Tag Archives: Chrome enterprise

Delivering better government services at lower costs with Chrome

Editor’s note: Today’s post comes from Vijay Badal, Director of Application Services of DOTComm. Founded in 2003, DOTComm provides centralized IT support and consulting for 70 government agencies in the city of Omaha and Douglas County, NE. DOTComm uses Chrome browser and G Suite to improve employee productivity and mobility and cut IT costs.

At DOTComm, our employees provide technical support for more than 5,000 government workers throughout Omaha and Douglas County. Because these workers are spread across 120 different locations, our employees need access to the tools they need to do their jobs whether they’re in the office or on site with our customers. Several years ago, we realized the legacy systems we were using were getting in the way.

When employees had to travel to provide technical support for the government agencies we serve, they didn’t have mobile access to important documents, or the ability to share and send files back to the office, such as videos that outlined technical issues. In addition, hardware and licensing were costly, and inflexible productivity applications were making it difficult for employees to collaborate or work from the road. Plus, we needed half a dozen employees just to maintain our infrastructure!

To solve these challenges, we turned to Chrome and G Suite. Chrome is fast, secure and gives our staff access to thousands of useful extensions. It’s also allowed us to standardize across our desktop and mobile devices. G Suite has helped us cut hardware costs and improve collaboration and mobility. With Chrome and G Suite, we no longer pay thousands of dollars in annual licensing fees, and we’ve reduced the number of people managing infrastructure from six to one, freeing up the other five people to work on different tasks.

Chrome’s extensions have been big productivity boosters. One extension syncs the staffs’ Google calendars with their Salesforce calendars. Previously, employees had to check two separate apps and cross-reference two separate calendars. Now they only need to check one. Another extension gives staff mobile access to Google Docs and Google Sheets. This means they can work nearly anywhere. When they’re out of the office, or in the field, they can create and share files on any device they need.

As an IT department, we’re particularly pleased with the security and other IT benefits we get with Google. Chrome has built-in malware and phishing protection, and we use the G Suite admin console to ensure all user downloads are stored on the same network drive so they can be checked for malware. The G Suite admin console lets us control Chrome settings for employees, including adding extensions on whitelists so employees can use them, pushing recommended extensions to users, and rolling out Chrome updates on a scheduled timeframe. That’s made our IT administrators’ lives much easier and has been a huge timesaver. And because we centrally manage the rollout of extensions for new employees, individual city and departments no longer need to have a dedicated IT person working on new hire application orientation. So we save time and money with each new hire.

Meanwhile, the number of help tickets for IT support has plummeted, from 30 a day to one or two. For example, we no longer have to deal with local archive files, which means our staff spends less time troubleshooting and the government employees we serve don’t waste time wrestling with unfamiliar technology. Productivity has increased as well. For example, City Police, City Fire, and County Health departments all use shared Google Sheets within their individual precincts for shift change management. This allows them to roll over shift changes swiftly and efficiently, without missing any critical ongoing task assignments.

Chrome browser and G Suite have allowed us to offer more secure and productive IT services to all City of Omaha and Douglas County employees, who are then able to better serve citizens. DOTComm and the City of Omaha were recently honored as one of "Top 10 Cities" by the Center for Digital Government in its Digital Cities Survey 2016, which recognizes cities that use technology to improve citizen services, enhance transparency and encourage citizen engagement. This marked the first time the City of Omaha made the list—but I predict it won’t be the last now that we’re using Chrome browser and G Suite.

2 new white papers examine enterprise web browser security

Online security has never been more critical to businesses, and the tools used to access the web are a major factor to evaluate. Choosing an enterprise-grade web browser that offers the right security features and  keeps businesses’ data protected while enabling employees to take advantage of the open web. But knowing which browser to choose often requires a deep  understanding of security design and implementation tradeoffs that enterprise IT decision makers don’t have the time or resources to fully identify and investigate. Furthermore, well-researched, independently-verifiable data on enterprise browser security is in short supply. And in its absence, many IT administrators resort to guesswork and experimentation in their decision-making.

