Enable Ambient Authentication for profile types.

Configuring this policy will allow/disallow ambient authenticaiton for Incognito and Guest profiles in Google Chrome.

Ambient Authentication is http authentication with default credentials if explicit credentials are not provided via NTLM/Kerberos/Negotiate challenge/response schemes.

Setting the RegularOnly (value 0), allows ambient authentication for Regular sessions only. Incognito and Guest sessions wouldn't be allowed to ambiently authenticate.

Setting the IncognitoAndRegular (value 1), allows ambient authentication for Incognito and Regular sessions. Guest sessions wouldn't be allowed to ambiently authenticate.

Setting the GuestAndRegular (value 2), allows ambient authentication for Guest and Regular sessions. Incognito sessions wouldn't be allowed to ambiently authenticate.

Setting the All (value 3), allows ambient authentication for all sessions.

Note that, ambient authentication is always allowed on regular profiles.

If the policy is left not set, then the Incognito and Guest sessions will not be able to ambiently authenticate in the future releases of Google Chrome, as they will be disallowed.


Supported on: At least Microsoft Windows 7 or Windows Server 2008 family
Enable Ambient Authentication for profile types.


  1. Enable ambient authentication in regular sessions only.
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value0
  2. Enable ambient authentication in incognito and regular sessions.
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value1
  3. Enable ambient authentication in guest and regular sessions.
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value2
  4. Enable ambient authentication in regular, incognito and guest sessions.
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameAmbientAuthenticationInPrivateModesEnabled
    Value TypeREG_DWORD
    Value3


chrome.admx

Administrative Templates (Computers)

Administrative Templates (Users)