[Desktop] Group policy - Brave specific settings

[bsclifton]

Description

The group policy supported by Chrome / Chromium are supported by Brave. For more info about that, you can see https://support.brave.com/hc/en-us/articles/360039248271-Group-Policy

However there are some Brave specific settings, such as TorDisabled.

Users have requested other Brave specific settings and this issue can track them 😄

[bsclifton]

Requested:

• setting for the " Show autocomplete in address bar " Brave parameter
• setting for the " Automatically send completely private product analytics to Brave " Brave parameter.

Source:
https://community.brave.com/t/setting-autocomplete-in-address-bar-and-private-product-analytics-throught-registry-keys/120887

[bsclifton]

Very cool 😄 @Prowler2 shared this first attempt at Brave GPO templates:
https://github.com/Prowler2/Brave-Browser-GPO-Policy

We will be working on these too, hopefully soon. But great there is something available for folks now 😄

[r3pek]

Just a couple more:

• Brave Shields (and its suboptions)
• Brave Shields WhiteList
• Show Wayback Machine prompt on 404 pages
• Extensions (WebTorrent and Hangouts for example)
• Enable/Disable CryptoWallets
• Send a "Do Not Track" request

[Prowler2]

@bsclifton, if you add any of these GPO requests let me know. I will be updating the templates to the latest version this weekend.

[Prowler2]

@bsclifton, the Brave admx templates have been updated to v87.0.4280.88 using the latest available source Chromium policy templates. I wrote a PowerShell script to download and and extract the Chromium templates. The script will then parse, modify and save the Brave specific versions. These now only take a few minutes to generate for testing.
https://github.com/Prowler2/Brave-Browser-GPO-Policy

[Meth0d007]

So aparently there is nothing going on here, are there any (undocumented) registry keys fo the brave specific settings?

We would like to rollout Brave in our company but frankly to fiddle around in the "Preferences" file just to disable some stuff you dont want in an enterprise environment will just not do.

Having a copy of the chromium GPO is nice and all but all of that could be changed via registry, i really dont understand why there is nothing for the brave specific settings.

[EHRETic]

So aparently there is nothing going on here, are there any (undocumented) registry keys fo the brave specific settings?

I came here yesterday for the first time! 😄
I'm testing an hardened Brave browser since yesterday. Hardening is made with a manual copy of Chrome CIS settings, based on @Prowler2 GPO templates.

It seems to be fine, but I've noticed I miss the GPO setting for "Automatically send completely private product analytics to Brave This anonymous info only lets Brave estimate the overall usage of certain features."

Maybe I didn't see it but if not, this would be one to cover! 😉

[bsclifton]

Per #14496 it would be good to have a group policy setting for this setting:

[DPBattaglia]

@EHRETic did you ever get to the bottom of a hardened template/baseline for Brave Browser based off the CIS benchmarks for Chrome? And what has been your method to deploy it?