Supported editions for this feature: Frontline Starter , Frontline Standard , and Frontline Plus ; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus ; Education Fundamentals, Education Standard, Education Plus, and Endpoint Education Upgrade; Essentials , Enterprise Essentials , and Enterprise Essentials Plus ; G Suite Basic and G Suite Business; Cloud Identity Free and Cloud Identity Premium. Compare your edition
With the release of Google Credential Provider for Windows (GCPW) version 87.0.4280.88, you can manage GCPW settings from the Admin console instead of editing the registry settings on each Windows device. To use this feature, the GCPW client on the device provides an organization-specific token to Google when the user first signs in. The new GCPW client available for download in the Admin Console has your organization’s token embedded in the installer.
Who's affected
If you're just getting started with GCPW, you don't need to do anything. The GCPW installation file you downloaded from the Admin console includes the token.
If you don't want to manage GCPW settings in the Admin console because you want to use registry settings, you don't need to do anything.
If you already set up GCPW before version 87.0.4280.88 on a device, the user can still sign in and the GCPW registry settings you set still apply. However, to edit permitted domains from the Admin console, you must set the token value in the registry file. You don’t have to remove the existing registry settings because the Admin console settings override them.
Set the GCPW token
Expand all | Collapse allYou can update the token on devices in the following ways. We recommend you reinstall GCPW or run the registry file to avoid potential errors in the device's registry settings.
If you haven't already, download a new GCPW installation file:
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- Go toMenu Devices > Mobile and endpoints > Settings > Windows .
Requires having the Services and devices administrator privilege.
- Click Google Credential Provider for Windows (GCPW) setup Download GCPW.
- Download the 64-bit or 32-bit GCPW installation file and distribute it to devices.
To update the token, on the device, run the installer. You can double-click the installation file or run the file from Command Prompt:
- Open the Command Prompt.
- To install the 64-bit client, run gcpwstandaloneenterprise64.exeas administrator. To install the 32-bit client, run gcpwstandaloneenterprise.exeas administrator.
You must be signed in as a super administrator for this task.
- Sign in with a super administrator account to the Google Admin console.
If you aren’t using a super administrator account, you can’t complete these steps.
- Click Google Credential Provider for Windows (GCPW) setup Download GCPW.
- Click registry file.
- Distribute the registry file to Windows devices.
- On the Windows device, double-click the registry file to run it. The token value in the registry is updated.
- Restart the device.
You must be signed in as a super administrator for this task.
- Sign in with a super administrator account to the Google Admin console.
If you aren’t using a super administrator account, you can’t complete these steps.
- Click Google Credential Provider for Windows setup Download GCPW.
- In the box with the token, click Copy.
- Save the token somewhere convenient that you can access from other devices.
- On the Windows device, back up the current registry key then import the new one:
- From the Windows Start menu, click Run.
- In the Run box, enter regedit.
- In Registry Editor, go to HKEY_LOCAL_MACHINE\Software\Policies.
- Right-click Policies and click New Keyto create a folder.
- Name the folder Google.
- Right-click Google and click New Keyto create a folder.
- Name the folder CloudManagement.
- Right-click the CloudManagementfolder and click New String Value.
- For the name, enter
EnrollmentToken. - Double-click the name and, in the Value databox, paste the token.
- Click OK.
- Close Registry Editor and restart the device.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.
