[{"id":317,"title":"Domain Ortam\u0131nda Google Chrome Y\u00f6netimi","content":"<h1>Domain Ortam\u0131nda Google Chrome Y&ouml;netimi: GPO ile G&uuml;venlik ve Kontrol.<\/h1>\r\n<p>Domain ortam\u0131ndaki bilgisayarlarda Google Chrome kullan\u0131m\u0131, y&ouml;netilmedi\u011fi takdirde ciddi g&uuml;venlik riskleri olu\u015fturabilir. Kullan\u0131c\u0131lar Google hesaplar\u0131yla Chrome'da oturum a&ccedil;t\u0131klar\u0131nda, \u015fahsi bilgisayarlar\u0131ndaki eklentiler ve ayarlar otomatik olarak \u015firket bilgisayar\u0131na senkronize olur. Bu durum, &ouml;zellikle VPN eklentileri gibi g&uuml;venlik a&ccedil;\u0131\u011f\u0131 yaratabilecek uzant\u0131lar\u0131n kurumsal a\u011fa s\u0131zmas\u0131na neden olabilir.<\/p>\r\n<p>Bu yaz\u0131da, Active Directory Group Policy Objects (GPO) kullanarak Chrome'u merkezi olarak nas\u0131l y&ouml;netebilece\u011finizi ve kurumsal g&uuml;venli\u011fi nas\u0131l sa\u011flayabilece\u011finizi detayl\u0131 olarak anlataca\u011f\u0131z.<\/p>\r\n<h2>\ud83d\udea8 G&uuml;venlik Riskleri<\/h2>\r\n<h3>Senkronizasyon Kaynakl\u0131 Tehditler<\/h3>\r\n<p><strong>Kullan\u0131c\u0131 Senaryosu:<\/strong> Bir &ccedil;al\u0131\u015fan, evindeki bilgisayar\u0131nda VPN eklentisi, ad-blocker ve &ccedil;e\u015fitli browser uzant\u0131lar\u0131 kullan\u0131yor. \u0130\u015f yerinde Google hesab\u0131yla Chrome'da oturum a&ccedil;t\u0131\u011f\u0131nda:<\/p>\r\n<ol>\r\n<li>\u274c T&uuml;m \u015fahsi eklentileri \u015firket bilgisayar\u0131na y&uuml;klenir<\/li>\r\n<li>\u274c VPN eklentileri kurumsal a\u011f g&uuml;venli\u011fini bypass edebilir<\/li>\r\n<li>\u274c Bilinmeyen kaynaklardan eklentiler veri s\u0131z\u0131nt\u0131s\u0131na neden olabilir<\/li>\r\n<li>\u274c Ad-blocker'lar kurumsal web filtreleme politikalar\u0131n\u0131 etkisizle\u015ftirebilir<\/li>\r\n<li>\u274c Proxy ayarlar\u0131 de\u011fi\u015febilir ve a\u011f trafi\u011fi \u015firket d\u0131\u015f\u0131na y&ouml;nlendirilebilir<\/li>\r\n<\/ol>\r\n<h3>Kritik G&uuml;venlik Sorunlar\u0131<\/h3>\r\n<p><strong>VPN Eklentileri:<\/strong><\/p>\r\n<ul>\r\n<li>Kurumsal g&uuml;venlik duvar\u0131n\u0131 bypass eder<\/li>\r\n<li>T&uuml;m web trafi\u011fini \u015fifrelenerek \u015firket d\u0131\u015f\u0131na &ccedil;\u0131kar\u0131r<\/li>\r\n<li>DLP (Data Loss Prevention) sistemlerini etkisiz hale getirir<\/li>\r\n<li>K&ouml;t&uuml; ama&ccedil;l\u0131 yaz\u0131l\u0131m bula\u015fma riskini art\u0131r\u0131r<\/li>\r\n<\/ul>\r\n<p><strong>Bilinmeyen Eklentiler:<\/strong><\/p>\r\n<ul>\r\n<li>Keylogger i&ccedil;erebilir<\/li>\r\n<li>Ekran g&ouml;r&uuml;nt&uuml;s&uuml; alabilir<\/li>\r\n<li>Form verilerini &ccedil;alabilir<\/li>\r\n<li>Session cookie'leri ele ge&ccedil;irebilir<\/li>\r\n<\/ul>\r\n<p><strong>Proxy ve A\u011f Ayarlar\u0131:<\/strong><\/p>\r\n<ul>\r\n<li>Kurumsal internet trafi\u011fi kontrol&uuml;n&uuml; bypass eder<\/li>\r\n<li>SIEM ve log sistemlerinden ka&ccedil;\u0131rabilir<\/li>\r\n<li>Zararl\u0131 sitelere eri\u015fimi m&uuml;mk&uuml;n k\u0131lar<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udee1\ufe0f &Ccedil;&ouml;z&uuml;m: Chrome ADMX \u015eablonlar\u0131 ile Merkezi Y&ouml;netim<\/h2>\r\n<p>Active Directory Group Policy kullanarak Chrome'u merkezi olarak y&ouml;netebilir ve t&uuml;m g&uuml;venlik risklerini minimize edebilirsiniz.<\/p>\r\n<h2>\ud83d\udce5 Ad\u0131m 1: Chrome ADMX \u015eablonlar\u0131n\u0131 \u0130ndirme<\/h2>\r\n<h3>\u0130ndirme Linki<\/h3>\r\n<p>Chrome y&ouml;netim \u015fablonlar\u0131n\u0131 resmi Google kayna\u011f\u0131ndan indirin: <strong>https:\/\/chromeenterprise.google\/browser\/download\/#manage-policies-tab<\/strong><\/p>\r\n<h3>Paket \u0130&ccedil;eri\u011fi<\/h3>\r\n<p>\u0130ndirdi\u011finiz ZIP dosyas\u0131nda \u015funlar bulunur:<\/p>\r\n<ul>\r\n<li><code>chrome.admx<\/code> - Ana \u015fablon dosyas\u0131 (English)<\/li>\r\n<li><code>windows\/admx\/<\/code> klas&ouml;r&uuml; - ADMX dosyalar\u0131<\/li>\r\n<li><code>windows\/admx\/tr-TR\/<\/code> klas&ouml;r&uuml; - T&uuml;rk&ccedil;e dil dosyalar\u0131 (chrome.adml)<\/li>\r\n<li>Di\u011fer dil klas&ouml;rleri (en-US, de-DE, vb.)<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udcc2 Ad\u0131m 2: \u015eablonlar\u0131 Active Directory'e Y&uuml;kleme<\/h2>\r\n<h3>Central Store Yap\u0131s\u0131<\/h3>\r\n<p>Active Directory ortam\u0131nda Group Policy \u015fablonlar\u0131n\u0131 merkezi bir konumda tutmak best practice'tir.<\/p>\r\n<p><strong>Hedef Klas&ouml;r:<\/strong><\/p>\r\n<pre><code>C:\\Windows\\SYSVOL\\sysvol\\\\Policies\\PolicyDefinitions\\\r\n<\/code><\/pre>\r\n<p><strong>&Ouml;rnek:<\/strong><\/p>\r\n<pre><code>C:\\Windows\\SYSVOL\\sysvol\\sirketadi.local\\Policies\\PolicyDefinitions\\\r\n<\/code><\/pre>\r\n<h3>Y&uuml;kleme Ad\u0131mlar\u0131<\/h3>\r\n<p><strong>1. Domain Controller'a Ba\u011flan\u0131n<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Domain Controller'a RDP ile ba\u011flan\r\nmstsc \/v:dc01.sirketadi.local\r\n<\/code><\/pre>\r\n<p><strong>2. PolicyDefinitions Klas&ouml;r&uuml;ne Gidin<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># PowerShell ile klas&ouml;re git\r\ncd C:\\Windows\\SYSVOL\\sysvol\\sirketadi.local\\Policies\\\r\n<\/code><\/pre>\r\n<p><strong>3. Central Store Olu\u015fturun (\u0130lk Kurulumsa)<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># PolicyDefinitions klas&ouml;r&uuml; yoksa olu\u015ftur\r\nif (!(Test-Path \"PolicyDefinitions\")) {\r\n    New-Item -ItemType Directory -Path \"PolicyDefinitions\"\r\n}\r\n\r\n# T&uuml;rk&ccedil;e dil klas&ouml;r&uuml;n&uuml; olu\u015ftur\r\nif (!(Test-Path \"PolicyDefinitions\\tr-TR\")) {\r\n    New-Item -ItemType Directory -Path \"PolicyDefinitions\\tr-TR\"\r\n}\r\n<\/code><\/pre>\r\n<p><strong>4. ADMX Dosyas\u0131n\u0131 Kopyalay\u0131n<\/strong> \u0130ndirdi\u011finiz paket i&ccedil;inden:<\/p>\r\n<ul>\r\n<li><code>chrome.admx<\/code> dosyas\u0131n\u0131 <code>PolicyDefinitions\\<\/code> klas&ouml;r&uuml;ne kopyalay\u0131n<\/li>\r\n<li><code>tr-TR\\chrome.adml<\/code> dosyas\u0131n\u0131 <code>PolicyDefinitions\\tr-TR\\<\/code> klas&ouml;r&uuml;ne kopyalay\u0131n<\/li>\r\n<\/ul>\r\n<pre><code class=\"language-powershell\"># PowerShell ile kopyalama\r\nCopy-Item \"C:\\Downloads\\Chrome-Policy\\windows\\admx\\chrome.admx\" `\r\n    -Destination \"C:\\Windows\\SYSVOL\\sysvol\\sirketadi.local\\Policies\\PolicyDefinitions\\\"\r\n\r\nCopy-Item \"C:\\Downloads\\Chrome-Policy\\windows\\admx\\tr-TR\\chrome.adml\" `\r\n    -Destination \"C:\\Windows\\SYSVOL\\sysvol\\sirketadi.local\\Policies\\PolicyDefinitions\\tr-TR\\\"\r\n<\/code><\/pre>\r\n<p><strong>5. Dosya \u0130zinlerini Kontrol Edin<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Domain Admins ve System'in Full Control yetkisi olmal\u0131\r\nGet-Acl \"C:\\Windows\\SYSVOL\\sysvol\\sirketadi.local\\Policies\\PolicyDefinitions\\chrome.admx\" | Format-List\r\n<\/code><\/pre>\r\n<h3>Do\u011frulama<\/h3>\r\n<p><strong>GPMC