Windows 10 Auth with Google Credential Provider

Using Google Credential Provider for Windows allows users to sign into Windows using their Google Account.

Setup Prerequisite

Ready the Windows computer for imaging. Have a local administrator account available on the computer as well as Google Chrome.

Ensure proper Windows settings are applied in the Admin Console.

Installing GCPW

From the link above, select and download the 32-bit or 64-bit version of GCPW.

Run gcpwstandaloneenterprise64.msi as administrator.

Run regedit as administrator to enter new registry keys:

  • Specify allowed domains:
    • In Registry Editor, go to HKEY_LOCAL_MACHINE\Software\Google, right-click Google, and click New > Key to create a new folder.
    • Name the folder GCPW.
    • Right-click the GCPW folder and click New > String Value.
      • For the name, enter domains_allowed_to_login.
      • Double-click the name and, in the Value data box, enter a comma-separated list of allowed domain names. For example: example.com, example.org, example.net.
      • Click OK.
  • Have GCPW set up a new Windows account name that is only the username part of the user's school email address:
    • In Registry Editor, right-click the GCPW folder and click New > DWORD.
      • For the name, enter use_shorter_account_name.
      • Double-click the name and, in the Value data box, enter 1.
      • Click OK.

Finally, reboot the computer.