This complex landscape of enterprise browser security is the topic of two white papers recently published from security engineering firms X41 D-Sec GmbH and Cure53. Both firms have extensive industry experience and expertise in information security, application security, web application security and vulnerability discovery. These two papers leverage that expertise to examine the relative security strengths of the three most popular enterprise browsers: Google Chrome, Microsoft Edge, and Microsoft Internet Explorer (IE).


We sponsored this research, which was conducted independently by the research firms, to help enterprise IT administrators evaluate which browser best fits their security and functionality needs. To be most useful for enterprises and the public, Cure53 and X41 performed their research and testing using only publicly available information, and clearly documented their comparison methodologies. This enables anyone to recreate their tests, validate their methodologies, and verify their conclusions.

Although Cure53 and X41 produced these white papers in isolation from each other, both came to similar conclusions when it came to enterprise browser security. Here are their findings in a few key areas:


Phishing and malware protection is critical to staying safe on the web.

The prevalence of phishing to steal credentials and deliver malicious payloads makes protection more critical than ever. X41 found that Safe Browsing on Chrome and SmartScreen on Edge and IE offered similar protection, with Safe Browsing performing more accurately than SmartScreen in some test results.


Isolating application components through sandboxing reduces risk.

Sandboxing isolated application components from one another, and from the rest of the system, limits the potential impact of vulnerabilities. Cure53 and X41 both found that Chrome renderers have significantly less access to the operating system than Edge or IE, including revoking access to win32k system calls in Chrome renderers and plug-in processes. Cure53 and X41 also found that Chrome has more types of sandboxed processes, for finer-grained privilege separation. Edge uses out-of-process JavaScript compilation, enabling Edge content processes to drop the privilege to create executable memory.


Modern browsers that eliminate legacy functionality are more secure.

Browser Helper Objects (BHOs) and plug-ins like ActiveX have been a go-to choice for client-side attacks. Cure53 and X41 found that Chrome and Edge do not support these vulnerable technologies. IE supports both, making it more susceptible to attack than either Edge or Chrome. Additionally, Cure53 and X41 found that IE is still vulnerable to attacks via signed Java Applets, and more susceptible to malicious Flash content. While Chrome and Edge can both be configured to fall back to IE to support legacy compatibility, administrators can exert more control over Chrome’s fallback mechanism.

Web security is one of Google’s primary concerns, and has been a guiding principle for Chrome since day one. We’re pleased that these papers independently confirm significant improvements in the enterprise browser security landscape overall. We think strong security safeguards, regardless of which browser you choose, make the web better, and safer, for everyone. We hope these white papers can help you find the right solution for your business.

Take a read through the white papers linked above to learn more about their findings. If you’d like to take a deeper look at the security controls available in Chrome or download the Chrome enterprise bundle, visit the Chrome enterprise website.

Samsung Chromebook Pro brings security and versatility to businesses

With an increase in customers adopting Chrome OS in their organization, the availability of Samsung's Chromebook Pro in the U.S. market this week adds a new enterprise grade device. This premium Chromebook combines the simplicity and security of Chrome OS with flexibility and performance to be productive wherever work happens—in the office, in the field or on the go.

Samsung Chromebook Pro with pen

Versatile as a laptop or a tablet

With an Intel Core m3 processor, the performance of the Samsung Chromebook Pro enhances productivity allowing employees to run multiple applications at the same time across G Suite, Chrome, the Google Play store (in beta) or virtualization solutions from our recent announcements with VMware and Citrix.

The 360-degree folding touchscreen converts the Chromebook to a tablet experience. The built-in pen is designed for a natural drawing and writing experience enabling employees to remain productive no matter where they are. They can take notes with Google Keep or Squid, and sign digital documents with apps like DocuSign.

You can also work offline with the Samsung Chromebook Pro to create and edit documents, spreadsheets and presentations, view PDFs and other locally stored files, and even reply to emails, which are then sent automatically when the device connects to Wi-Fi again.

Security and easy device management at the core

Like all Chromebooks, the Samsung Chromebook Pro is built with security in mind, from the time employees bootup and until they shut down.

That means the Chromebook includes a tamper-proof Trusted Platform Module (TPM) and also Verified Boot feature, which helps ensure the device is running uncompromised software. Chrome OS also runs each browser tab and application in a sandboxed state to avoid malicious modification of the system software or other applications. User data is encrypted as well, helping to protect both your employee’s information as well as your company’s data. And automatic updates every six weeks help maintain the security of Chrome OS.

