daknetworks.com

Google Chrome has removed Flash-allowed-on-specified-websites from v69.

You can still manually set to Flash-allows-on-specified-website by:

• -open Chrome.
• -type: chrome://flags/#enable-ephemeral-flash-permission
• -press ENTER key.
  (the setting shows)
• -set to: DISABLED

You should now be able to set certain web sites to allow Flash without asking.

 Across Entire Location

But what if you want to run this on several hundreds/thousands of comptuers?

Thankfully, the Google crew has Group Policy Administrative Templates that can be installed on a GP server.

• -download the Chrome ADMX files here:
  https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
• -unzip.
• -install on the central GPO store.
  (see http://www.daknetworks.com/blog/307-update-the-admx-templates-in-windows-server-to-apply-gpo-to-windows-10)

Now set the GPO:

• -open GROUP-POLICY-MANAGEMENT.
• -right-click to create new GPO.
• -click COMPUTER-CONFIGURATION > POLICIES > ADMINISTRATIVE-TEMPLATES > GOOGLE > GOOGLE-CHROME > CONTENT-SETTINGS
• -click "Default Flash setting"
• -click ENABLED.
• -select CLICK-TO-PLAY.
• -click OK.

Now set another GPO to allow certain web sites:

• -open GROUP-POLICY-MANAGEMENT.
• -right-click to create new GPO.
• -click COMPUTER-CONFIGURATION > POLICIES > ADMINISTRATIVE-TEMPLATES > GOOGLE > GOOGLE-CHROME > CONTENT-SETTINGS
• -click "Allow the Flash plugin on these sites"
• -click ENABLED.
• -click SHOW.
• -type: [*.]foo.tld
• -click OK.

This will force Chrome to use these settings and the user cannot change/delete/add to them.

NOTES:

• adm files are older.
• admx files are newer.
• adml files are xml translation/localization files.