Google Chrome Current Windows Security Technical Implementation Guide

The Google Chrome Current Windows Security Technical Implementation Guide (V2 R11) has 46 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

46STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R11

CurrentPublished Wed Jul 02 2025

Guest Mode must be disabled.

Google Chrome Current Windows Security Technical Implementation Guide

Assessment Title

Rule Text

Guest Mode must be disabled.

Description

Discussion Text

If this policy is set to true or not configured, Google Chrome will enable guest logins. Guest logins are Google Chrome profiles where all windows are in incognito mode.

If this policy is set to false, Google Chrome will not allow guest profiles to be started.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226401

Rule

SV-226401r961083_rule

Severity

medium

Rule Version

DTBC-0069

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Universal method: 
1. In the omnibox (address bar) type chrome://policy 
2. If BrowserGuestModeEnabled is not displayed under the Policy Name column or it is not set to 0 under the Policy Value column, this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the BrowserGuestModeEnabled value name does not exist or its value data is not set to 0, this is a finding.

Implementation Procedure

Fix Text

Windows group policy:
1. Open the "group policy editor" tool with gpedit.msc 
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: Enable guest mode in browser
Policy State: Disabled

STIG check 34 of 46 in the Google Chrome Current Windows STIG checklist

← Previous · V-221599Chrome development tools must be disabled.Next · V-226402 →AutoFill for credit cards must be disabled.