部署 Google Chrome for Business 时如何自定义默认设置？

Question

我希望能够在我的组织中部署 Google Chrome for Business，而无需创建任何额外的快捷方式，也无需任何首次运行提示。Chrome for Business 安装程序是一个 Windows 安装程序文件 (MSI)，但它只是一个可执行安装程序的包装器。它没有像许多 MSI 安装程序那样可以在 msiexec 命令行中设置的属性，例如 CreateDesktopShortcut。如何自定义我的安装？我不想编写和维护安装脚本。

Answer 1

Google Chrome将默认用户首选项存储在master_preferences文件中。这是一个JSON格式的文本文件，它包含一个distribution包含将在安装期间读取的设置的对象。在现有的 Chrome 安装中编辑此文件并不能解决问题，因为此时安装显然已经发生。解决方案是使用转换文件将自定义的 master_preferences 文件集成到 Windows Installer 安装过程中。执行以下步骤来完成此操作。

收集所需的安装程序和工具

1. Google Chrome for Business 安装程序。
   我将 64 位版本下载到E:\Chrome for Business 38 (64-bit).
2. 适用于 Windows 8.1 的 Microsoft Windows 软件开发工具包 (SDK)。
   我会把这个下载到E:\WindowsSDK8.1.
3. 安装 Windows SDK：E:\WindowsSDK8.1.\sdksetup.exe.
4. 安装 Orca（Windows Installer 数据库编辑器）：
   msiexec /package "C:\Program Files (x86)\Windows Kits\8.1\bin\x86\Orca-x86_en-us.msi".

编写自定义的 master_preferences 文件

1. 查看可用的分发设置。这些是distribution对象的属性，包含在 master_preferences 文件的匿名对象中。下面的设置列表编译通过结合两种铬源文件：master_preferences_constants.h和master_preferences_constants.cc 在/主干/ src目录/铬/安装/ UTIL /。请注意，以下内容不是有效的 JSON，因为不包含属性值。下面进一步显示了一个示例。

{
  "distribution" : {
    // All the preferences below are expected to be inside the JSON "distribution"
    // block (as shown here). Some of them also have equivalent command line option. 
    // If same option is specified in master preference as well as command line, 
    // the command line value takes precedence.

    // Boolean. Use alternate text for the shortcut. Cmd line override present.
    "alternate_shortcut_text"

    // Boolean. Whether to instruct the installer to auto-launch chrome on computer
    // startup. The default (if not provided) is |false|.
    "auto_launch_chrome"

    // Boolean. This is to be a Chrome install. (When using MultiInstall)
    "chrome"

    // Boolean. This is to be a Chrome App Host install.
    "app_host"  // TODO(huangs): Remove by M27.

    // Boolean. This is to be a Chrome App Launcher install.
    "app_launcher"

    // Integer. Icon index from chrome.exe to use for shortcuts.
    "chrome_shortcut_icon_index"

    // Boolean. This is a legacy preference and should no longer be used; it is
    // kept around so that old master_preferences which specify
    // "create_all_shortcuts":false still enforce the new
    // "do_not_create_(desktop|quick_launch)_shortcut" preferences. Setting this to
    // true no longer has any impact.
    "create_all_shortcuts"

    // Boolean pref that disables all logging.
    "disable_logging"

    // Name of the dictionary that holds the distribution values.
    "distribution"

    // Boolean pref that triggers silent import of the default browser bookmarks.
    "import_bookmarks"

    // String pref that triggers silent import of bookmarks from the html file at
    // given path.
    "import_bookmarks_from_file"

    // Boolean pref that triggers silent import of the default browser history.
    "import_history"

    // Boolean pref that triggers silent import of the default browser homepage.
    "import_home_page"

    // Boolean pref that triggers silent import of the default search engine.
    "import_search_engine"

    // Integer. RLZ ping delay in seconds.
    "ping_delay"

    // String of Chrome version for which the "set as default browser" infobar will
    // never be shown.
    "suppress_default_browser_prompt_for_version"

    // Boolean. Do not show first run bubble, even if it would otherwise be shown.
    "suppress_first_run_bubble"

    // Boolean. Prevent creation of all shortcuts to chrome, including the
    // desktop, quick launch, taskbar and the start menu shortcuts.
    "do_not_create_any_shortcuts"

    // Boolean. Prevent creation of the Desktop shortcut on install (and later on
    // Active Setup for each user on a system-level install).
    "do_not_create_desktop_shortcut"

    // Boolean. Prevent creation of the Quick Launch shortcut on install (and later
    // on Active Setup for each user on a system-level install).
    "do_not_create_quick_launch_shortcut"