Kontrol&uuml;:<\/strong><\/p>\r\n<ol>\r\n<li><code>gpmc.msc<\/code> a&ccedil;\u0131n<\/li>\r\n<li>Yeni bir GPO olu\u015fturun veya var olan birini d&uuml;zenleyin<\/li>\r\n<li>Computer Configuration &gt; Policies &gt; Administrative Templates'e gidin<\/li>\r\n<li><strong>Google &gt; Google Chrome<\/strong> klas&ouml;r&uuml;n&uuml; g&ouml;rmelisiniz<\/li>\r\n<\/ol>\r\n<h2>\ud83d\udd27 Ad\u0131m 3: GPO Olu\u015fturma ve Yap\u0131land\u0131rma<\/h2>\r\n<h3>Yeni GPO Olu\u015fturma<\/h3>\r\n<p><strong>Group Policy Management Console (GPMC) ile:<\/strong><\/p>\r\n<pre><code>1. gpmc.msc a&ccedil;\u0131n\r\n2. Domain alt\u0131nda Group Policy Objects'e sa\u011f t\u0131klay\u0131n\r\n3. New &gt; GPO ad\u0131n\u0131 girin: \"Chrome Security Policy\"\r\n4. Olu\u015fturulan GPO'ya sa\u011f t\u0131klay\u0131p Edit se&ccedil;in\r\n<\/code><\/pre>\r\n<p><strong>PowerShell ile GPO Olu\u015fturma:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Yeni GPO olu\u015ftur\r\nNew-GPO -Name \"Chrome Security Policy\" -Comment \"Chrome g&uuml;venlik ve eklenti y&ouml;netim politikas\u0131\"\r\n\r\n# GPO'yu bir OU'ya link et\r\nNew-GPLink -Name \"Chrome Security Policy\" -Target \"OU=Workstations,DC=sirketadi,DC=local\"\r\n<\/code><\/pre>\r\n<h3>GPO Scope ve Filtreleme<\/h3>\r\n<p><strong>Security Filtering:<\/strong><\/p>\r\n<ul>\r\n<li>Default olarak \"Authenticated Users\" grupuna uygulan\u0131r<\/li>\r\n<li>Belirli bilgisayar gruplar\u0131na s\u0131n\u0131rlamak i&ccedil;in:\r\n<pre><code>Delegation &gt; Advanced &gt; Add &gt; Computers-Chrome-Users\r\n<\/code><\/pre>\r\n<\/li>\r\n<\/ul>\r\n<p><strong>WMI Filtering (Opsiyonel):<\/strong> Chrome y&uuml;kl&uuml; bilgisayarlara &ouml;zel uygulama:<\/p>\r\n<pre><code class=\"language-sql\">SELECT * FROM Win32_Product WHERE Name LIKE '%Google Chrome%'\r\n<\/code><\/pre>\r\n<h2>\ud83d\udeab Ad\u0131m 4: T&uuml;m Eklentileri Engelleme<\/h2>\r\n<h3>Configure Extension Installation Blocklist<\/h3>\r\n<p><strong>Politika Yolu:<\/strong><\/p>\r\n<pre><code>Computer Configuration &gt; Policies &gt; Administrative Templates &gt; Google &gt; Google Chrome &gt; Extensions\r\n<\/code><\/pre>\r\n<p><strong>Politika Ad\u0131:<\/strong> <code>Configure extension installation blocklist<\/code><\/p>\r\n<p><strong>Yap\u0131land\u0131rma:<\/strong><\/p>\r\n<ol>\r\n<li>Politikay\u0131 <strong>Enabled<\/strong> yap\u0131n<\/li>\r\n<li>\"Show...\" butonuna t\u0131klay\u0131n<\/li>\r\n<li>Listeye <code>*<\/code> (y\u0131ld\u0131z) karakteri ekleyin<\/li>\r\n<li>OK ile kaydedin<\/li>\r\n<\/ol>\r\n<p><strong>Anlam\u0131:<\/strong> <code>*<\/code> karakteri t&uuml;m eklentileri engeller. Bu wildcard, herhangi bir eklenti ID'siyle e\u015fle\u015fir.<\/p>\r\n<p><strong>PowerShell ile Yap\u0131land\u0131rma:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Registry anahtar\u0131n\u0131 olu\u015ftur\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallBlocklist\"\r\nNew-Item -Path $regPath -Force\r\n\r\n# T&uuml;m eklentileri engelle\r\nSet-ItemProperty -Path $regPath -Name \"1\" -Value \"*\" -Type String\r\n<\/code><\/pre>\r\n<p><strong>Registry De\u011feri:<\/strong><\/p>\r\n<pre><code>[HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallBlocklist]\r\n\"1\"=\"*\"\r\n<\/code><\/pre>\r\n<h3>Do\u011frulama<\/h3>\r\n<p>Kullan\u0131c\u0131 bilgisayar\u0131nda test:<\/p>\r\n<pre><code>1. chrome:\/\/policy a&ccedil;\u0131n\r\n2. \"ExtensionInstallBlocklist\" politikas\u0131n\u0131 aray\u0131n\r\n3. Value: \"*\" olarak g&ouml;r&uuml;nmeli\r\n4. Status: OK\r\n<\/code><\/pre>\r\n<h2>\u2705 Ad\u0131m 5: Belirli Eklentilere \u0130zin Verme<\/h2>\r\n<h3>Configure Extension Installation Allowlist<\/h3>\r\n<p>Baz\u0131 eklentiler i\u015f s&uuml;re&ccedil;leri i&ccedil;in gerekli olabilir. Bu eklentilere izin vermek i&ccedil;in:<\/p>\r\n<p><strong>Politika Yolu:<\/strong><\/p>\r\n<pre><code>Computer Configuration &gt; Policies &gt; Administrative Templates &gt; Google &gt; Google Chrome &gt; Extensions\r\n<\/code><\/pre>\r\n<p><strong>Politika Ad\u0131:<\/strong> <code>Configure extension installation allowlist<\/code><\/p>\r\n<p><strong>Yap\u0131land\u0131rma:<\/strong><\/p>\r\n<ol>\r\n<li>Politikay\u0131 <strong>Enabled<\/strong> yap\u0131n<\/li>\r\n<li>\"Show...\" butonuna t\u0131klay\u0131n<\/li>\r\n<li>\u0130zin vermek istedi\u011finiz eklentilerin ID'lerini ekleyin<\/li>\r\n<li>OK ile kaydedin<\/li>\r\n<\/ol>\r\n<h3>Eklenti ID'si Nas\u0131l Bulunur?<\/h3>\r\n<p><strong>Y&ouml;ntem 1: Chrome Web Store<\/strong><\/p>\r\n<pre><code>1. Chrome Web Store'da eklentiyi a&ccedil;\u0131n\r\n2. URL'deki ID'yi kopyalay\u0131n\r\n   &Ouml;rnek: https:\/\/chrome.google.com\/webstore\/detail\/eklenti-adi\/XXXXX\r\n   XXXXX k\u0131sm\u0131 eklenti ID'sidir\r\n<\/code><\/pre>\r\n<p><strong>Y&ouml;ntem 2: chrome:\/\/extensions<\/strong><\/p>\r\n<pre><code>1. Chrome'da chrome:\/\/extensions a&ccedil;\u0131n\r\n2. Sa\u011f &uuml;stten \"Developer mode\" aktif edin\r\n3. Her eklentinin alt\u0131nda ID g&ouml;r&uuml;n&uuml;r\r\n<\/code><\/pre>\r\n<p><strong>Y&ouml;ntem 3: Eklenti Klas&ouml;r&uuml;<\/strong><\/p>\r\n<pre><code>C:\\Users\\\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\\r\n<\/code><\/pre>\r\n<h3>&Ouml;rnek \u0130zin Verilen Eklentiler<\/h3>\r\n<p><strong>Microsoft Office Eklentisi:<\/strong><\/p>\r\n<pre><code>ID: ndjpnladcallmjemlbaebfadecfhkepb\r\n<\/code><\/pre>\r\n<p><strong>LastPass:<\/strong><\/p>\r\n<pre><code>ID: hdokiejnpimakedhajhdlcegeplioahd\r\n<\/code><\/pre>\r\n<p><strong>Grammarly:<\/strong><\/p>\r\n<pre><code>ID: kbfnbcaeplbcioakkpcpgfkobkghlhen\r\n<\/code><\/pre>\r\n<p><strong>uBlock Origin:<\/strong><\/p>\r\n<pre><code>ID: cjpalhdlnbpafiamejdnhcphjbkeiagm\r\n<\/code><\/pre>\r\n<p><strong>Cisco WebEx Extension:<\/strong><\/p>\r\n<pre><code>ID: jlhmfgmfgeifomenelglieieghnjghma\r\n<\/code><\/pre>\r\n<p><strong>&Ouml;zel \u015eirket \u0130&ccedil;i Eklenti:<\/strong><\/p>\r\n<pre><code>ID: abcdefghijklmnopqrstuvwxyz123456\r\n<\/code><\/pre>\r\n<h3>GPO Konfig&uuml;rasyonu<\/h3>\r\n<p><strong>Liste &Ouml;rne\u011fi:<\/strong><\/p>\r\n<pre><code>ndjpnladcallmjemlbaebfadecfhkepb    # Office\r\nhdokiejnpimakedhajhdlcegeplioahd    # LastPass\r\njlhmfgmfgeifomenelglieieghnjghma    # WebEx\r\n<\/code><\/pre>\r\n<p><strong>PowerShell ile Yap\u0131land\u0131rma:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Registry anahtar\u0131n\u0131 olu\u015ftur\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallAllowlist\"\r\nNew-Item -Path $regPath -Force\r\n\r\n# \u0130zin verilen eklentileri ekle\r\nSet-ItemProperty -Path $regPath -Name \"1\" -Value \"ndjpnladcallmjemlbaebfadecfhkepb\" -Type String\r\nSet-ItemProperty -Path $regPath -Name \"2\" -Value \"hdokiejnpimakedhajhdlcegeplioahd\" -Type String\r\nSet-ItemProperty -Path $regPath -Name \"3\" -Value \"jlhmfgmfgeifomenelglieieghnjghma\" -Type String\r\n<\/code><\/pre>\r\n<p><strong>Registry