IT admins can easily deploy and manage this new Chromebook from a centralized management console with more than 200 device policies. That means providing employees with the apps and services they need to get work done, and even pre-configuring network connections for them.

The Samsung Chromebook Pro is available now in the U.S. for $549, with additional launch regions expected later. Learn more about the Samsung Chromebook Pro here and see how it can safely enable your business in a variety of uses or buy now through the Shop Chrome store.

Samsung Chromebook Pro brings security and versatility to businesses

With an increase in customers adopting Chrome OS in their organization, the availability of Samsung's Chromebook Pro in the U.S. market this week adds a new enterprise grade device. This premium Chromebook combines the simplicity and security of Chrome OS with flexibility and performance to be productive wherever work happens—in the office, in the field or on the go.

Samsung Chromebook Pro with pen

Versatile as a laptop or a tablet

With an Intel Core m3 processor, the performance of the Samsung Chromebook Pro enhances productivity allowing employees to run multiple applications at the same time across G Suite, Chrome, the Google Play store (in beta) or virtualization solutions from our recent announcements with VMware and Citrix.

The 360-degree folding touchscreen converts the Chromebook to a tablet experience. The built-in pen is designed for a natural drawing and writing experience enabling employees to remain productive no matter where they are. They can take notes with Google Keep or Squid, and sign digital documents with apps like DocuSign.

You can also work offline with the Samsung Chromebook Pro to create and edit documents, spreadsheets and presentations, view PDFs and other locally stored files, and even reply to emails, which are then sent automatically when the device connects to Wi-Fi again.

Security and easy device management at the core

Like all Chromebooks, the Samsung Chromebook Pro is built with security in mind, from the time employees bootup and until they shut down.

That means the Chromebook includes a tamper-proof Trusted Platform Module (TPM) and also Verified Boot feature, which helps ensure the device is running uncompromised software. Chrome OS also runs each browser tab and application in a sandboxed state to avoid malicious modification of the system software or other applications. User data is encrypted as well, helping to protect both your employee’s information as well as your company’s data. And automatic updates every six weeks help maintain the security of Chrome OS.

IT admins can easily deploy and manage this new Chromebook from a centralized management console with more than 200 device policies. That means providing employees with the apps and services they need to get work done, and even pre-configuring network connections for them.

The Samsung Chromebook Pro is available now in the U.S. for $549, with additional launch regions expected later. Learn more about the Samsung Chromebook Pro here and see how it can safely enable your business in a variety of uses or buy now through the Shop Chrome store.

How automatic Chrome OS updates bolster security with ease and simplicity

IT admins have a challenging role, charged with securing corporate assets while providing employees with tools that are fast, intuitive and accessible from anywhere. Chrome OS is designed and built with security at its core, from Trusted Platform Module (TPM) chips on all hardware, sandboxing of software, and Chrome browser security, endpoints across your organization are secure from boot to shutdown.

The multiple security layers of Chrome OS work together as part of a cohesive security approach, including automatic updates to provide protection on a recurring basis without disrupting your work. Today we’re sharing a closer look at how automatic Chrome OS software updates maintain ongoing security of the platform and devices.

Unlike most other computing platforms, Chrome OS devices always have two images of the system software on separate partitions. This approach serves two purposes. First, there’s no disruption to your work because you can keep working while the backup version is updated. Second, the next time the Chrome OS device boots, which typically takes just 6 to 10 seconds, it runs from the recently updated partition. Essentially, Chrome OS swaps between the two images. That means there’s no waiting for the updates to be applied: You can be up and running in just seconds with new software.

This not only keeps you working, but it can also reduce IT admin support costs. Instead of admins and tech support resources trying to schedule or manually push out software updates to a large number of machines, quick automatic updates happen without disruption.

Major version updates for Chrome OS are available every six weeks on average, though minor improvements are are sometimes available sooner. And important security patches can be pushed in 24 to 48 hours if required. These updates happen automatically in the background and are applied seamlessly to the backup partition. Additionally, all software updates are provided and pushed directly from Google, so there’s no third-party intermediary involved, further helping to speed the delivery of Chrome OS updates.

