Restrict Google Chrome sign-in to corporate domains on macOS and WindowsSolved

Participant
Discussion
9 hours ago Oct 09, 2026

Is there a way to block users from signing in to Google Chrome with personal Gmail accounts on managed macOS and Windows devices? I only want Chrome sign-in to work with our corporate domain. I’m trying to do this through Hexnode policies if possible, and I’m also looking for where a Windows script should be deployed from.

Replies (1)

Marked SolutionPending Review
Hexnode Expert
4 hours ago Oct 09, 2026
Marked SolutionPending Review

Yes. Chrome supports the RestrictSigninToPattern policy, which can be deployed differently on macOS and Windows.

For macOS:

Deploy a custom configuration profile with the Google Chrome payload and set the RestrictSigninToPattern key to your corporate email pattern. For example:

.*@yourdomain\.com

In Hexnode, upload the custom .mobileconfig profile from:

Policies > New Policy > macOS > Deploy Custom Configuration

Then add the required devices or device groups under Policy Targets and save the policy.

For Windows:

Create the following registry value:

  • Registry path: HKLM\SOFTWARE\Policies\Google\Chrome
  • Value name: RestrictSigninToPattern
  • Value type: REG_SZ
  • Value data: .*@yourdomain\.com

You can deploy this using a custom script from either of these locations:

  • One-time execution: Manage > Devices > select device > Actions > Others > Execute Custom Script
  • Automated policy deployment: Policies > Windows > Configurations > Scripts

A PowerShell script can be used to create the registry key and set the value.

Regards,
Mary Romero

Save