De\u011ferleri:<\/strong><\/p>\r\n<pre><code>[HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallAllowlist]\r\n\"1\"=\"ndjpnladcallmjemlbaebfadecfhkepb\"\r\n\"2\"=\"hdokiejnpimakedhajhdlcegeplioahd\"\r\n\"3\"=\"jlhmfgmfgeifomenelglieieghnjghma\"\r\n<\/code><\/pre>\r\n<h3>Zorunlu Eklenti Y&uuml;kleme (Opsiyonel)<\/h3>\r\n<p>Belirli eklentilerin otomatik y&uuml;klenmesini zorunlu k\u0131lmak i&ccedil;in:<\/p>\r\n<p><strong>Politika:<\/strong> <code>Configure the list of force-installed apps and extensions<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Zorunlu eklenti listesi\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallForcelist\"\r\nNew-Item -Path $regPath -Force\r\n\r\n# &Ouml;rnek: G&uuml;venlik eklentisini zorla y&uuml;kle\r\nSet-ItemProperty -Path $regPath -Name \"1\" -Value \"eklenti-id;https:\/\/clients2.google.com\/service\/update2\/crx\" -Type String\r\n<\/code><\/pre>\r\n<h2>\ud83d\udc64 Ad\u0131m 6: Oturum A&ccedil;ma Y&ouml;netimi<\/h2>\r\n<h3>Browser Sign-in Settings<\/h3>\r\n<p><strong>Politika Yolu:<\/strong><\/p>\r\n<pre><code>Computer Configuration &gt; Policies &gt; Administrative Templates &gt; Google &gt; Google Chrome\r\n<\/code><\/pre>\r\n<p><strong>Politika Ad\u0131:<\/strong> <code>Browser sign-in settings<\/code><\/p>\r\n<h3>Oturum A&ccedil;ma Se&ccedil;enekleri<\/h3>\r\n<p><strong>0 - Oturum A&ccedil;ma Devre D\u0131\u015f\u0131<\/strong><\/p>\r\n<pre><code>Kullan\u0131c\u0131lar Chrome'da Google hesab\u0131yla oturum a&ccedil;amaz\r\nSenkronizasyon tamamen engellenir\r\n<\/code><\/pre>\r\n<p><strong>1 - Oturum A&ccedil;ma Etkin, Senkronizasyon Devre D\u0131\u015f\u0131<\/strong><\/p>\r\n<pre><code>Kullan\u0131c\u0131lar oturum a&ccedil;abilir ancak ayarlar senkronize olmaz\r\n\u015eahsi ayarlar \u015firket bilgisayar\u0131na gelmez\r\n<\/code><\/pre>\r\n<p><strong>2 - Oturum A&ccedil;ma Zorunlu (&Ouml;nerilmez)<\/strong><\/p>\r\n<pre><code>Kullan\u0131c\u0131lar Chrome'u kullanmak i&ccedil;in oturum a&ccedil;mak zorunda\r\nKurumsal Google Workspace kullan\u0131m\u0131 i&ccedil;in uygundur\r\n<\/code><\/pre>\r\n<h3>&Ouml;nerilen Yap\u0131land\u0131rma: Senkronizasyon Kontrol&uuml;<\/h3>\r\n<p><strong>1. Oturum A&ccedil;maya \u0130zin Ver, Ancak Senkronizasyonu Kontrol Et:<\/strong><\/p>\r\n<pre><code>Browser sign-in settings = 1 (Oturum a&ccedil;ma etkin)\r\nEnable syncing = Disabled (Senkronizasyon kapal\u0131)\r\n<\/code><\/pre>\r\n<p><strong>2. Veya Tamamen Engelle:<\/strong><\/p>\r\n<pre><code>Browser sign-in settings = 0 (Oturum a&ccedil;ma kapal\u0131)\r\n<\/code><\/pre>\r\n<p><strong>PowerShell Yap\u0131land\u0131rmas\u0131:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Oturum a&ccedil;may\u0131 engelle\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\"\r\nSet-ItemProperty -Path $regPath -Name \"BrowserSignin\" -Value 0 -Type DWord\r\n\r\n# Veya oturum a&ccedil;maya izin ver ama senkronizasyonu kapat\r\nSet-ItemProperty -Path $regPath -Name \"BrowserSignin\" -Value 1 -Type DWord\r\nSet-ItemProperty -Path $regPath -Name \"SyncDisabled\" -Value 1 -Type DWord\r\n<\/code><\/pre>\r\n<h3>Senkronizasyon Detay Kontrol&uuml;<\/h3>\r\n<p>Belirli senkronizasyon t&uuml;rlerini kontrol edin:<\/p>\r\n<p><strong>Politika:<\/strong> <code>Sync types<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Sadece \u015fifre senkronizasyonunu kapat\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\"\r\nSet-ItemProperty -Path $regPath -Name \"PasswordManagerEnabled\" -Value 0 -Type DWord\r\n\r\n# Eklenti senkronizasyonunu kapat\r\nSet-ItemProperty -Path $regPath -Name \"SyncTypesListDisabled\" -Value \"extensions\" -Type String\r\n\r\n# Bookmark senkronizasyonuna izin ver\r\nSet-ItemProperty -Path $regPath -Name \"SyncTypesListDisabled\" -Value \"bookmarks\" -Type String\r\n<\/code><\/pre>\r\n<h2>\ud83d\udd10 Ek G&uuml;venlik Politikalar\u0131<\/h2>\r\n<h3>1. Gizli Mod (Incognito) Kontrol&uuml;<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Incognito mode availability<\/code><\/p>\r\n<pre><code>Computer Configuration &gt; Google &gt; Google Chrome\r\n<\/code><\/pre>\r\n<p><strong>Se&ccedil;enekler:<\/strong><\/p>\r\n<ul>\r\n<li>0: \u0130zin ver<\/li>\r\n<li>1: Engelle<\/li>\r\n<li>2: Sadece gizli mod zorla<\/li>\r\n<\/ul>\r\n<p><strong>&Ouml;nerilen:<\/strong> 0 veya 1 (\u0130\u015f politikas\u0131na g&ouml;re)<\/p>\r\n<pre><code class=\"language-powershell\">Set-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"IncognitoModeAvailability\" -Value 1 -Type DWord\r\n<\/code><\/pre>\r\n<h3>2. Proxy Ayarlar\u0131 Kontrol&uuml;<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Proxy settings<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Kullan\u0131c\u0131lar\u0131n proxy ayarlar\u0131n\u0131 de\u011fi\u015ftirmesini engelle\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"ProxyMode\" -Value \"system\" -Type String\r\n\r\n# Veya belirli proxy sunucusu zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"ProxyServer\" -Value \"proxy.sirketadi.local:8080\" -Type String\r\n<\/code><\/pre>\r\n<h3>3. Developer Tools Engelleme<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Developer Tools availability<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Developer tools tamamen engelle\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DeveloperToolsAvailability\" -Value 2 -Type DWord\r\n<\/code><\/pre>\r\n<p><strong>De\u011ferler:<\/strong><\/p>\r\n<ul>\r\n<li>0: \u0130zin ver<\/li>\r\n<li>1: Enterprise politikas\u0131 taraf\u0131ndan y&uuml;klenmediyse engelle<\/li>\r\n<li>2: Tamamen engelle<\/li>\r\n<\/ul>\r\n<h3>4. URL Filtreleme<\/h3>\r\n<p><strong>Politika:<\/strong> <code>URL blocklist<\/code> ve <code>URL allowlist<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Belirli URL'leri engelle\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\URLBlocklist\"\r\nNew-Item -Path $regPath -Force\r\nSet-ItemProperty -Path $regPath -Name \"1\" -Value \"*.torrent\" -Type String\r\nSet-ItemProperty -Path $regPath -Name \"2\" -Value \"*:\/\/proxy-site.com\/*\" -Type String\r\nSet-ItemProperty -Path $regPath -Name \"3\" -Value \"*:\/\/vpn-service.com\/*\" -Type String\r\n<\/code><\/pre>\r\n<h3>5. Download K\u0131s\u0131tlamalar\u0131<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Downloads<\/code> ayarlar\u0131<\/p>\r\n<pre><code class=\"language-powershell\"># \u0130ndirme klas&ouml;r&uuml;n&uuml; zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DownloadDirectory\" -Value \"C:\\CompanyDownloads\" -Type String\r\n\r\n# Belirli dosya t&uuml;rlerini engelle\r\n$regPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\DownloadRestrictions\"\r\nNew-Item -Path $regPath -Force\r\nSet-ItemProperty -Path $regPath -Name \"1\" -Value \".exe\" -Type String\r\nSet-ItemProperty -Path $regPath -Name \"2\" -Value \".bat\" -Type String\r\n<\/code><\/pre>\r\n<h3>6. Auto-fill