> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Oloid Vault (Chrome / Chromium) - How to Deploy Oloid Vault Using Group Policy Object (GPO) at Machine Scope

> This document provides step by step instructions to deploy Oloid Vault (Chrome / Chromium) using Group Policy Object (GPO) at Machine Scope.

## Introduction

This article describes how to deploy **Oloid Vault** to Windows computers using a **Group Policy Object (GPO)** at the machine scope. The deployment uses the Oloid Vault Administrative Template (ADMX/ADML) to centrally configure and enforce Oloid Vault browser extension settings for **Google Chrome** and **Microsoft Edge**.

## Prerequisites

* **Group Policy Management Console (GPMC)** is installed and accessible.
* The domain **Central Store (PolicyDefinitions)** is available for deploying the Oloid Vault ADMX and ADML templates.
* The **OloidVault.admx** and **OloidVault.adml** template files are available.
* **Google Chrome**, **Microsoft Edge**, or both are installed on the target computers, depending on your deployment requirements.
* You have access to the **Tenant Admin Portal** to generate the Auto-Pair configuration. To generate the Auto-Pair config. file, refer [Oloid Vault (Chrome / Chromium)- How to Generate and Download Auto-Pair Config File in the Tenant Admin Portal](https://oloid.help/en/articles/15202831-oloid-vault-chrome-chromium-how-to-generate-and-download-auto-pair-config-file-in-the-tenant-admin-portal).
* The **Auto-Pair Configuration base64 string** is available if devices need to pair automatically with the Oloid tenant.

## Steps to Deploy Oloid Vault via GPO

[Stage the Oloid Vault Template](#stage-the-oloid-vault-template)

[Create the GPO](#create-the-gpo)

[Configure Oloid Vault Policy Settings](#configure-oloid-vault-policy-settings)

[Scope the GPO](#scope-the-gpo)

[Verify Delegation and Select GPO Status](#verify-delegation-and-select-gpo-status)

[Apply and Verify the Policy](#apply-and-verify-the-policy-optional)

### Stage the Oloid Vault Template

Before configuring the Oloid Vault GPO settings, add the Oloid Vault Administrative Template files to the domain Central Store. This makes the **Oloid Vault** policy settings available in the **Group Policy Management Editor**.

Copy **OloidVault.admx** to the domain Central Store under **PolicyDefinitions**, and copy **OloidVault.adml** to the **en-US** folder under **PolicyDefinitions**. Ensure the final folder structure is as follows:

`PolicyDefinitions\
├── OloidVault.admx
└── en-US\
 └── OloidVault.adml`

### Create the GPO

This section describes how to create a new **Group Policy Object (GPO)** in the target domain for configuring and deploying the Oloid Vault policy settings.

To create the GPO, do the following:

1. In GPMC, expand **Forest > Domains >** preferred **Domain**.

   > [!NOTE]
   >
   > **Note:** If multiple domains are available, expand the domain where you want to deploy Oloid Vault.

   ![How to Deploy Oloid Vault Using Group... - screenshot 1](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-a41dd258.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=d32c5f608784b400ec335ea18be4ad0d)
2. Right click on the **Group Policy Objects** > click **New**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 2](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/e62054bd-9c44-4af1-92d3-ab256523f272-e0e9dcc3.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=f53f956349c0589aaa2a12674020aa29)

   The **New GPO** pop-up box is displayed.
3. Do the following:
   1. Enter the **Policy Name**.
   2. Ensure (none) is selected as Source Starter GPO.
   3. Click **OK**.

      ![How to Deploy Oloid Vault Using Group... - screenshot 3](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-9a664d41.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=6ce41608b462a866983f8ae2cb6d4136)

      The **Group Policy Object** is created successfully.

      ![How to Deploy Oloid Vault Using Group... - screenshot 4](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-c77a7dd7.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=e3d42bf7c70af3b7424044d57e85c5fc)

### Configure Oloid Vault Policy Settings

This section describes how to configure the **Oloid Vault** policy settings in the Group Policy Management Editor, including the **Auto-Pair Configuration** and **Extension** settings for **Google Chrome** and **Microsoft Edge**.

