Nov 5, 2017

What is Chrome Enterprise (Chrome Device Management)?

How to manage Chrome Devices for Enterprise and Education.

Companies have not had a positive view of Chromebook. In recent years, however, businesses have changed the perception of Chromebook. According to the IDC report, there are predictions that by 2018, 25% of Fortune 500 companies will use Chromebook.















One of the biggest features for Chromebook is that it has an affordable price (average $ 150 - $ 300). In addition, it features fast performance, fast booting, secure computers free from viruses and malware, easy-to-manage computers, free office document editing tools, and MS Office compatibility tool. With the ability to run even millions of Android apps on the Google Play Store, Chromebook evolves into innovative computers that are capable of not only cloud-based online apps but also Android offline apps.

Google is launching a Chrome-based platform to strengthen its enterprise market. Google is driving the new paradigm of computers in the enterprise market as well as in the education market. That's why businesses and schools are starting to recognize Chromebook.

Chrome-based platforms launched by Google.     

First, Chrome  Enterprise and Education
    At the heart of this service is a combined platform of Chromebook hardware and Chrome Device Management Console software.
    Chromebook is also enhancing their business by getting solutions that can easily access Windows applications (Remote Desktop, Virtual Desktop, and Desktop as a Service).

Second, Chrome for Kiosk
   Anyone in a public place can use a PC for a low cost public use. It is a platform for Chrome OS devices to be used as a library's book search system and as a public PC in business centers and Internet cafes. In addition, schools can use Chromebook as a device for students to take exams.
    When a Kiosk app launches, any other application cannot be run, and only a single Kiosk app registered by an administrator is allowed to run in full-screen mode. This single Kiosk app can be managed through the Chrome Device Management console.
    Anyone can easily build and deploy Kiosk apps to the Chrome Web Store
 
Third, Chrome for Signage
    We have been flooding around with all kinds of digital displays. It is a platform that enables these digital displays to be published remotely at the desired time of day.
    You can install and manage Signage apps through the Chrome Device Management console.
    Chromebit, a stick-type PC, has been launched and is now making its way into the signage market.

Fourth, Chromebox for Meeting
    It is Google Hangout based video conferencing solution.
    Chromebox, high-definition Video Webcam, Speakerphone and so on, it enables companies to build video conferencing systems at low cost.
    To use this product, a separate service license ($ 250 per year / per device) is necessary.

Fifth, Chromebook that support Android apps on the Google Play Store
    You can now install and run Android apps on the Google Play Store on your Chromebook.
    Chromebook is now available in a variety of online and offline apps.

The Chrome Device Management console is a great feature that makes it easy to remotely manage Chromebooks from businesses and schools.

When a company or school distributes computers to its employees or students, it requires the cost and staffing of user preferences, software, OS updates, security software updates, and replacement or repair for other computers in the event of a malfunction.  

Chromebook is easy to manage remotely through the Chrome Device Management console. Administrator can manage all of their environments, software to be installed, automatic OS updates, and the ability to use the Internet only on a controlled network.

If a Chromebook is lost during a business trip or if it is stolen in a cafe, the administrator can remotely disable the device directly and the device will be immediately logged out and no longer available. If a lost Chromebook is retrieved, the administrator can make it available immediately by changing the device to reuse.

To efficiently manage the many Chromebooks distributed to your employees or students in your company or school, Chrome Device Management console is necessary. The Chrome device management console allows you to define and set up more than 150 policies. It's more complicated than it sounds, and it takes a lot of time and effort to figure it out and use it efficiently. In this book, you can easily learn important things from the functions of Chrome device management through various workshops.



Workshop 1-How to enable Chromebook only on your corporate or school network
Workshop 2-How to set up your Chromebook as a public computer
Workshop 3-How to use Chromebook for student assessments using a single Koisk app
Workshop 4-How to create Digital Signage System for In-house Promotion



It also includes essential guides for Chromebook beginners and advanced users. In this book, the author explains the new and updated functions and information recently. 

Key policy settings for Chrome Device Management
If you're using a Chromebook in a company or school that uses G Suite / G Suite for Education, you may be confused by the difference between user settings and Chromebook device settings.

User settings can be set through admin console of G Suite / G Suite for Education. However, Chrome Device Management console is required for Chromebook device-specific settings. I will explain the differences in detail.