ve \u015eifre Y&ouml;neticisi<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Password Manager<\/code> ve <code>AutoFill<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># \u015eifre kaydetmeyi engelle\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"PasswordManagerEnabled\" -Value 0 -Type DWord\r\n\r\n# AutoFill'i kapat\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"AutoFillEnabled\" -Value 0 -Type DWord\r\n<\/code><\/pre>\r\n<h3>7. Safe Browsing Zorla<\/h3>\r\n<p><strong>Politika:<\/strong> <code>Safe Browsing Protection Level<\/code><\/p>\r\n<pre><code class=\"language-powershell\"># Enhanced protection zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"SafeBrowsingProtectionLevel\" -Value 2 -Type DWord\r\n<\/code><\/pre>\r\n<p><strong>De\u011ferler:<\/strong><\/p>\r\n<ul>\r\n<li>0: Kapal\u0131 (&Ouml;nerilmez)<\/li>\r\n<li>1: Standard protection<\/li>\r\n<li>2: Enhanced protection (&Ouml;nerilen)<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udccb Kapsaml\u0131 GPO \u015eablonu<\/h2>\r\n<h3>PowerShell Script: T&uuml;m Ayarlar\u0131 Uygula<\/h3>\r\n<pre><code class=\"language-powershell\"># Chrome G&uuml;venlik GPO Yap\u0131land\u0131rmas\u0131\r\n# Y&ouml;netici yetkisiyle &ccedil;al\u0131\u015ft\u0131r\u0131n\r\n\r\n$chromeRegPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\"\r\n\r\n# Ana registry yolunu olu\u015ftur\r\nif (!(Test-Path $chromeRegPath)) {\r\n    New-Item -Path $chromeRegPath -Force\r\n}\r\n\r\n# 1. T&uuml;m eklentileri engelle\r\n$blocklistPath = \"$chromeRegPath\\ExtensionInstallBlocklist\"\r\nNew-Item -Path $blocklistPath -Force\r\nSet-ItemProperty -Path $blocklistPath -Name \"1\" -Value \"*\" -Type String\r\n\r\n# 2. \u0130zin verilen eklentiler\r\n$allowlistPath = \"$chromeRegPath\\ExtensionInstallAllowlist\"\r\nNew-Item -Path $allowlistPath -Force\r\nSet-ItemProperty -Path $allowlistPath -Name \"1\" -Value \"ndjpnladcallmjemlbaebfadecfhkepb\" -Type String  # Office\r\nSet-ItemProperty -Path $allowlistPath -Name \"2\" -Value \"hdokiejnpimakedhajhdlcegeplioahd\" -Type String  # LastPass\r\n\r\n# 3. Oturum a&ccedil;may\u0131 engelle\r\nSet-ItemProperty -Path $chromeRegPath -Name \"BrowserSignin\" -Value 0 -Type DWord\r\n\r\n# 4. Senkronizasyonu kapat\r\nSet-ItemProperty -Path $chromeRegPath -Name \"SyncDisabled\" -Value 1 -Type DWord\r\n\r\n# 5. Gizli modu engelle\r\nSet-ItemProperty -Path $chromeRegPath -Name \"IncognitoModeAvailability\" -Value 1 -Type DWord\r\n\r\n# 6. Developer tools engelle\r\nSet-ItemProperty -Path $chromeRegPath -Name \"DeveloperToolsAvailability\" -Value 2 -Type DWord\r\n\r\n# 7. \u015eifre y&ouml;neticisini kapat\r\nSet-ItemProperty -Path $chromeRegPath -Name \"PasswordManagerEnabled\" -Value 0 -Type DWord\r\n\r\n# 8. AutoFill'i kapat\r\nSet-ItemProperty -Path $chromeRegPath -Name \"AutoFillEnabled\" -Value 0 -Type DWord\r\n\r\n# 9. Safe Browsing enhanced\r\nSet-ItemProperty -Path $chromeRegPath -Name \"SafeBrowsingProtectionLevel\" -Value 2 -Type DWord\r\n\r\n# 10. Proxy ayarlar\u0131n\u0131 sistem ayarlar\u0131ndan al\r\nSet-ItemProperty -Path $chromeRegPath -Name \"ProxyMode\" -Value \"system\" -Type String\r\n\r\nWrite-Host \"Chrome g&uuml;venlik politikalar\u0131 ba\u015far\u0131yla uyguland\u0131!\" -ForegroundColor Green\r\nWrite-Host \"De\u011fi\u015fikliklerin etkili olmas\u0131 i&ccedil;in gpupdate \/force &ccedil;al\u0131\u015ft\u0131r\u0131n.\" -ForegroundColor Yellow\r\n<\/code><\/pre>\r\n<h3>GPO Apply Script<\/h3>\r\n<pre><code class=\"language-powershell\"># GPO'yu zorla g&uuml;ncelle\r\ngpupdate \/force\r\n\r\n# Chrome'u yeniden ba\u015flat (t&uuml;m kullan\u0131c\u0131lar i&ccedil;in)\r\nGet-Process chrome -ErrorAction SilentlyContinue | Stop-Process -Force\r\n\r\nWrite-Host \"GPO uyguland\u0131. Kullan\u0131c\u0131lar Chrome'u yeniden ba\u015flatmal\u0131.\" -ForegroundColor Green\r\n<\/code><\/pre>\r\n<h2>\ud83e\uddea Test ve Do\u011frulama<\/h2>\r\n<h3>1. Politika Uygulama Kontrol&uuml;<\/h3>\r\n<p><strong>Bilgisayarda GPO Durumu:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># RSoP (Resultant Set of Policy)\r\ngpresult \/h C:\\GPResult.html\r\ngpresult \/r \/scope:computer\r\n\r\n# Chrome politikalar\u0131n\u0131 kontrol et\r\nGet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" | Format-List\r\n<\/code><\/pre>\r\n<p><strong>Chrome Politika Sayfas\u0131:<\/strong><\/p>\r\n<pre><code>1. Chrome'u a&ccedil;\u0131n\r\n2. Adres &ccedil;ubu\u011funa yaz\u0131n: chrome:\/\/policy\r\n3. \"Reload policies\" butonuna t\u0131klay\u0131n\r\n4. T&uuml;m politikalar ve durumlar\u0131 g&ouml;r&uuml;necektir\r\n<\/code><\/pre>\r\n<h3>2. Eklenti Y&uuml;kleme Testi<\/h3>\r\n<p><strong>Test Senaryolar\u0131:<\/strong><\/p>\r\n<ol>\r\n<li>\r\n<p><strong>\u0130zinsiz Eklenti:<\/strong><\/p>\r\n<ul>\r\n<li>Chrome Web Store'da random bir eklenti bulmaya &ccedil;al\u0131\u015f\u0131n<\/li>\r\n<li>\"Add to Chrome\" butonuna t\u0131klay\u0131n<\/li>\r\n<li>\"This extension is blocked by the administrator\" mesaj\u0131 g&ouml;rmeli<\/li>\r\n<\/ul>\r\n<\/li>\r\n<li>\r\n<p><strong>\u0130zinli Eklenti:<\/strong><\/p>\r\n<ul>\r\n<li>Allowlist'te olan bir eklentiyi y&uuml;klemeyi deneyin<\/li>\r\n<li>Ba\u015far\u0131yla y&uuml;klenebilmeli<\/li>\r\n<\/ul>\r\n<\/li>\r\n<li>\r\n<p><strong>Mevcut Eklentiler:<\/strong><\/p>\r\n<ul>\r\n<li>Politika &ouml;ncesi y&uuml;klenmi\u015f eklentiler otomatik kald\u0131r\u0131lmal\u0131<\/li>\r\n<li>chrome:\/\/extensions sayfas\u0131nda g&ouml;r&uuml;nmemeli<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ol>\r\n<h3>3. Oturum A&ccedil;ma Testi<\/h3>\r\n<pre><code>1. Chrome Settings &gt; Sign in to Chrome\r\n2. BrowserSignin = 0 ise buton g&ouml;r&uuml;nmemeli\r\n3. BrowserSignin = 1 ise oturum a&ccedil;abilmeli ama sync kapal\u0131 olmal\u0131\r\n<\/code><\/pre>\r\n<h3>4. Senkronizasyon Testi<\/h3>\r\n<pre><code>1. Google hesab\u0131yla oturum a&ccedil;\u0131n (izin verilmi\u015fse)\r\n2. Settings &gt; Sync a&ccedil;\u0131k de\u011filse politika &ccedil;al\u0131\u015f\u0131yor\r\n3. \u015eahsi bilgisayardaki eklentiler gelmemeli\r\n<\/code><\/pre>\r\n<h2>\ud83d\udcca Monitoring ve Raporlama<\/h2>\r\n<h3>Event Log \u0130zleme<\/h3>\r\n<pre><code class=\"language-powershell\"># Chrome policy uygulanma eventlerini izle\r\nGet-WinEvent -FilterHashtable @{\r\n    LogName='Application';\r\n    ProviderName='Group Policy*'\r\n} -MaxEvents 50 | Where-Object {$_.Message -like '*Chrome*'}\r\n<\/code><\/pre>\r\n<h3>Compliance Raporu<\/h3>\r\n<pre><code class=\"language-powershell\"># Domain'deki t&uuml;m bilgisayarlarda Chrome politikalar\u0131n\u0131 kontrol et\r\n$computers = Get-ADComputer -Filter * -SearchBase \"OU=Workstations,DC=sirketadi,DC=local\"\r\n\r\nforeach ($computer in $computers) {\r\n    $regPath = \"\\\\$($computer.Name)\\HKLM\\SOFTWARE\\Policies\\Google\\Chrome\"\r\n    \r\n    try {\r\n        $policies = Get-ItemProperty -Path $regPath -ErrorAction Stop\r\n        \r\n        [PSCustomObject]@{\r\n            Computer = $computer.Name\r\n            BrowserSignin = $policies.BrowserSignin\r\n            SyncDisabled = $policies.SyncDisabled\r\n            Status = \"Compliant\"\r\n        }\r\n    }\r\n    catch {\r\n        [PSCustomObject]@{\r\n            Computer = $computer.Name\r\n            Status = \"Non-Compliant - Policy not applied\"\r\n        }\r\n    }\r\n}\r\n<\/code><\/pre>\r\n<h3>Dashboard (Optional - PowerBI\/Excel Export)<\/h3>\r\n<pre><code class=\"language-powershell\"># CSV export for reporting\r\n$report | Export-Csv -Path \"C:\\Reports\\ChromeCompliance_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation\r\n<\/code><\/pre>\r\n<h2>\ud83c\udfaf Best Practices ve &Ouml;neriler<\/h2>\r\n<h3>1. A\u015famal\u0131 Deployment<\/h3>\r\n<p><strong>Faz 1: Pilot Grup (1 Hafta)<\/strong><\/p>\r\n<pre><code>- IT departman\u0131 bilgisayarlar\u0131\r\n- 5-10 test kullan\u0131c\u0131s\u0131\r\n- Sorun tespiti ve d&uuml;zeltme\r\n<\/code><\/pre>\r\n<p><strong>Faz 2: Departman Bazl\u0131 (2 Hafta)<\/strong><\/p>\r\n<pre><code>- Her departman i&ccedil;in ayr\u0131 GPO\r\n- Departman &ouml;zel eklenti ihtiya&ccedil;lar\u0131n\u0131 belirle\r\n- Kullan\u0131c\u0131 feedback topla\r\n<\/code><\/pre>\r\n<p><strong>Faz 3: \u015eirket Geneli (1 Hafta)<\/strong><\/p>\r\n<pre><code>- T&uuml;m workstation OU'ya link\r\n- 7\/24 destek haz\u0131r\r\n- Rollback plan\u0131 haz\u0131r\r\n<\/code><\/pre>\r\n<h3>2. \u0130leti\u015fim Stratejisi<\/h3>\r\n<p><strong>Kullan\u0131c\u0131 Bildirimi:<\/strong><\/p>\r\n<pre><code>Konu: Chrome G&uuml;venlik G&uuml;ncellemesi\r\n\r\nDe\u011ferli &Ccedil;al\u0131\u015fanlar,\r\n\r\n[Tarih] itibariyle Chrome browser g&uuml;venlik politikalar\u0131 g&uuml;ncellenecektir.\r\n\r\nDe\u011fi\u015fiklikler:\r\n- Chrome eklentileri k\u0131s\u0131tlanacakt\u0131r\r\n- Sadece onayl\u0131 eklentiler kullan\u0131labilecektir\r\n- \u015eahsi Google hesab\u0131 senkronizasyonu engellenecektir\r\n\r\n\u0130\u015f i&ccedil;in gerekli bir eklenti varsa IT departman\u0131na bildiriniz.\r\n\r\nTe\u015fekk&uuml;rler,\r\nIT Departman\u0131\r\n<\/code><\/pre>\r\n<h3>3. Exception Handling<\/h3>\r\n<p><strong>Yetkili Kullan\u0131c\u0131lar:<\/strong> Developer'lar veya &ouml;zel yetki gerektiren kullan\u0131c\u0131lar i&ccedil;in:<\/p>\r\n<pre><code class=\"language-powershell\"># &Ouml;zel Security Group olu\u015ftur\r\nNew-ADGroup -Name \"Chrome-Unrestricted-Users\" -GroupScope Global\r\n\r\n# GPO'da Security Filtering\r\nSet-GPPermission -Name \"Chrome Security Policy\" `\r\n    -TargetName \"Chrome-Unrestricted-Users\" `\r\n    -TargetType Group `\r\n    -PermissionLevel GpoApply `\r\n    -Replace\r\n<\/code><\/pre>\r\n<p><strong>Alternatif: Loopback Processing<\/strong><\/p>\r\n<pre><code>GPO &gt; Computer Configuration &gt; Policies &gt; Administrative Templates &gt; System &gt; Group Policy\r\nEnable \"User Group Policy loopback processing mode\" = Replace\r\n<\/code><\/pre>\r\n<h3>4. Documentation<\/h3>\r\n<p><strong>Her GPO i&ccedil;in dok&uuml;mantasyon olu\u015fturun:<\/strong><\/p>\r\n<pre><code class=\"language-markdown\"># Chrome Security Policy GPO\r\n\r\n## Purpose\r\nChrome g&uuml;venlik politikalar\u0131n\u0131 domain bilgisayarlar\u0131na uygular\r\n\r\n## Applied To\r\n- OU: Workstations\r\n- Security Group: Domain Computers\r\n\r\n## Exceptions\r\n- Security Group: Chrome-Unrestricted-Users (Developers)\r\n\r\n## Policies Applied\r\n- Extension Blocklist: *\r\n- Extension Allowlist: [Liste]\r\n- Browser Sign-in: Disabled\r\n- Sync: Disabled\r\n\r\n## Contact\r\nIT Security Team - security@sirketadi.com\r\n\r\n## Last Updated\r\n2025-01-15\r\n\r\n## Change Log\r\n- 2025-01-15: Initial deployment\r\n- 2025-01-20: Added Office extension to allowlist\r\n<\/code><\/pre>\r\n<h3>5. Backup ve Rollback Plan\u0131<\/h3>\r\n<p><strong>GPO Backup:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># T&uuml;m GPO'lar\u0131 yedekle\r\n$backupPath = \"C:\\GPOBackups\\$(Get-Date -Format 'yyyyMMdd')\"\r\nNew-Item -ItemType Directory -Path $backupPath -Force\r\n\r\nBackup-GPO -Name \"Chrome Security Policy\" -Path $backupPath\r\n\r\n# Veya t&uuml;m GPO'lar\u0131\r\nGet-GPO -All | ForEach-Object {\r\n    Backup-GPO -Name $_.DisplayName -Path $backupPath\r\n}\r\n<\/code><\/pre>\r\n<p><strong>Restore Plan\u0131:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># GPO'yu geri y&uuml;kle\r\nRestore-GPO -Name \"Chrome Security Policy\" -Path \"C:\\GPOBackups\\20250115\"\r\n\r\n# Veya yeni GPO olarak restore et\r\nImport-GPO -BackupId [GUID] -TargetName \"Chrome Security Policy - Restored\" -Path \"C:\\GPOBackups\\20250115\"\r\n<\/code><\/pre>\r\n<p><strong>Emergency Rollback:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># GPO linkini devre d\u0131\u015f\u0131 b\u0131rak\r\nSet-GPLink -Name \"Chrome Security Policy\" `\r\n    -Target \"OU=Workstations,DC=sirketadi,DC=local\" `\r\n    -LinkEnabled No\r\n\r\n# Bilgisayarlara hemen uygula\r\nInvoke-Command -ComputerName (Get-ADComputer -Filter * -SearchBase \"OU=Workstations,DC=sirketadi,DC=local\").Name -ScriptBlock {\r\n    gpupdate \/force\r\n}\r\n<\/code><\/pre>\r\n<h2>\ud83d\udd0d Troubleshooting<\/h2>\r\n<h3>Yayg\u0131n Sorunlar ve &Ccedil;&ouml;z&uuml;mleri<\/h3>\r\n<h4>1. Politikalar Uygulanm\u0131yor<\/h4>\r\n<p><strong>Sorun:<\/strong> Chrome'da chrome:\/\/policy sayfas\u0131 bo\u015f<\/p>\r\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># GPO replikasyonunu kontrol et\r\nrepadmin \/showrepl\r\n\r\n# Client'ta GPO update\r\ngpupdate \/force \/target:computer\r\n\r\n# Registry kontrol\r\nTest-Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\"\r\n\r\n# GPResult detayl\u0131 analiz\r\ngpresult \/h C:\\GPResult.html \/f\r\n<\/code><\/pre>\r\n<p><strong>GPO Uygulama S\u0131ras\u0131 Kontrol:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Hangi GPO'lar uygulan\u0131yor?\r\nGet-GPResultantSetOfPolicy -ReportType Html -Path C:\\RSoP.html\r\n<\/code><\/pre>\r\n<h4>2. Eklentiler Hala Y&uuml;klenebiliyor<\/h4>\r\n<p><strong>Sorun:<\/strong> Blocklist &ccedil;al\u0131\u015fm\u0131yor<\/p>\r\n<p><strong>Kontrol Listesi:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># 1. Registry de\u011ferini kontrol et\r\nGet-ItemProperty \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallBlocklist\"\r\n\r\n# 2. Chrome policy sayfas\u0131nda kontrol\r\n# chrome:\/\/policy &gt; ExtensionInstallBlocklist should show \"*\"\r\n\r\n# 3. User registry'sinde conflict var m\u0131?\r\nGet-ItemProperty \"HKCU:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallBlocklist\" -ErrorAction SilentlyContinue\r\n\r\n# 4. Chrome tamamen kapat\u0131l\u0131p a&ccedil;\u0131ld\u0131 m\u0131?