Chrome History Lock
chrome-policy/Chrome History Lock.mobileconfig is a configuration profile of
Google Chrome policies that keep Chrome’s history complete, so History Sync sees
everything.
| Policy | Setting | Why |
|---|---|---|
AllowDeletingBrowserHistory |
false | No deleting history, whole or single entries |
SavingBrowserHistoryDisabled |
false | History is always recorded |
ForceEphemeralProfiles |
false | Profiles aren’t wiped when Chrome closes |
IncognitoModeAvailability |
1 (disabled) | No Incognito windows, which aren’t recorded |
BrowserGuestModeEnabled |
false | No Guest windows, which aren’t recorded either |
BrowserAddPersonEnabled |
false | No new profiles |
SyncTypesListDisabled |
typedUrls |
History doesn’t sync. Otherwise deleting it on another device, or at myactivity.google.com, deletes it here too. Bookmarks and passwords still sync |
ExtensionSettings |
*: block history, browsingData |
Extensions can’t use the APIs that delete history |
Install
Section titled “Install”- Copy the file to the child’s Mac and double-click it.
- Approve it in System Settings ▸ General ▸ Device Management. That needs an administrator password, and so does removing it. This only holds if the child’s account is a standard user.
- Quit and reopen Chrome. Then check it, either way:
- open History Sync and look at its Chrome section, which lists anything missing or wrong; or
- open
chrome://policy: each policy above should show Status OK.
- Try it from the child’s account. Settings ▸ Privacy and security ▸ Delete browsing data should not offer history. ⇧⌘N should open no Incognito window. The profile menu should offer no Guest window and no new profile.
The profile is unsigned, so macOS shows it as “Unverified” while installing. That’s cosmetic.
Source: chrome-policy/README.md