Chrome OS automatic updates are one of several security layers that protect your devices and data. The updates work hand in hand with the Chrome OS Verified Boot feature to ensure that the system software hasn’t been compromised; if Verified Boot detects software tampering, it forces a reboot into the backup partition of the system software.

To learn more about the benefits of automatic updates and Chrome OS security features, register and join us on June 7 for a Chrome OS Security webinar.

How automatic Chrome OS updates bolster security with ease and simplicity

IT admins have a challenging role, charged with securing corporate assets while providing employees with tools that are fast, intuitive and accessible from anywhere. Chrome OS is designed and built with security at its core, from Trusted Platform Module (TPM) chips on all hardware, sandboxing of software, and Chrome browser security, endpoints across your organization are secure from boot to shutdown.

The multiple security layers of Chrome OS work together as part of a cohesive security approach, including automatic updates to provide protection on a recurring basis without disrupting your work. Today we’re sharing a closer look at how automatic Chrome OS software updates maintain ongoing security of the platform and devices.

Unlike most other computing platforms, Chrome OS devices always have two images of the system software on separate partitions. This approach serves two purposes. First, there’s no disruption to your work because you can keep working while the backup version is updated. Second, the next time the Chrome OS device boots, which typically takes just 6 to 10 seconds, it runs from the recently updated partition. Essentially, Chrome OS swaps between the two images. That means there’s no waiting for the updates to be applied: You can be up and running in just seconds with new software.

This not only keeps you working, but it can also reduce IT admin support costs. Instead of admins and tech support resources trying to schedule or manually push out software updates to a large number of machines, quick automatic updates happen without disruption.

Major version updates for Chrome OS are available every six weeks on average, though minor improvements are are sometimes available sooner. And important security patches can be pushed in 24 to 48 hours if required. These updates happen automatically in the background and are applied seamlessly to the backup partition. Additionally, all software updates are provided and pushed directly from Google, so there’s no third-party intermediary involved, further helping to speed the delivery of Chrome OS updates.

Chrome OS automatic updates are one of several security layers that protect your devices and data. The updates work hand in hand with the Chrome OS Verified Boot feature to ensure that the system software hasn’t been compromised; if Verified Boot detects software tampering, it forces a reboot into the backup partition of the system software.

To learn more about the benefits of automatic updates and Chrome OS security features, register and join us on June 7 for a Chrome OS Security webinar.

Chrome browser in enterprise: new admin bundle and Citrix support

Thanks to its speed, security and simplicity, Chrome has become the most popular browser for using the web. But it’s not just for personal use. With more than 200 browser management policies, industry-leading security and regularly scheduled updates, Chrome is also built for enterprises.

Adoption of Chrome browser in enterprise has doubled in the last two years and we’re committed to making it even easier for IT admins to deploy and manage Chrome within their organization. Say hello to the new Chrome enterprise bundle.  

The new bundle includes multiple tools in a single download that IT admins need for a simple, managed deployment. Today we are also announcing official Citrix support with features for employees that work with legacy applications.

Citrix XenApp, Terminal Services & Windows Server on Chrome

Citrix use is nearly ubiquitous in Fortune 500 companies, and the web browser is one of the most virtualized applications. So we’re adding official support for running Citrix XenApp as well as Windows Server with Terminal services on Chrome. In Chrome 58, which we began rolling out this month, we include support for GPU acceleration within Citrix environments, roaming profiles and Windows Server auto-detection for easy configuration for IT administrators. Visit the Google Chrome team May 23-25 in Booth #404 at Citrix Synergy Orlando to learn more.

"With official Citrix support for Chrome, we've invested heavily in joint product development, engineering, sales and marketing. We are seeing the returns with continued customer success and large-scale adoption, particularly in industries such as retail and healthcare." Vipin Borkar, Director of Product Management, Citrix

Deploying and using Chrome just got easier

While the existing, standalone Chrome MSI installation package is still available for companies to download, the new Chrome enterprise bundle provides a single package for IT admins that contains the latest version of the Chrome MSI, the Chrome Legacy Browser Support (LBS) extension as well as administrative policy templates.