    // Boolean. Prevent creation of the Taskbar (since Windows 7) shortcut on
    // install (and later on Active Setup for each user on a system-level install).
    "do_not_create_taskbar_shortcut"

    // Boolean. Do not launch Chrome after first install. Cmd line override present.
    "do_not_launch_chrome"

    // Boolean. Do not register with Google Update to have Chrome launched after
    // install. Cmd line override present.
    "do_not_register_for_update_launch"

    // String.  Specifies the file path to write logging info to.
    "log_file"

    // Boolean. Register Chrome as default browser. Cmd line override present.
    "make_chrome_default"

    // Boolean. Register Chrome as default browser for the current user.
    "make_chrome_default_for_user"

    // Boolean. Expect to be run by an MSI installer. Cmd line override present.
    "msi"

    // Boolean. Support installing multiple products at once.
    "multi_install"

    // Boolean. Show EULA dialog before install.
    "require_eula"

    // Boolean. Indicates that the first-run 'set-as-default' dialog should not be
    // shown. Relevant in Windows 8+ context only. If this is true, the standard
    // 'set default browser' prompt on the butter-bar will appear during the first
    // run.
   "suppress_first_run_default_browser_prompt"

    // Boolean. Install Chrome to system wise location. Cmd line override present.
    "system_level"

    // Boolean. Run installer in verbose mode. Cmd line override present.
    "verbose_logging"

    // Name of the block that contains the extensions on the master preferences.
    "extensions.settings"
  }
}

2. 查看可用的非分发设置。这些设置在 JSON中的对象之外distribution。当用户第一次运行 Chrome 时，它​​们会应用于用户配置文件。Chromium 源文件pref_names.h和pref_names.cc中的完整设置列表位于/trunk/src/chrome/common/ 中。该列表相当冗长，因此此处仅显示了一个子集。

{
// *************** PROFILE PREFS ***************
// These are attached to the user profile

// A string property indicating whether default apps should be installed
// in this profile.  Use the value "install" to enable defaults apps, or
// "noinstall" to disable them.  This property is usually set in the
// master_preferences and copied into the profile preferences on first run.
// Defaults apps are installed only when creating a new profile.
"default_apps"

// If set to true profiles are created in ephemeral mode and do not store their
// data in the profile folder on disk but only in memory.
"profile.ephemeral_mode"

// A boolean specifying whether the New Tab page is the home page or not.
"homepage_is_newtabpage"

// This is the URL of the page to load when opening new tabs.
"homepage"

// An integer pref. Holds one of several values:
// 0: (deprecated) open the homepage on startup.
// 1: restore the last session.
// 2: this was used to indicate a specific session should be restored. It is
//    no longer used, but saved to avoid conflict with old preferences.
// 3: unused, previously indicated the user wants to restore a saved session.
// 4: restore the URLs defined in kURLsToRestoreOnStartup.
// 5: open the New Tab Page on startup.
"session.restore_on_startup"

// The URLs to restore on startup or when the home button is pressed. The URLs
// are only restored on startup if kRestoreOnStartup is 4.
"session.startup_urls"

// Boolean that is true when SafeBrowsing is enabled.
"safebrowsing.enabled"

// Boolean that tell us whether malicious download feedback is enabled.
"safebrowsing.extended_reporting_enabled"

/* Might be useful for highly-secure workstations. */
// Enum that specifies whether Incognito mode is:
// 0 - Enabled. Default behaviour. Default mode is available on demand.
// 1 - Disabled. Used cannot browse pages in Incognito mode.
// 2 - Forced. All pages/sessions are forced into Incognito.
"incognito.mode_availability"

// Boolean that is true when Suggest support is enabled.
"search.suggest_enabled"

// A boolean pref set to true if a Home button to open the Home pages should be
// visible on the toolbar.
"browser.show_home_button"

// Boolean that indicates whether we should check if we are the default browser
// on start-up.
"browser.check_default_browser"

// Policy setting whether default browser check should be disabled and default
// browser registration should take place.
"browser.default_browser_setting_enabled"

// Boolean that specifies whether to import bookmarks from the default browser
// on first run.
"import_bookmarks"

// Boolean that specifies whether to import the browsing history from the
// default browser on first run.
"import_history"

// Boolean that specifies whether to import the homepage from the default
// browser on first run.
"import_home_page"

// Boolean that specifies whether to import the search engine from the default
// browser on first run.
"import_search_engine"

// Boolean that specifies whether to import the saved passwords from the default
// browser on first run.
"import_saved_passwords"

// Boolean that specifies if the sign in promo is allowed to show on first run.
// This preference is specified in the master preference file to suppress the
// sign in promo for some installations.
"sync_promo.show_on_first_run_allowed"

// *************** LOCAL STATE ***************
// These are attached to the machine/installation

// Note: Both settings included below are for Windows only.