There are more than 150 policies that can be set through Chrome Device Management. The settings can be broadly categorized into five categories - User Settings, Network Settings, Device Settings, Public Session Settings, and Kiosk Settings.

One important aspect of setting up Chrome devices is setting Chrome devices to Public Session, Kiosk Settings, and Single App Kiosk Mode.
For example, if you are using a Chrome device for multiple users, a business center PC, a PC for book searching in a bookstore or library, or a public PC used by several production workers in a production plant for business purposes, Device management is setting this as a public session. You can use your PC without a login in a public session.
A single app kiosk setting lets you run only a single specified app, which only works in full-screen mode. Other apps, including things like regular Internet search, will not be available.
Typically, the most important of the administrative settings in a business or school will be user settings and device settings. Public session and kiosk mode settings are optional depending on your Chromebook usage.


Differences between user and device settings


  • User policies apply regardless of which devices are logged in
    • Targeted users in the domain through the Admin Console.
    • Control your Chrome browser environment
      • Allowed apps and extension controls
      • Force apps and extensions to install
      • Chrome Web Store Permission Limitations
      • Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed
      • Proxy settings
      • Control the use of screenshots, block and allow access URLs
      • Print control etc.
    •  Organizations that use G Suite or G Suite for Education users can manage policies in the G Suite Admin console.
    • Companies and schools that do not use Google Apps must acquire and manage Chrome Device Management Console licenses..
  • Device policies are to control and manage devices regardless of who logs in.
    • Control who can log in, how to update, etc.
    • Control how users operate the device rather than what they use on the device


● Device registration and access
● Allow Guest Mode, Login Restrictions (Use only specified users), SSO,
● Chrome OS auto-update control, distribution channel control
● Manage kiosk settings
● Device status reporting
● Scheduled reboot
● Cloud Print Management
● Bluetooth control
● Stop using your device remotely
  •       Device policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.
        Each policy is mutually exclusive. - There is no policy that conflicts with each other.
If you're using Chromebooks in a company or a school that uses G Suite or G Suite for Educations, you can manage Chromebook's users and set up network without having to register your device. However, device management or opt-in settings, kiosk settings, device provisioning /deprovisioning, etc. are only available if you have a Chrome Device Management license.
Companies that use Chromebooks without G Suite will need a Chrome device management license to manage their Chromebooks and manage their users.


Management topics
G Suit /GSuite for Education Admin Console
Chrome device management console
User Settings
O
O
Network Settings
O
O
Device Settings
X
O
Public Settings
X
O
Kiosk Settings
X
O
Device Provision/Deprovision
X
O



For More information - https://goo.gl/IMl8Bu Kindle Store - Paperback/Kindle Edition


-----------

Nov 4, 2017

How to Manage Android Apps for G Suite users using Chromebook


How to Manage Android Apps (Google Play(beta)) for G Suite users using Chromebook 

A G Suite administrator can manage Chromebook users who want to install Andorid apps in the domain.

Here is the information on how to manage Chromebook users installing Android apps by G Suite administrator.


An administrator can force to install approved Android apps for Chromebooks logined in G Suite. or allow G Suite users to install the Android apps from Play Store. 
If you’re a Chrome for business customer, the managed Google Play Store is available for these Chromebooks using Chrome OS version 53 and later. For Chrome for education, the managed Google Play Store is supported on Chrome OS version 56 and later.
Before you begin
 
 
 
 
Enable Android apps for Chrome OS in your domain
Android apps on Chrome OS use the Android and Google Play management framework.

If you enable Android apps and the domain already has an Android for business subscription that uses a third party Enterprise Mobility Manager (EMM) (such as VMware AirWatch® or MobileIron), then the existing subscription and EMM combination is used, but other aspects of managing Android apps on Chrome OS are managed through the Google Admin Console.
If you enable Android apps and the domain doesn’t have an Android for business subscription, one is created automatically and Google Device Manager is selected as the EMM.
1.     Sign in to the Google Admin console.
2.     Click Device management.
3.     On the left, click Chrome management.
4.     Click Android application settings.
5.     Select Enable Android applications to be managed through the Admin Console.
You must be a domain administrator to enable this option.
6.     (Optional) Click Billing. Verify that an Android management subscription appears on the billing page.
7.     (Optional) Click Security > Manage EMM provider for Android. Verify that Google Device Manager is listed as your EMM provider. If you already have Google Mobile Management or a third party EMM as your EMM provider, then that provider will be listed, even though Android Apps on Chrome have been enabled.
Note: Enabling Android apps on Chrome OS for your domain does not automatically enable it for individual users. To give users access to the apps you must also enable the apps for organizational units.