It’s common for enterprises to need access to legacy web applications that require older versions of IE due to the use of outdated plugins such as Silverlight and ActiveX. These requirements no longer prevent you from deploying Chrome to your organization thanks to the included Legacy Browser support (LBS) extension in the Chrome enterprise bundle.

This allows IT administrators to configure their employees’ desktops so that when someone clicks a link in Chrome that needs a legacy browser to work, the URL will seamlessly open in a legacy browser. When they're done with the legacy app and type in other URLs that are not specified by the admin, LBS will switch the user back to Chrome to ensure they remain secure.

Everything you need to securely deploy and manage Chrome

Also included in the bundle are the current administrative policy templates that allow admins to configure the available Chrome policies, which will be enforced in the enterprise environment. If Chrome is already deployed but you’re not actively managing Chrome, the policy templates are also available for download separately. For more information on how to configure Chrome policies, check out our Chrome Deployment Guide.

As more enterprise applications move to the web, it’s more critical than ever to have a path for support. IT admins can email or call Google 24 hours a day. This service is included for G Suite customers and is available on a for-fee basis for non-G Suite customers.

With more than 10,000 Chrome users, Carrie Gernant of the Wyoming Department of Enterprise Technology Services notes: “We value the ability to sync from device to device and bring all of our settings and bookmarks with us. As part of IT it makes it easy to do my job, everything is there for me whenever and wherever I need it. The security Chrome provides gives us peace of mind. The auto-updates, phishing protection and built-in malware are all working together to keep our data safe."

Our new Chrome enterprise bundle provides organizations with all of the management tools to make employees productive and can be downloaded here today. We plan to continue to add additional enterprise tools as they become available.

Chrome browser in enterprise: new admin bundle and Citrix support

Thanks to its speed, security and simplicity, Chrome has become the most popular browser for using the web. But it’s not just for personal use. With more than 200 browser management policies, industry-leading security and regularly scheduled updates, Chrome is also built for enterprises.

Adoption of Chrome browser in enterprise has doubled in the last two years and we’re committed to making it even easier for IT admins to deploy and manage Chrome within their organization. Say hello to the new Chrome enterprise bundle.  

The new bundle includes multiple tools in a single download that IT admins need for a simple, managed deployment. Today we are also announcing official Citrix support with features for employees that work with legacy applications.

Citrix XenApp, Terminal Services & Windows Server on Chrome

Citrix use is nearly ubiquitous in Fortune 500 companies, and the web browser is one of the most virtualized applications. So we’re adding official support for running Citrix XenApp as well as Windows Server with Terminal services on Chrome. In Chrome 58, which we began rolling out this month, we include support for GPU acceleration within Citrix environments, roaming profiles and Windows Server auto-detection for easy configuration for IT administrators. Visit the Google Chrome team May 23-25 in Booth #404 at Citrix Synergy Orlando to learn more.

"With official Citrix support for Chrome, we've invested heavily in joint product development, engineering, sales and marketing. We are seeing the returns with continued customer success and large-scale adoption, particularly in industries such as retail and healthcare." Vipin Borkar, Director of Product Management, Citrix

Deploying and using Chrome just got easier

While the existing, standalone Chrome MSI installation package is still available for companies to download, the new Chrome enterprise bundle provides a single package for IT admins that contains the latest version of the Chrome MSI, the Chrome Legacy Browser Support (LBS) extension as well as administrative policy templates.

It’s common for enterprises to need access to legacy web applications that require older versions of IE due to the use of outdated plugins such as Silverlight and ActiveX. These requirements no longer prevent you from deploying Chrome to your organization thanks to the included Legacy Browser support (LBS) extension in the Chrome enterprise bundle.

This allows IT administrators to configure their employees’ desktops so that when someone clicks a link in Chrome that needs a legacy browser to work, the URL will seamlessly open in a legacy browser. When they're done with the legacy app and type in other URLs that are not specified by the admin, LBS will switch the user back to Chrome to ensure they remain secure.