To configure the Oloid Vault policy, do the following:

1. In GPMC, right click on the newly added **Group Policy Object (GPO)** > select **Edit**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 5](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-58fb4916.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=1f83d96c4ae5b93b3eeb2d7f64c0a9c3)

   The Group Policy Management Editor screen is displayed.
2. Double click on **Computer Configuration**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 6](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-0bb4e8a4.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=df038b76591b492ec8d4527d67e2e963)

   The Computer Configuration screen is displayed.
3. Double click on Policies.

   ![How to Deploy Oloid Vault Using Group... - screenshot 7](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-021e8474.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=f11ca98062370ae7aea7c449cf7fc10e)

   The Policies screen is displayed.
4. Double click on Administrative Templates.

   ![How to Deploy Oloid Vault Using Group... - screenshot 8](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/0f1207f4-bfd7-4148-89b3-171452b1d752-cd1772e6.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=6edd9dd96ce9adb4d1b56e03d5806b19)

   The Administrative Templates screen is displayed.
5. Click **Oloid Vault**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 9](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-7ae271f8.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=23706e63a30cbf08487fd0cddfdcb47e)

   The Oloid Vault screen is displayed.

   ![How to Deploy Oloid Vault Using Group... - screenshot 10](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-6e71661e.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=d560ebb29f9dc4d8416f5e5cb9234600)
6. Configure the following browser:
   1. Google Chrome
   2. Microsoft Edge

      > [!NOTE]
      >
      > **Note:** You can configure either any or both the browser as per the requirement.

#### Configure Google Chrome

1. To configure google chrome, click on **Google Chrome.**
   The Google chrome description page is displayed.
2. Click **Auto-Pair Configuration**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 11](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-7a32ae2d.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=fa63179ae22a7fcba1c85aa35dd62aa5)

   The AutoPair Configuration screen is displayed.
3. Do the following:
   1. Select **Enabled**.

   2. Enter the AutoPair Configuration text in the **Configuration (base64)**.

      > [!NOTE]
      >
      > **Note:** Generate the Auto-Pair configuration from the Oloid Tenant Admin Portal. For instructions, refer to [Oloid Vault (Chrome / Chromium)- How to Generate and Download Auto-Pair Config File in the Tenant Admin Portal](https://oloid.help/en/articles/15202831-oloid-vault-chrome-chromium-how-to-generate-and-download-auto-pair-config-file-in-the-tenant-admin-portal). Click **Copy Config Text** to copy the configuration directly or download the configuration file in **TEXT** format and copy its contents.

   3. Click **Apply**.

      > [!NOTE]
      >
      > **Note:** Use the **Apply** button to verify that the entered Auto-Pair configuration is valid.

   4. Click **OK**.

      ![How to Deploy Oloid Vault Using Group... - screenshot 12](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-fe74ebb8.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=cd7db5abce2e1ebb2026715e22209879)

      The AutoPair Configuration is setup successfully.
4. Double click on **Extension**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 13](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-e13bb96c.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=56d62598cf405d9982af24732d3e97ec)

   The **Extension** screen is displayed.
5. Do the following:
   1. Select **Enabled**.
   2. Click **Apply** (Optional).
   3. Click **OK**.

      ![How to Deploy Oloid Vault Using Group... - screenshot 14](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-95730bc2.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=7fd7982ea41bc73693b338b86d1f2ae3)

      The **Extension** is configured successfully.
6. Close the Group Policy editor after applying the settings.

   > [!NOTE]
   >
   > **Note:**
   >
   > * If AutoPair Configuration is left unconfigured, the extension is still installed, but each user must pair to the tenant manually.
   > * To configure **Microsoft Edge**, follow the same steps under the **Microsoft Edge** policy settings.

### Link the GPO

1. Go back to the GPO, right click **Domains** > Select **Link an Existing GPO**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 15](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-76014a98.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=f8bfd8216a5f962070a63dff765ea18e)

   The **Select GPO** screen is displayed.
2. Select the preferred **GPO** > click **OK**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 16](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-a7533e45.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=21811c43eede08257125234a9110a7e6)

   The GPO is linked successfully.
3. Double click on the newly added Group Policy Object.

