidVault.adml

Create the GPO

This section describes how to create a new Group Policy Object (GPO) in the target domain for configuring and deploying the Oloid Vault policy settings.

To create the GPO, do the following:

  1. In GPMC, expand Forest > Domains > preferred Domain.

    Note: If multiple domains are available, expand the domain where you want to deploy Oloid Vault.

  2. Right click on the Group Policy Objects > click New.

    The New GPO pop-up box is displayed.

  3. Do the following:

    1. Enter the Policy Name.

    2. Ensure (none) is selected as Source Starter GPO.

    3. Click OK.

      The Group Policy Object is created successfully.

Configure Oloid Vault Policy Settings

This section describes how to configure the Oloid Vault policy settings in the Group Policy Management Editor, including the Auto-Pair Configuration and Extension settings for Google Chrome and Microsoft Edge.

To configure the Oloid Vault policy, do the following:

  1. In GPMC, right click on the newly added Group Policy Object (GPO) > select Edit.

    The Group Policy Management Editor screen is displayed.

  2. Double click on Computer Configuration.

    The Computer Configuration screen is displayed.

  3. Double click on Policies.

    The Policies screen is displayed.

  4. Double click on Administrative Templates.

    The Administrative Templates screen is displayed.

  5. Click Oloid Vault.

    The Oloid Vault screen is displayed.

  6. Configure the following browser:

    1. Google Chrome

    2. Microsoft Edge

      Note: You can configure either any or both the browser as per the requirement.

Configure Google Chrome

  1. To configure google chrome, click on Google Chrome.

    The Google chrome description page is displayed.

  2. Click Auto-Pair Configuration.

    The AutoPair Configuration screen is displayed.

  3. Do the following:

    1. Select Enabled.

    2. Enter the AutoPair Configuration text in the Configuration (base64).

      Note: Generate the Auto-Pair configuration from the Oloid Tenant Admin Portal. For instructions, refer to Oloid Vault (Chrome / Chromium)- How to Generate and Download Auto-Pair Config File in the Tenant Admin Portal | Oloid Help Center. Click Copy Config Text to copy the configuration directly or download the configuration file in TEXT format and copy its contents.

    3. Click Apply.

      Note: Use the Apply button to verify that the entered Auto-Pair configuration is valid.

    4. Click OK.

      The AutoPair Configuration is setup successfully.

  4. Double click on Extension.

    The Extension screen is displayed.

  5. Do the following:

    1. Select Enabled.

    2. Click Apply (Optional).

    3. Click OK.

    The Extension is configured successfully.

  6. Close the Group Policy editor after applying the settings.

    Note:

    • If AutoPair Configuration is left unconfigured, the extension is still installed, but each user must pair to the tenant manually.

    • To configure Microsoft Edge, follow the same steps under the Microsoft Edge policy settings.

Link the GPO

  1. Go back to the GPO, right click Domains > Select Link an Existing GPO.

    The Select GPO screen is displayed.

  2. Select the preferred GPO > click OK.

    The GPO is linked successfully.

  3. Double click on the newly added Group Policy Object.

    The Group Policy Object scope page is displayed.

  4. Ensure the following:

    1. The Enforced is No.

    2. The Link Enabled is Yes.

    Note: The source deployment procedure identifies a computer OU, the domain root, or the Domain Controllers OU as possible link targets. Select the target appropriate to your deployment.

Scope the GPO

This section describes how to scope the Oloid Vault GPO to ensure that the policy is applied only to the required computers or groups.

Configure Security Filtering

This section describes how to configure Security Filtering for the Oloid Vault GPO by adding the required computer, user, or security group to control which objects receive the policy.

To configure the Security Filtering, do the following:

  1. Click the preferred GPO in GPMC.

    The GPO scope page is displayed.

  2. Go to Security Filtering section > click Add.

    The Select User, Computer, or Group pop-up box is displayed.

  3. Do the following:

    1. Enter the object name in the object field.

    2. Click Check Names (Optional).

    3. Click OK.

      The Groups or users has been added successfully.

Verify Delegation and Select GPO Status

This section describes how to verify the delegation permissions for the computer group and configure the GPO status to apply only the required computer configuration settings.

To verify the Delegation, do the following:

  1. Click Delegation tab.

  2. Ensure that the computer group has Read and Apply group policy permissions.

  3. Go back to Details tab and select the GPO status as User configuration settings disabled.

Apply and Verify the Policy (Optional)

Important: Computer accounts obtain group membership at startup. If you added computer accounts to the security group, restart the machine before the GPO is retrieved.

  1. On the client, run the following command: gpupdate /force

  2. Restart the machine and ensure that the browser is fully closed and that no residual browser processes remain in Task Manager before reopening it.

Verify the GPO on the Client

  1. From an elevated Command Prompt, run: gpresult /r /scope computer

  2. Under COMPUTER SETTINGS, confirm that Oloid-Vault-Machine appears under Applied Group Policy Objects.

  3. Confirm that the GPO is not listed as filtered out and that Computer Security Group Membership includes the group used for Security Filtering.

Verify the Registry and Browser Policy

  1. Use PowerShell to verify that browser policy values are present:

    1. Get-ItemProperty "HKLM:\Software\Policies\Google\Chrome"

    2. Get-ItemProperty "HKLM:\Software\Policies\Microsoft\Edge"

  2. For Chrome, confirm that the AutoPair value is present at the extension policy path:

    Get-ItemProperty "HKLM:\Software\Policies\Google\Chrome\3rdparty\extensions\peeofnhcbenipokkdfpiocdbbapphnje\policy"

  3. Open chrome://policy or edge://policy and select Reload policies.

  4. Confirm that Status is OK and Scope is Machine.

  5. Confirm that the Oloid Vault extension is installed and pinned to the toolbar, cannot be removed by the user, and is paired with the correct tenant.

Keywords

| Oloid Vault GPO deployment | Group Policy Object | GPO Machine Scope | Group Policy Management Console |

Related Articles
Did this answer your question?