\r\nGet-Process chrome | Stop-Process -Force\r\n<\/code><\/pre>\r\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># User level policy varsa temizle\r\nRemove-Item \"HKCU:\\SOFTWARE\\Policies\\Google\\Chrome\" -Recurse -Force -ErrorAction SilentlyContinue\r\n\r\n# Chrome cache temizle\r\nRemove-Item \"$env:LOCALAPPDATA\\Google\\Chrome\\User Data\\Default\\Extensions\" -Recurse -Force\r\n<\/code><\/pre>\r\n<h4>3. Allowlist Eklentileri Y&uuml;klenmiyor<\/h4>\r\n<p><strong>Sorun:<\/strong> \u0130zin verilen eklentiler y&uuml;klenemiyor<\/p>\r\n<p><strong>Debug:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># Allowlist registry kontrol\r\nGet-ItemProperty \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ExtensionInstallAllowlist\"\r\n\r\n# ID do\u011fru mu kontrol et\r\n# Chrome Web Store URL'sinden ID'yi do\u011frula\r\n<\/code><\/pre>\r\n<p><strong>Yayg\u0131n Hatalar:<\/strong><\/p>\r\n<ul>\r\n<li>\u274c Yanl\u0131\u015f ID: <code>eklenti-adi<\/code> yerine 32 karakterlik ID olmal\u0131<\/li>\r\n<li>\u274c Bo\u015fluk karakteri: ID'de bo\u015fluk olmamal\u0131<\/li>\r\n<li>\u274c Registry value ad\u0131: \"1\", \"2\", \"3\" \u015feklinde s\u0131ral\u0131 olmal\u0131<\/li>\r\n<\/ul>\r\n<p><strong>Do\u011fru Format:<\/strong><\/p>\r\n<pre><code>ExtensionInstallAllowlist\r\n\u251c\u2500\u2500 1 = \"abcdefghijklmnopqrstuvwxyz123456\"\r\n\u251c\u2500\u2500 2 = \"bcdefghijklmnopqrstuvwxyz1234567\"\r\n\u2514\u2500\u2500 3 = \"cdefghijklmnopqrstuvwxyz12345678\"\r\n<\/code><\/pre>\r\n<h4>4. Oturum A&ccedil;ma Hala Aktif<\/h4>\r\n<p><strong>Sorun:<\/strong> BrowserSignin=0 olmas\u0131na ra\u011fmen kullan\u0131c\u0131lar oturum a&ccedil;abiliyor<\/p>\r\n<p><strong>Kontrol:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># User ve Computer policy conflict\r\ngpresult \/r \/scope:computer\r\ngpresult \/r \/scope:user\r\n\r\n# Chrome profile kontrol\r\n$profilePath = \"$env:LOCALAPPDATA\\Google\\Chrome\\User Data\"\r\nGet-ChildItem $profilePath -Filter \"Preferences\" -Recurse\r\n<\/code><\/pre>\r\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># User policy'yi temizle\r\nRemove-Item \"HKCU:\\SOFTWARE\\Policies\\Google\\Chrome\" -Recurse -Force\r\n\r\n# Chrome profile s\u0131f\u0131rla\r\nRemove-Item \"$env:LOCALAPPDATA\\Google\\Chrome\\User Data\" -Recurse -Force\r\n\r\n# Loopback processing aktif et\r\nSet-GPRegistryValue -Name \"Chrome Security Policy\" `\r\n    -Key \"HKLM\\Software\\Policies\\Microsoft\\Windows\\System\" `\r\n    -ValueName \"UserPolicyMode\" `\r\n    -Type DWord `\r\n    -Value 2\r\n<\/code><\/pre>\r\n<h4>5. GPO &Ccedil;ak\u0131\u015fmalar\u0131<\/h4>\r\n<p><strong>Sorun:<\/strong> Birden fazla GPO Chrome ayarlar\u0131n\u0131 de\u011fi\u015ftirmeye &ccedil;al\u0131\u015f\u0131yor<\/p>\r\n<p><strong>Analiz:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># T&uuml;m Chrome GPO'lar\u0131n\u0131 listele\r\nGet-GPO -All | Where-Object {\r\n    $_ | Get-GPRegistryValue -Key \"HKLM\\Software\\Policies\\Google\\Chrome\" -ErrorAction SilentlyContinue\r\n}\r\n\r\n# GPO precedence kontrol\r\nGet-GPResultantSetOfPolicy -ReportType Html -Path C:\\GPOPrecedence.html\r\n<\/code><\/pre>\r\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong><\/p>\r\n<ul>\r\n<li>GPO priority ayarla (d&uuml;\u015f&uuml;k numara = y&uuml;ksek &ouml;ncelik)<\/li>\r\n<li>Enforce veya Block Inheritance kullan<\/li>\r\n<li>GPO'lar\u0131 consolidate et<\/li>\r\n<\/ul>\r\n<h4>6. Performance Sorunlar\u0131<\/h4>\r\n<p><strong>Sorun:<\/strong> GPO uygulanmas\u0131 &ccedil;ok uzun s&uuml;r&uuml;yor<\/p>\r\n<p><strong>Optimizasyon:<\/strong><\/p>\r\n<pre><code class=\"language-powershell\"># GPO processing s&uuml;resini &ouml;l&ccedil;\r\ngpupdate \/force \/wait:0\r\n\r\n# Event log kontrol\r\nGet-WinEvent -FilterHashtable @{\r\n    LogName='System'\r\n    ID=1502,1503\r\n} -MaxEvents 10\r\n\r\n# Network latency test\r\nTest-NetConnection dc01.sirketadi.local -Port 389\r\n<\/code><\/pre>\r\n<p><strong>\u0130yile\u015ftirmeler:<\/strong><\/p>\r\n<ul>\r\n<li>Sysvol replication kontrol<\/li>\r\n<li>GPO'lar\u0131 consolidate et<\/li>\r\n<li>WMI filtering kullan<\/li>\r\n<li>Loopback processing minimize et<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udcda Ek Chrome Politikalar\u0131<\/h2>\r\n<h3>Homepage ve Startup<\/h3>\r\n<pre><code class=\"language-powershell\"># Ana sayfa zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"HomepageLocation\" -Value \"https:\/\/intranet.sirketadi.com\" -Type String\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"HomepageIsNewTabPage\" -Value 0 -Type DWord\r\n\r\n# Ba\u015flang\u0131&ccedil; sayfalar\u0131\r\n$startupPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\RestoreOnStartupURLs\"\r\nNew-Item -Path $startupPath -Force\r\nSet-ItemProperty -Path $startupPath -Name \"1\" -Value \"https:\/\/intranet.sirketadi.com\" -Type String\r\nSet-ItemProperty -Path $startupPath -Name \"2\" -Value \"https:\/\/mail.sirketadi.com\" -Type String\r\n<\/code><\/pre>\r\n<h3>Search Engine Kontrol&uuml;<\/h3>\r\n<pre><code class=\"language-powershell\"># Arama motorunu Google zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DefaultSearchProviderEnabled\" -Value 1 -Type DWord\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DefaultSearchProviderName\" -Value \"Google\" -Type String\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DefaultSearchProviderSearchURL\" `\r\n    -Value \"https:\/\/www.google.com\/search?q={searchTerms}\" -Type String\r\n<\/code><\/pre>\r\n<h3>Certificate Management<\/h3>\r\n<pre><code class=\"language-powershell\"># \u015eirket sertifikalar\u0131n\u0131 g&uuml;venilir yap\r\n$certPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\CertificateTransparencyEnforcementDisabledForUrls\"\r\nNew-Item -Path $certPath -Force\r\nSet-ItemProperty -Path $certPath -Name \"1\" -Value \"*.sirketadi.com\" -Type String\r\n<\/code><\/pre>\r\n<h3>Bookmark Management<\/h3>\r\n<pre><code class=\"language-powershell\"># Bookmark d&uuml;zenlemeyi engelle\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"EditBookmarksEnabled\" -Value 0 -Type DWord\r\n\r\n# Managed bookmarks ekle\r\n$bookmarksPath = \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\\ManagedBookmarks\"\r\nNew-Item -Path $bookmarksPath -Force\r\n\r\n# JSON format i&ccedil;in\r\n$managedBookmarks = @\"\r\n[\r\n  {\r\n    \"name\": \"\u015eirket Portal\u0131\",\r\n    \"url\": \"https:\/\/portal.sirketadi.com\"\r\n  },\r\n  {\r\n    \"name\": \"IT Destek\",\r\n    \"url\": \"https:\/\/helpdesk.sirketadi.com\"\r\n  },\r\n  {\r\n    \"name\": \"\u015eirket \u0130&ccedil;i\",\r\n    \"children\": [\r\n      {\r\n        \"name\": \"\u0130K Portal\",\r\n        \"url\": \"https:\/\/hr.sirketadi.com\"\r\n      },\r\n      {\r\n        \"name\": \"Finans\",\r\n        \"url\": \"https:\/\/finance.sirketadi.com\"\r\n      }\r\n    ]\r\n  }\r\n]\r\n\"@\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"ManagedBookmarks\" -Value $managedBookmarks -Type String\r\n<\/code><\/pre>\r\n<h3>Print Restrictions<\/h3>\r\n<pre><code class=\"language-powershell\"># Print to PDF k\u0131s\u0131tla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"PrintingEnabled\" -Value 1 -Type DWord\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"PrintPdfAsImageEnabled\" -Value 0 -Type DWord\r\n\r\n# Default yaz\u0131c\u0131 zorla\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"DefaultPrinterSelection\" -Value \"\\\\print-server\\Company-Printer\" -Type String\r\n<\/code><\/pre>\r\n<h3>Screen Capture Protection<\/h3>\r\n<pre><code class=\"language-powershell\"># Ekran g&ouml;r&uuml;nt&uuml;s&uuml; korumas\u0131 (DLP i&ccedil;in)\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"ScreenCaptureAllowed\" -Value 0 -Type DWord\r\n<\/code><\/pre>\r\n<h2>\ud83c\udf93 E\u011fitim ve User Adoption<\/h2>\r\n<h3>End User Training Checklist<\/h3>\r\n<p><strong>Kullan\u0131c\u0131 E\u011fitimi Konular\u0131:<\/strong><\/p>\r\n<ol>\r\n<li>\u2705 Neden bu de\u011fi\u015fiklikler yap\u0131l\u0131yor? (G&uuml;venlik)<\/li>\r\n<li>\u2705 Hangi eklentiler kullan\u0131labilir?<\/li>\r\n<li>\u2705 Yeni eklenti talebi nas\u0131l yap\u0131l\u0131r?<\/li>\r\n<li>\u2705 \u015eahsi Chrome profili nas\u0131l y&ouml;netilir?<\/li>\r\n<li>\u2705 Sorun ya\u015fand\u0131\u011f\u0131nda ne yap\u0131lmal\u0131?<\/li>\r\n<\/ol>\r\n<h3>Quick Reference Card<\/h3>\r\n<pre><code>\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\r\n\u2551     CHROME G&Uuml;VENL\u0130K POL\u0130T\u0130KALARI            \u2551\r\n\u2560\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2563\r\n\u2551                                              \u2551\r\n\u2551  \u274c YAPAMAYACAKLARINIZ:                      \u2551\r\n\u2551  &bull; \u0130zinsiz eklenti y&uuml;klemek                  \u2551\r\n\u2551  &bull; VPN eklentisi kullanmak                   \u2551\r\n\u2551  &bull; \u015eahsi hesap senkronize etmek              \u2551\r\n\u2551  &bull; Proxy ayarlar\u0131n\u0131 de\u011fi\u015ftirmek              \u2551\r\n\u2551                                              \u2551\r\n\u2551  \u2705 YAPAB\u0130LECEKLER\u0130N\u0130Z:                      \u2551\r\n\u2551  &bull; Onayl\u0131 eklentileri kullanmak              \u2551\r\n\u2551  &bull; Bookmark kaydetmek                        \u2551\r\n\u2551  &bull; Normal browsing yapmak                    \u2551\r\n\u2551  &bull; PDF indirmek                              \u2551\r\n\u2551                                              \u2551\r\n\u2551  \ud83d\udcde DESTEK:                                  \u2551\r\n\u2551  &bull; Email: it-support@sirketadi.com          \u2551\r\n\u2551  &bull; Tel: 444 5 XXX                           \u2551\r\n\u2551  &bull; Ticket: helpdesk.sirketadi.com           \u2551\r\n\u2551                                              \u2551\r\n\u255a\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255d\r\n<\/code><\/pre>\r\n<h2>\ud83d\udcca Reporting ve Analytics<\/h2>\r\n<h3>Monthly Compliance Report<\/h3>\r\n<pre><code class=\"language-powershell\"># Ayl\u0131k compliance raporu\r\n$report = @{\r\n    Month = (Get-Date -Format 'MMMM yyyy')\r\n    TotalComputers = 0\r\n    CompliantComputers = 0\r\n    NonCompliantComputers = 0\r\n    BlockedExtensions = 0\r\n    AllowedExtensions = 0\r\n}\r\n\r\n# T&uuml;m bilgisayarlar\u0131 tara\r\n$computers = Get-ADComputer -Filter * -SearchBase \"OU=Workstations,DC=sirketadi,DC=local\"\r\n$report.TotalComputers = $computers.Count\r\n\r\nforeach ($computer in $computers) {\r\n    $regPath = \"\\\\$($computer.Name)\\HKLM\\SOFTWARE\\Policies\\Google\\Chrome\"\r\n    \r\n    try {\r\n        $policies = Get-ItemProperty -Path $regPath -ErrorAction Stop\r\n        \r\n        if ($policies.BrowserSignin -eq 0 -and $policies.SyncDisabled -eq 1) {\r\n            $report.CompliantComputers++\r\n        } else {\r\n            $report.NonCompliantComputers++\r\n        }\r\n    }\r\n    catch {\r\n        $report.NonCompliantComputers++\r\n    }\r\n}\r\n\r\n# Event log'dan istatistik\r\n$blockedEvents = Get-WinEvent -FilterHashtable @{\r\n    LogName='Application'\r\n    ProviderName='Chrome'\r\n} -MaxEvents 1000 | Where-Object {$_.Message -like '*extension blocked*'}\r\n\r\n$report.BlockedExtensions = $blockedEvents.Count\r\n\r\n# Rapor olu\u015ftur\r\n$reportPath = \"C:\\Reports\\ChromeCompliance_$(Get-Date -Format 'yyyyMM').html\"\r\n\r\n$html = @\"\r\n\r\n\r\n    \r\n    \r\n\r\n\r\n    <\/code><\/pre>\r\n<h1>Chrome Compliance Report<\/h1>\r\n<pre><code class=\"language-powershell\">\r\n    <\/code><\/pre>\r\n<h2>$($report.Month)<\/h2>\r\n<pre><code class=\"language-powershell\">\r\n    \r\n    <\/code><\/pre>\r\n<table>\r\n<tbody>\r\n<tr>\r\n<th>Metric<\/th>\r\n<th>Value<\/th>\r\n<th>Percentage<\/th>\r\n<\/tr>\r\n<tr>\r\n<td>Total Computers<\/td>\r\n<td>$($report.TotalComputers)<\/td>\r\n<td>100%<\/td>\r\n<\/tr>\r\n<tr class=\"compliant\">\r\n<td>Compliant Computers<\/td>\r\n<td>$($report.CompliantComputers)<\/td>\r\n<td>$('{0:P2}' -f ($report.CompliantComputers \/ $report.TotalComputers))<\/td>\r\n<\/tr>\r\n<tr class=\"non-compliant\">\r\n<td>Non-Compliant Computers<\/td>\r\n<td>$($report.NonCompliantComputers)<\/td>\r\n<td>$('{0:P2}' -f ($report.NonCompliantComputers \/ $report.TotalComputers))<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>Blocked Extension Attempts<\/td>\r\n<td>$($report.BlockedExtensions)<\/td>\r\n<td>-<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<pre><code class=\"language-powershell\">\r\n    \r\n    <\/code><\/pre>\r\n<h3>Action Items<\/h3>\r\n<pre><code class=\"language-powershell\">\r\n    <\/code><\/pre>\r\n<ul>\r\n<li>&nbsp;<\/li>\r\n<li>Non-compliant bilgisayarlara GPO tekrar uygulanmal\u0131<\/li>\r\n<li>&nbsp;<\/li>\r\n<li>Blocked extension denemeleri ara\u015ft\u0131r\u0131lmal\u0131<\/li>\r\n<li>&nbsp;<\/li>\r\n<li>Kullan\u0131c\u0131 e\u011fitimleri g&uuml;ncellenebilir<\/li>\r\n<li>&nbsp;<\/li>\r\n<\/ul>\r\n<pre><code class=\"language-powershell\">\r\n    \r\n    <\/code><\/pre>\r\n<p><em>Report generated: $(Get-Date)<\/em><\/p>\r\n<pre><code class=\"language-powershell\">\r\n\r\n\r\n\"@\r\n\r\n$html | Out-File -FilePath $reportPath -Encoding UTF8\r\n\r\nWrite-Host \"Rapor olu\u015fturuldu: $reportPath\" -ForegroundColor Green\r\n<\/code><\/pre>\r\n<h2>\ud83d\udd10 Security Audit Checklist<\/h2>\r\n<h3>Quarterly Security Review<\/h3>\r\n<pre><code class=\"language-markdown\"># Chrome GPO Security Audit - Q[X] 2025\r\n\r\n## 1. Policy Configuration Review\r\n- [ ] T&uuml;m g&uuml;venlik politikalar\u0131 aktif\r\n- [ ] Blocklist g&uuml;ncel (*wildcard mevcut)\r\n- [ ] Allowlist sadece gerekli eklentileri i&ccedil;eriyor\r\n- [ ] Browser sign-in do\u011fru konfig&uuml;re edilmi\u015f\r\n- [ ] Sync ayarlar\u0131 uygun\r\n\r\n## 2. Compliance Check\r\n- [ ] %95+ bilgisayar compliant\r\n- [ ] Non-compliant bilgisayarlar belirlendi\r\n- [ ] Remediation plan\u0131 haz\u0131r\r\n\r\n## 3. Extension Audit\r\n- [ ] Allowlist'teki her eklenti hala gerekli mi?