Login Keychain trouble after Sierra clean install. Summer imaging help!

[catesr]

Hello JAMFNation Folk,

So I've begun the process of getting our students machines ready for this upcoming year. We are all going to Sierra 10.12.5. Basically Wipe machine, Install OS, run updates, recon, profiles, remote apps and run policies. Everything is going nice and smooth except everytime I login as a student and open up Chrome I get a "macOS wants to make changes" dialogue box. Every other app opens without this annoying message. I know the culprit is Google Software Update is trying to be installed. I found some threads which suggested it may a 'private key" in the system keychain. However after granting permission to that (as well as some other certs) the same thing happens. But when I go into the login keychain of the student and adjust the private key in their keychain the message does not pop up. Is there any way to package this and make a policy or config? I can figure it out since it is in the users keychain? This thing is holding up a few hundred computers.

Thanks for any help.

[SGill]

For labs, we push out the latest Chrome updates (as pkg's) within a day or so after they are released so that non-admins hopefully don't get the "macOS wants to make changes" dialogs at all. Our users are AD-based. Had your Chrome version fallen a notch behind?

We install the very latest Chrome.pkg as root and it never seems to give non-admins that problem here (I have 500 installs of it running for non-admins).

[neilmartin83]

For Chrome, I just deploy an old version of it but in the same policy run this script after the pkg install: https://github.com/hjuutilainen/adminscripts/blob/master/chrome-enable-autoupdates.py

This enables Chrome's auto updater, keeps Chrome updated and doesn't nag users.

[catesr]

Gentlemen you're both geniuses. Both suggestions worked which is even better as I like to have more than 1 solution in my arsenal so to speak. I really appreciate. Something this minor and annoying could have really slowed me down this summer. Thank you very much.