Install Android apps on Chrome devices
1.     Sign in to the Google Admin console.
2.     Click Device management nd then Chrome management nd then App management.
3.     Use the App Type filter setting to display Android Apps.
4.     Use the Type filter setting to display My Configured Apps or Approved Android Apps.
5.     Click dd Approve Android Apps.
6.     Search for, and click the app you’d like to approve.
7.     Click Approve.
8.     To accept the app permissions on behalf of your organization, click Approve.
9.     Click Ok.
You can also approve apps in managed Google Play.
1.     Sign in to managed Google Play, using a managed Google Play administrator account.
2.     Search for, and click the app you’d like to approve.
3.     Click Approve.
4.     To accept the app permissions on behalf of your organization, click Approve.
5.     Click Ok.
6.     (Optional) To view a list of all approved apps for your organization, click My company apps from the Apps menu.

The Google Play for business help center contains detailed information on how to manage apps and app licenses for use in your organization.
You can specify the type of installation available for each of your approved apps. You can create a subset of apps that users can choose to install, and also create a different subset of apps that the system automatically installs for every user in the organizational unit.
Force the installation of approved apps
From the list of apps you approved in managed Google Play, you can choose a subset that the system automatically installs for every user in the organizational unit. When the user logs into the device, the system automatically starts to download these apps.
Note: This policy is independent of any other Android phone or tablet policy you have in place with a third-party EMM. That means that you can have one set of apps configured to force-install on your Android phones and tablets using a third party EMM, and a different set of apps configured to force-install on Chromebooks using the Admin Console.
1.     Sign in to the Google Admin console.
2.     Click Apps.
3.     Click Additional Google services.
4.     Click Chrome management.
5.     Click App Management.
6.     On the left, select Android Apps from the App Type filter menu.
7.     Click the app you want to configure.
8.     Click User settings.
9.     On the left, select the relevant OU from the Orgs tree.
10.   Turn on Force installation.
11.   Turn on Pin to taskbar.
12.   Click Save.
Note: While the apps are being downloaded, the user can see a STOP button. If they press it the download is stopped. Another attempt at installation is made at the next login and install attempts will continue until the apps are successfully installed or until the app is no longer part of the list of apps that are force-installed.

Allow the installation of approved apps
If you don’t want to force the installation of apps you can create a list of apps that your users can voluntarily choose to install. The apps must be selected from the apps that you have approved in managed Google Play.
Note: If your organization is using a third-party EMM to manage Android phones or tablets, this option is not available to you. If the EMM has joined managed Google Play, the user sees the store layout as designed by the EMM in the managed Google Play store on their Chromebook.
If the EMM has not joined managed Google Play, the user sees an empty managed Google Play store on their Chromebook, and the only way for them to get Android apps is to configure the forced installation of approved apps.
1.     Sign in to the Google Admin console.
2.     Click Apps.
3.     Click Additional Google services.
4.     Click Chrome management.
5.     Click App Management.
6.     On the left, select Android Apps from the App Type filter menu.
7.     Click the app you want to configure.
8.     Click User settings.
9.     On the left, select the relevant OU from the Orgs tree.
10.   Turn on Allow installation.
11.   Click Save.
Apps configured to allow installation, appear in the Store home section of the managed Google Play store on the users’ dev
Before you let Google Play Store be installed on Chrome devices, make sure you’ve approved and configured apps for users. Otherwise, they might see an empty Google Play Store on their device.
1.     Sign in to the Google Admin console.
2.     Click Device management.
3.     On the left, click Chrome management.
4.     Click User Settings.
5.     On the left, select the organization to which you want to apply the settings. Learn more.
6.     Go to the Android applications section, select Allow from the Android applications on Chrome Devices (BETA) menu.
7.     At the bottom, click Save.
Settings typically take effect in minutes. But they might take up to an hour to apply for everyone.

For more information for Chromebook Management- https://goo.gl/IMl8Bu  - Paperback/Kindle Edition)