Everything you need to securely deploy and manage Chrome

Also included in the bundle are the current administrative policy templates that allow admins to configure the available Chrome policies, which will be enforced in the enterprise environment. If Chrome is already deployed but you’re not actively managing Chrome, the policy templates are also available for download separately. For more information on how to configure Chrome policies, check out our Chrome Deployment Guide.

As more enterprise applications move to the web, it’s more critical than ever to have a path for support. IT admins can email or call Google 24 hours a day. This service is included for G Suite customers and is available on a for-fee basis for non-G Suite customers.

With more than 10,000 Chrome users, Carrie Gernant of the Wyoming Department of Enterprise Technology Services notes: “We value the ability to sync from device to device and bring all of our settings and bookmarks with us. As part of IT it makes it easy to do my job, everything is there for me whenever and wherever I need it. The security Chrome provides gives us peace of mind. The auto-updates, phishing protection and built-in malware are all working together to keep our data safe."

Our new Chrome enterprise bundle provides organizations with all of the management tools to make employees productive and can be downloaded here today. We plan to continue to add additional enterprise tools as they become available.

Chrome OS joins forces with VMware to accelerate the adoption of Chromebooks in the enterprise

From using Windows to web to mobile apps, our Chrome OS enterprise customers will now benefit from an extended partnership with VMware, which we announced today at Dell EMC World. The collaboration includes integration with VMware Workspace ONE, allowing customers to easily and securely deploy applications on Chrome OS devices.

Workspace ONE adds to the existing security of Chrome devices, which are designed with security in mind from boot up to shut down. Multiple layers of protection are built in to every Chromebook, ranging from encrypted data and platform storage, a Verified Boot process, sandboxing of all applications and security modules such as TPM chips. With the combined forces of Workspace ONE and Chrome OS, that security extends to virtualized applications to run your business.

Dell Chromebook VMware Workspace ONE

Workers gain access to more work applications through VMware Horizon desktop virtualization along with an added bonus: one click authentication and application management. Workspace ONE on Chromebooks and other Chrome OS devices simplifies the secure login process with SSO, or single sign on. Employees can then access the applications they need to get work done through a managed software catalog.

Sumit Dhawan, senior vice president and general manager, End-User Computing, VMware says “We believe the combination of VMware Workspace ONE and Chrome OS will provide increased security and accessibility to applications for customers using the platform. This is just the first step in our collaboration on this platform with more to come.”

IDC estimates that by 2018, 25% of Fortune 500 companies will have IT-supported Chromebooks deployed in their organization thanks to the speed, simplicity and shareability of secure Chromebooks. Find out why and learn more about how Chrome device security combined with simple to manage devices and the new Workspace ONE solution can empower your workforce today.

Chrome OS joins forces with VMware to accelerate the adoption of Chromebooks in the enterprise

From using Windows to web to mobile apps, our Chrome OS enterprise customers will now benefit from an extended partnership with VMware, which we announced today at Dell EMC World. The collaboration includes integration with VMware Workspace ONE, allowing customers to easily and securely deploy applications on Chrome OS devices.

Workspace ONE adds to the existing security of Chrome devices, which are designed with security in mind from boot up to shut down. Multiple layers of protection are built in to every Chromebook, ranging from encrypted data and platform storage, a Verified Boot process, sandboxing of all applications and security modules such as TPM chips. With the combined forces of Workspace ONE and Chrome OS, that security extends to virtualized applications to run your business.

Dell Chromebook VMware Workspace ONE

Workers gain access to more work applications through VMware Horizon desktop virtualization along with an added bonus: one click authentication and application management. Workspace ONE on Chromebooks and other Chrome OS devices simplifies the secure login process with SSO, or single sign on. Employees can then access the applications they need to get work done through a managed software catalog.

Sumit Dhawan, senior vice president and general manager, End-User Computing, VMware says “We believe the combination of VMware Workspace ONE and Chrome OS will provide increased security and accessibility to applications for customers using the platform. This is just the first step in our collaboration on this platform with more to come.”

IDC estimates that by 2018, 25% of Fortune 500 companies will have IT-supported Chromebooks deployed in their organization thanks to the speed, simplicity and shareability of secure Chromebooks. Find out why and learn more about how Chrome device security combined with simple to manage devices and the new Workspace ONE solution can empower your workforce today.