How to deploy Chrome Enterprise policies to the ChatGPT desktop built-in browser with MDM

The built-in browser in the ChatGPT desktop app (Codex) supports 244 Chrome Enterprise policies. If you already manage Chrome through MDM, keep the policy names and value formats as they are and only change where you deploy them. For now, only device-based deployment through MDM, Group Policy, or configuration-management tools works. Cloud management through Google Admin isn't available yet.

The locations by platform are below. The identifiers still contain codex, so use them exactly as shown.

• Windows: registry HKEY_LOCAL_MACHINE\SOFTWARE\Policies\OpenAI\Codex (use HKEY_CURRENT_USER for a specific user)
• macOS: managed preferences domain com.openai.codex
• Linux: /etc/opt/codex/policies/managed/ (user-changeable defaults go in /etc/opt/codex/policies/recommended/)

For example, to stop saving new passwords and block cookies from one site on Linux, put this JSON file directly in the managed folder. Nested folders aren't read.

{
  "PasswordManagerEnabled": false,
  "CookiesBlockedForUrls": ["https://example.com"]
}

On macOS, deploy the same keys as a configuration profile for the com.openai.codex domain. A normal preference written with defaults write doesn't become a mandatory policy. On Windows, store true/false values as REG_DWORD (0 or 1), and for lists create a child key named after the policy with REG_SZ values numbered from 1. Chrome's ADMX templates only target Chrome, so create the registry values directly.

After deploying, quit and reopen the app. Open chrome://policy in an in-app browser tab, click Reload policies, and check that each policy shows source Platform, level Mandatory, and no error. A policy showing up there doesn't prove the feature behaves as intended, so test the actual behavior too.