How to Deploy Google Chrome on macOS Devices Using Microsoft Intune

First, you need to obtain the Chrome PKG installer file. While Google provides DMG files, PKG installers work more reliably with Intune's silent deployment mechanism.

Navigate to the Chrome enterprise download page or use the direct PKG link:

curl -L -o GoogleChrome.pkg "https://dl.google.com/chrome/mac/stable/googlechrome.pkg"

Alternatively, download from the web interface at https://www.google.com/chrome/ and select the Mac version. If you get a DMG file, mount it and extract the PKG:

hdiutil mount GoogleChrome.dmg
cp "/Volumes/Google Chrome/Google Chrome.pkg" ./GoogleChrome.pkg
hdiutil unmount "/Volumes/Google Chrome"

ls -lh GoogleChrome.pkg
file GoogleChrome.pkg

Sign into the Microsoft Intune admin center where you'll configure the app deployment. This is the central hub for all Intune management tasks.

Open your browser and navigate to:

https://endpoint.microsoft.com/

Sign in with your admin credentials. Once logged in, navigate to the Apps section:

1. Click Apps in the left navigation pane
2. Select All apps
3. Click the + Add button to start creating a new app deployment

You should see the app type selection screen. This is where you'll specify that you're deploying a macOS application.

Now you'll create the app deployment configuration. Select the correct app type for macOS PKG files:

1. In the App type dropdown, select macOS app (DMG/PKG)
2. Choose Line-of-business app
3. Click Select

Upload your Chrome PKG file:

1. Click Select app package file
2. Browse and select your GoogleChrome.pkg file
3. Wait for the upload to complete (this may take 5-10 minutes depending on your connection)

Fill in the app information:

• Name: Google Chrome
• Description: Enterprise Chrome browser for macOS devices
• Publisher: Google
• Minimum operating system: macOS 12.0
• Ignore app version: Yes (recommended for auto-updates)

Detection rules are crucial for Intune to determine if Chrome is successfully installed. Configure a file-based detection rule:

1. Click Next to reach the Detection rules section
2. Click + Add to create a new detection rule
3. Configure the rule with these exact settings:

• Rule type: File
• Path: /Applications/
• File or folder: Google Chrome.app
• Detection method: File or folder exists
• Associated with a 32-bit app on 64-bit clients: No

For more robust detection, you can also add a version-based rule:

• Rule type: File
• Path: /Applications/Google Chrome.app/Contents/
• File or folder: Info.plist
• Detection method: File or folder exists

Click Add to save the detection rule, then Next to continue.

Set the system requirements for Chrome installation. This ensures the app only deploys to compatible devices:

In the Requirements section:

• Operating system architecture: x64 (covers both Intel and Apple Silicon Macs)
• Minimum operating system: macOS 12.0
• Disk space required (MB): 500
• Physical memory required (MB): 4096

Leave Dependencies empty unless you have specific requirements like VPN clients or security software that must be installed first.

For Return codes, keep the default settings:

• Success: 0
• Soft reboot: 1641
• Hard reboot: 3010
• Retry: 1618

Click Next to proceed to assignments.

Configure which devices will receive Chrome. You can assign to all macOS devices or specific groups:

For organization-wide deployment:

1. Under Required, click + Add group
2. Search for and select All devices or your macOS device group
3. Set Assignment type to Required

For targeted deployment, create or select specific groups:

# Example: Target specific departments
# Marketing Macs
# Development Team Macs
# Executive Devices

Configure assignment settings:

• Make this app required for all users: Yes
• Install behavior: Install as system
• Notification: Show all toast notifications

Set the deployment schedule:

• Available: As soon as possible after assignment
• Installation deadline: As soon as possible

Complete the app creation and monitor the deployment across your macOS fleet:

1. Review all settings on the final screen
2. Click Create to deploy Chrome
3. Wait for the app to sync (typically 5-10 minutes)

Monitor deployment status:

Navigate to Apps > All apps > Google Chrome > Device install status

You'll see installation progress across devices:

• Installed: Chrome successfully deployed
• Installing: Deployment in progress
• Failed: Installation encountered errors
• Not applicable: Device doesn't meet requirements

Force device sync for immediate deployment:

1. Go to Devices > All devices
2. Select a macOS device
3. Click Sync to trigger immediate policy refresh

ls -la "/Applications/Google Chrome.app"
open "/Applications/Google Chrome.app"

Confirm Chrome is properly installed and configure ongoing management:

On managed macOS devices, verify the installation:

# Check Chrome version
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --version

# Verify app bundle integrity
spctl -a -v "/Applications/Google Chrome.app"

# Check if Chrome is running
ps aux | grep -i chrome

Configure Chrome auto-updates by deploying a configuration profile. Create a Custom Configuration Profile in Intune:

1. Go to Devices > Configuration profiles > + Create profile
2. Select macOS platform and Custom profile type
3. Add this configuration:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadType</key>
            <string>com.google.Chrome</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>com.company.chrome.settings</string>
            <key>UpdatesSuppressed</key>
            <false/>
        </dict>
    </array>
</plist>

Monitor ongoing compliance through Intune reporting:

• Device compliance: Check Chrome remains installed
• App protection: Monitor for unauthorized removals
• Update status: Track Chrome version across fleet