\r\n- [ ] Yeni eklenti talepleri de\u011ferlendirildi\r\n- [ ] Kullan\u0131lmayan eklentiler kald\u0131r\u0131ld\u0131\r\n\r\n## 4. Incident Review\r\n- [ ] Blocked extension denemeleri incelendi\r\n- [ ] \u015e&uuml;pheli aktiviteler ara\u015ft\u0131r\u0131ld\u0131\r\n- [ ] Policy bypass denemeleri tespit edildi\r\n\r\n## 5. User Feedback\r\n- [ ] User support ticket'lar\u0131 analiz edildi\r\n- [ ] Yayg\u0131n sorunlar belirlendi\r\n- [ ] \u0130yile\u015ftirme &ouml;nerileri topland\u0131\r\n\r\n## 6. Documentation\r\n- [ ] GPO dok&uuml;mantasyonu g&uuml;ncel\r\n- [ ] Allowlist g&uuml;ncel\r\n- [ ] Prosed&uuml;rler g&uuml;ncel\r\n\r\n## 7. Backup &amp; DR\r\n- [ ] GPO backup al\u0131nd\u0131\r\n- [ ] Restore test edildi\r\n- [ ] Rollback plan\u0131 g&uuml;ncel\r\n\r\n## Sign-off\r\nAudited by: _______________\r\nDate: _______________\r\nNext Audit: _______________\r\n<\/code><\/pre>\r\n<h2>\ud83d\ude80 Gelecek \u0130yile\u015ftirmeler<\/h2>\r\n<h3>Chrome Enterprise Management<\/h3>\r\n<p>Google Chrome Enterprise lisans\u0131 ile daha geli\u015fmi\u015f y&ouml;netim:<\/p>\r\n<p><strong>Avantajlar\u0131:<\/strong><\/p>\r\n<ul>\r\n<li>Cloud-based policy management<\/li>\r\n<li>Chrome Browser Cloud Management Console<\/li>\r\n<li>Cross-platform y&ouml;netim (Windows, Mac, Linux, ChromeOS)<\/li>\r\n<li>Advanced reporting ve analytics<\/li>\r\n<li>User ve device level policies<\/li>\r\n<li>Chrome OS fleet management<\/li>\r\n<\/ul>\r\n<p><strong>Maliyet:<\/strong><\/p>\r\n<ul>\r\n<li>~$6\/device\/y\u0131l (fiyatlar de\u011fi\u015febilir)<\/li>\r\n<li>B&uuml;y&uuml;k kurulu\u015flar i&ccedil;in discount<\/li>\r\n<\/ul>\r\n<h3>Cloud-Based Management<\/h3>\r\n<pre><code class=\"language-powershell\"># Chrome Cloud Policy enrollment\r\n# Cihaz\u0131 cloud management'a kaydet\r\n$enrollmentToken = \"YOUR-ENROLLMENT-TOKEN\"\r\n\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"CloudManagementEnrollmentToken\" `\r\n    -Value $enrollmentToken `\r\n    -Type String\r\n\r\n# Cloud policy'leri aktif et\r\nSet-ItemProperty -Path \"HKLM:\\SOFTWARE\\Policies\\Google\\Chrome\" `\r\n    -Name \"CloudManagementEnrollmentMandatory\" `\r\n    -Value 1 `\r\n    -Type DWord\r\n<\/code><\/pre>\r\n<h3>Machine Learning ile Anomaly Detection<\/h3>\r\n<pre><code class=\"language-python\"># &Ouml;rnek: Chrome kullan\u0131m pattern analizi\r\n# Anormal eklenti y&uuml;kleme denemeleri tespit et\r\n\r\nimport pandas as pd\r\nfrom sklearn.ensemble import IsolationForest\r\n\r\n# Event log verilerini oku\r\nevents = pd.read_csv('chrome_events.csv')\r\n\r\n# Feature extraction\r\nfeatures = events[['extension_attempts', 'sync_attempts', 'policy_violations']]\r\n\r\n# Anomaly detection model\r\nmodel = IsolationForest(contamination=0.1)\r\nmodel.fit(features)\r\n\r\n# Anormal davran\u0131\u015flar\u0131 tespit et\r\nanomalies = model.predict(features)\r\nsuspicious_users = events[anomalies == -1]\r\n\r\nprint(\"\u015e&uuml;pheli kullan\u0131c\u0131lar:\", suspicious_users['username'].tolist())\r\n<\/code><\/pre>\r\n<h2>\ud83d\udcd6 Sonu&ccedil; ve &Ouml;neriler<\/h2>\r\n<h3>&Ouml;zet<\/h3>\r\n<p>Chrome g&uuml;venlik politikalar\u0131n\u0131 GPO ile y&ouml;netmek:<\/p>\r\n<p>\u2705 <strong>Avantajlar:<\/strong><\/p>\r\n<ul>\r\n<li>Merkezi kontrol ve y&ouml;netim<\/li>\r\n<li>G&uuml;venlik risklerini minimize eder<\/li>\r\n<li>Compliance sa\u011flar<\/li>\r\n<li>VPN ve zararl\u0131 eklentileri engeller<\/li>\r\n<li>User data loss prevention<\/li>\r\n<\/ul>\r\n<p>\u274c <strong>Zorluklar:<\/strong><\/p>\r\n<ul>\r\n<li>\u0130lk kurulum ve konfig&uuml;rasyon<\/li>\r\n<li>User resistance ve de\u011fi\u015fim y&ouml;netimi<\/li>\r\n<li>S&uuml;rekli monitoring gerektirir<\/li>\r\n<li>Exception management<\/li>\r\n<\/ul>\r\n<h3>Final &Ouml;neriler<\/h3>\r\n<p><strong>1. G&uuml;venlik &Ouml;ncelikli Yakla\u015f\u0131m:<\/strong><\/p>\r\n<ul>\r\n<li>T&uuml;m eklentileri engelle, sadece gerekenlere izin ver<\/li>\r\n<li>VPN eklentilerini kesinlikle engelle<\/li>\r\n<li>Developer tools'u k\u0131s\u0131tla<\/li>\r\n<\/ul>\r\n<p><strong>2. Kullan\u0131c\u0131 Deneyimini Dengele:<\/strong><\/p>\r\n<ul>\r\n<li>Gerekli eklentilere h\u0131zl\u0131 onay s&uuml;reci<\/li>\r\n<li>Clear communication<\/li>\r\n<li>Self-service portal d&uuml;\u015f&uuml;n<\/li>\r\n<\/ul>\r\n<p><strong>3. S&uuml;rekli \u0130yile\u015ftirme:<\/strong><\/p>\r\n<ul>\r\n<li>Quarterly policy review<\/li>\r\n<li>User feedback integration<\/li>\r\n<li>Security incident learning<\/li>\r\n<\/ul>\r\n<p><strong>4. Automation:<\/strong><\/p>\r\n<ul>\r\n<li>PowerShell scripts ile rutin g&ouml;revleri otomatikle\u015ftir<\/li>\r\n<li>Compliance reporting otomatikle\u015ftir<\/li>\r\n<li>Alert sistemleri kur<\/li>\r\n<\/ul>\r\n<p><strong>5. Documentation:<\/strong><\/p>\r\n<ul>\r\n<li>Her politikay\u0131 dok&uuml;mante et<\/li>\r\n<li>Runbook'lar haz\u0131rla<\/li>\r\n<li>Knowledge base olu\u015ftur<\/li>\r\n<\/ul>\r\n<h3>Son Kontrol Listesi<\/h3>\r\n<pre><code>\u2610 ADMX templates y&uuml;klendi\r\n\u2610 GPO olu\u015fturuldu ve yap\u0131land\u0131r\u0131ld\u0131\r\n\u2610 Blocklist aktif (*wildcard)\r\n\u2610 Allowlist tan\u0131mland\u0131\r\n\u2610 Browser sign-in kontrol alt\u0131nda\r\n\u2610 Sync devre d\u0131\u015f\u0131\r\n\u2610 GPO link edildi\r\n\u2610 Pilot test yap\u0131ld\u0131\r\n\u2610 User communication g&ouml;nderildi\r\n\u2610 Monitoring kuruldu\r\n\u2610 Documentation tamamland\u0131\r\n\u2610 Backup al\u0131nd\u0131\r\n\u2610 Rollback plan\u0131 haz\u0131r\r\n\u2610 Support team haz\u0131r\r\n\u2610 Production deployment OK\r\n<\/code><\/pre>\r\n<hr>\r\n<p><strong>Kaynaklar:<\/strong><\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/chromeenterprise.google\/policies\/\">Chrome Enterprise Policy List<\/a><\/li>\r\n<li><a href=\"https:\/\/chromeenterprise.google\/browser\/management\/\">Chrome Browser Cloud Management<\/a><\/li>\r\n<li><a href=\"https:\/\/chromeenterprise.google\/browser\/download\/\">Chrome ADMX Templates<\/a><\/li>\r\n<li><a href=\"https:\/\/support.google.com\/chrome\/a\">Google Workspace Admin Help<\/a><\/li>\r\n<\/ul>\r\n<p><em>Chrome g&uuml;venlik politikalar\u0131yla kurumsal a\u011f\u0131n\u0131z\u0131 koruyun!<\/em> \ud83d\udee1\ufe0f<\/p>","excerpt":"Domain ortam\u0131ndaki bilgisayarlarda Google Chrome kullan\u0131m\u0131, y\u00f6netilmedi\u011fi takdirde ciddi g\u00fcvenlik riskleri olu\u015fturabilir. ","created_at":"2025-09-29 23:29:27","updated_at":"2026-09-07 12:47:01","category_id":6,"view_count":1154,"reading_time":23,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-09-29 23:29:27","featured_image":"resimyok.jpg","slug":"domain-ortaminda-google-chrome-yonetimi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]