// Whether downloaded PDFs should be opened in Adobe Acrobat Reader.
"download.open_pdf_in_adobe_reader"

// Preference to be used while relaunching Chrome. This preference dictates if
// Chrome should be launched in Metro or Desktop mode.
// For more info take a look at ChromeRelaunchMode enum.
"relaunch.mode"

// Boolean that specifies if the sign in promo is allowed to show on first run.
// This preference is specified in the master preference file to suppress the
// sign in promo for some installations.
"sync_promo.show_on_first_run_allowed";

// Boolean that specifies if we should show a bubble in the new tab page.
// The bubble is used to confirm that the user is signed into sync.
"sync_promo.show_ntp_bubble";

// As part of the master preferences an optional section indicates the tabs
// to open during first run. An example is the following:
"first_run_tabs": [
  "http://google.com/f1",
  "https://google.com/f2"
]
// Note that the entries are usually urls but they don't have to be.

3. 选择您想要的设置，并编写您自己的自定义 master_preferences 文本文件。这是内置在 Windows Installer 文件中的一个（为了可读性扩展为多行）：

{
  "distribution" : 
  {
    "msi" : true,
    "system_level" : true,
    "verbose_logging" : true
  }
}

您必须包含 master_preferences 文件中显示的所有这些属性，以便安装程序正常工作。因此，你应该从这个开始并添加它。我的文件如下所示。我发现阻止 Chrome 要求用户配置 Google 帐户的唯一方法是设置first_run_tabs属性。

{
  "browser" : {
    "check_default_browser" : false
  },
  "distribution" : {
    "import_bookmarks" : false,
    "import_history" : false,
    "import_home_page" : false,
    "import_search_engine" : false,
    "suppress_first_run_bubble" : true,
    "do_not_create_desktop_shortcut" : true,
    "do_not_create_quick_launch_shortcut" : true,
    "do_not_create_taskbar_shortcut" : true,
    "do_not_launch_chrome" : true,
    "do_not_register_for_update_launch" : true,
    "make_chrome_default" : false,
    "make_chrome_default_for_user" : false,
    "msi" : true,
    "require_eula" : false,
    "suppress_first_run_default_browser_prompt" : true,
    "system_level" : true,
    "verbose_logging" : true
  },
  "first_run_tabs" : [
    "chrome://newtab"
  ],
  "homepage" : "chrome://newtab",
  "homepage_is_newtabpage" : true,
  "sync_promo" : {
    "show_on_first_run_allowed" : false
  }
}

4. 浏览到http://jslint.com/，将您的 JSON 复制到 Source 框中，然后单击 JSLint 按钮。这将验证您是否具有良好的 JSON。这很重要，因为向安装程序提供格式错误的 JSON 会产生意外和/或不需要的结果。保存经过验证的文件以备将来参考。

5. 复制经过验证的 JSON，并删除所有空格和新行。Chrome 安装程序无法处理换行符；包括换行符将导致安装损坏，必须通过注册表手术和手动删除文件来删除。删除空格可能不是必需的，但它与设置作者对默认 JSON 所做的相匹配。我的如下图所示。

{"browser":{"check_default_browser":false},"distribution":{"import_bookmarks":false,"import_history":false,"import_home_page":false,"import_search_engine":false,"suppress_first_run_bubble":true,"do_not_create_desktop_shortcut":true,"do_not_create_quick_launch_shortcut":true,"do_not_create_taskbar_shortcut":true,"do_not_launch_chrome":true,"do_not_register_for_update_launch":true,"make_chrome_default":false,"make_chrome_default_for_user":false,"msi":true,"require_eula":false,"suppress_first_run_default_browser_prompt":true,"system_level":true,"verbose_logging":true},"first_run_tabs":["chrome://newtab"],"homepage":"chrome://newtab","homepage_is_newtabpage":true,"sync_promo":{"show_on_first_run_allowed":false}}

6. 通过 JSLint 运行没有空格的新 JSON，以确保您没有引入任何错误。

7. 将经过验证的 JSON（不含空格或换行符）复制到 URL 编码器中。我使用了URL Encode/Decode Online。保存编码的 JSON 以在安装程序中使用并供将来参考。我编码的 JSON 如下所示。