   ![How to Deploy Oloid Vault Using Group... - screenshot 17](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-68e21375.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=ac734b63a54000d1e8907302447c6229)

   The **Group Policy Object scope** page is displayed.
4. Ensure the following:
   1. The Enforced is **No**.
   2. The Link Enabled is **Yes**.

      ![How to Deploy Oloid Vault Using Group... - screenshot 18](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-7a49b860.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=ae12764e6eaaaeb6cdeead1373fbbcc8)

      > [!NOTE]
      >
      > **Note:** The source deployment procedure identifies a computer OU, the domain root, or the Domain Controllers OU as possible link targets. Select the target appropriate to your deployment.

### Scope the GPO

This section describes how to scope the **Oloid Vault GPO** to ensure that the policy is applied only to the required computers or groups.

### Configure Security Filtering

This section describes how to configure **Security Filtering** for the Oloid Vault GPO by adding the required computer, user, or security group to control which objects receive the policy.

To configure the Security Filtering, do the following:

1. Click the preferred GPO in GPMC.
   The GPO scope page is displayed.
2. Go to **Security Filtering section** > click **Add**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 19](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-954ccc83.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=74db2e93e6c1dda6a8e494d4f84a5275)

   The **Select User, Computer, or Group** pop-up box is displayed.
3. Do the following:
   1. Enter the object name in the object field.
   2. Click **Check Names** (Optional).
   3. Click **OK**.

      ![How to Deploy Oloid Vault Using Group... - screenshot 20](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-7e23bd16.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=847f16c807f803eca028bdb5f42f643f)

      The Groups or users has been added successfully.

      ![How to Deploy Oloid Vault Using Group... - screenshot 21](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-230705a6.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=a665a1b3a3b908c74c6f12ddfc9d93e5)

### Verify Delegation and Select GPO Status

This section describes how to verify the **delegation permissions** for the computer group and configure the **GPO status** to apply only the required computer configuration settings.

To verify the **Delegation**, do the following:

1. Click **Delegation** tab.
2. Ensure that the computer group has **Read and Apply group policy permissions**.

   ![How to Deploy Oloid Vault Using Group... - screenshot 22](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/image-43981803.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=a7e72ef4d3c44cfc4fda2c4070f0bb4e)
3. Go back to **Details** tab and select the GPO status as **User configuration settings disabled**.

![How to Deploy Oloid Vault Using Group... - screenshot 23](https://mintcdn.com/oloid-999c42b2/X6-1Vz9Br-lCVwTB/images/intercom/16897074/b502c030-2fc0-4104-9725-7a0de1ded253-5de603a9.png?fit=max\&auto=format\&n=X6-1Vz9Br-lCVwTB\&q=85\&s=dab675dee2bea271a72ea855d5cf5823)

### Apply and Verify the Policy (Optional)

> [!WARNING]
>
> **Important:** Computer accounts obtain group membership at startup. If you added computer accounts to the security group, restart the machine before the GPO is retrieved.

1. On the client, run the following command: `gpupdate /force`
2. Restart the machine and ensure that the browser is fully closed and that no residual browser processes remain in Task Manager before reopening it.

#### Verify the GPO on the Client

1. From an elevated Command Prompt, run: `gpresult /r /scope computer`
2. Under COMPUTER SETTINGS, confirm that Oloid-Vault-Machine appears under Applied Group Policy Objects.
3. Confirm that the GPO is not listed as filtered out and that Computer Security Group Membership includes the group used for Security Filtering.

#### Verify the Registry and Browser Policy

1. Use PowerShell to verify that browser policy values are present:
   1. `Get-ItemProperty "HKLM:\Software\Policies\Google\Chrome"`
   2. `Get-ItemProperty "HKLM:\Software\Policies\Microsoft\Edge"`
2. For Chrome, confirm that the AutoPair value is present at the extension policy path:
   `Get-ItemProperty "HKLM:\Software\Policies\Google\Chrome\3rdparty\extensions\peeofnhcbenipokkdfpiocdbbapphnje\policy"`
3. Open `chrome://policy or edge://policy` and select Reload policies.
4. Confirm that Status is OK and Scope is Machine.
5. Confirm that the Oloid Vault extension is installed and pinned to the toolbar, cannot be removed by the user, and is paired with the correct tenant.