%7B%22browser%22%3A%7B%22check_default_browser%22%3Afalse%7D%2C%22distribution%22%3A%7B%22import_bookmarks%22%3Afalse%2C%22import_history%22%3Afalse%2C%22import_home_page%22%3Afalse%2C%22import_search_engine%22%3Afalse%2C%22suppress_first_run_bubble%22%3Atrue%2C%22do_not_create_desktop_shortcut%22%3Atrue%2C%22do_not_create_quick_launch_shortcut%22%3Atrue%2C%22do_not_create_taskbar_shortcut%22%3Atrue%2C%22do_not_launch_chrome%22%3Atrue%2C%22do_not_register_for_update_launch%22%3Atrue%2C%22make_chrome_default%22%3Afalse%2C%22make_chrome_default_for_user%22%3Afalse%2C%22msi%22%3Atrue%2C%22require_eula%22%3Afalse%2C%22suppress_first_run_default_browser_prompt%22%3Atrue%2C%22system_level%22%3Atrue%2C%22verbose_logging%22%3Atrue%7D%2C%22first_run_tabs%22%3A%5B%22chrome%3A%2F%2Fnewtab%22%5D%2C%22homepage%22%3A%22chrome%3A%2F%2Fnewtab%22%2C%22homepage_is_newtabpage%22%3Atrue%2C%22sync_promo%22%3A%7B%22show_on_first_run_allowed%22%3Afalse%7D%7D

编写 Windows 安装程序转换

1. 启动逆戟鲸。
2. 以只读方式打开下载的 Chrome for Business MSI 文件。（我想您可以编辑实际文件，但我喜欢使用转换，因此如果出现问题，我总是将供应商提供的文件作为基准。）我下载了 38 位 64 位 Chrome for Business，文件名为googlechromestandaloneenterprise64.msi.
3. 在变换菜单上，选择新建变换。现在所有的 Windows Installer 数据库表都是可编辑的，因为您正在编辑一个新的转换文件。
4. 选择属性表。
5. 右键单击“属性”列，然后单击“添加行”。将属性设置为MASTER_PREFERENCES，并将值设置为 URL 编码的 JSON。此代码将在部署期间应用master_preferences并由安装程序保存为安装文件。
6. 选择 CustomAction 表，然后找到 BuildInstallCommand 操作。
7. 双击 BuildInstallCommand 操作的目标单元以使其可编辑。
8. 在接近文本末尾处，删除后面现有的编码 JSON installerdata=，并将其替换为括号中的新属性名称。一定要保留右引号。它应该是这样的： installerdata=[MASTER_PREFERENCES]"
9. 按 Enter 完成单元格的编辑。
10. 在Transform菜单上，单击Generate Transform...并保存新的 MST 文件。我将我的另存为E:\Chrome for Business 38 (64-bit)\MasterPreferences.mst.
11. 退出逆戟鲸。

注意：需要使用属性而不是直接将 JSON 插入自定义操作中，因为自定义操作 Target 字段只有 255 个字符长。该表的架构无法更改，大多数自定义 JSON 会将该字段的总长度超过限制。使用属性可以避免长度限制，因为属性值的长度没有实际限制。

使用您的转换安装 Chrome

1. 打开具有管理权限的命令提示符窗口。
2. 通过将TRANSFORMS属性设置为其文件名来安装 Google Chrome 与您的转换。打开日志记录以帮助您发现任何错误。使用我的示例文件夹并假设您以管理员身份登录： msiexec /package "E:\Chrome for Business 38 (64-bit)\googlechromestandaloneenterprise64.msi" TRANSFORMS="E:\Chrome for Business 38 (64-bit)\MasterPreferences.mst" /l*v "C:\Users\Administrator\Desktop\ChromeInstallationLog.txt"
3. 如果 Chrome 安装没有错误，请尝试以其他非管理员用户身份运行它，以确保设置正确传播。
4. 最后，使用安装程序和转换文件配置您的部署系统。我使用System Center Configuration Manager 2012 R2。此应用程序的命令行类似于以下内容： msiexec /package "googlechromestandaloneenterprise64.msi" /quiet TRANSFORMS="MasterPreferences.mst" /l*v "%TEMP%\ChromeInstallationLog.txt" 这为我的用户提供了类似应用程序商店的 Configuration Manager 软件中心应用程序体验，将桌面和任务栏图标的控制权留给用户，并避免烦人的首次运行体验. 这通常是我首选的用户体验，但它对于面向公众的计算机尤其有用，例如在计算机实验室中，每次重新启动时硬盘驱动器更改都会丢失，因此每次登录都是“第一次”登录。

笔记

另请参阅关于 master_preferences 文件的Google文档，该文件涵盖了可用设置的一个子集，但没有告诉您如何在安装过程中将设置放到机器上。

感谢grt@chromium.org指出MSI 定制的可能性。我的目标是扩展该信息以提供全面的解释和示例解决方案。我希望它有帮助。