Differences between User and Device settings and Key settings for Chrome Enterprise Upgrade (CEU)

Key settings for Chrome Enterprise Upgrade (former, Chrome Device Management)

There are more than 400+ policies that can be set through Chrome Device Management. There are five categories of settings: User Settings, Network Settings, Device Settings, Managed Guest Session Settings, and Kiosk Settings.

There are Chromebooks available for you to install and use the Google Play Store. "Google Play Store settings" has been added to Chrome Device Management for these Chromebooks. Your domain’s administrator can enable Play Store and Android Apps to be managed through the Admin Console.

One of the key elements of Chrome Device Management is setting Chrome Device to Managed Guest Sessions, Kiosk Settings, and Single App Kiosk Mode.

Many users can share chrome Devices. For example, it can be used publicly, such as a business center PC, a PC for book searching in a bookstore or a library, or a public PC used by several production workers at a production factory for business purposes. Within Chrome Device Management, you can set this up as a public session in the Managed Guest session settings.

A single app Kiosk setting only allows you to run a single app that you specify, and this app will only work in full-screen mode. Other apps cannot run in this mode.

Typically, the most important of the administrative settings in a business or a school will be user settings and device settings. Public sessions and Kiosk mode settings are optional depending on your Chromebook usage. 

Differences between user and device settings

· User policies apply regardless of which devices are logged in

oTargeted users in the domain through the Admin Console.

oControl your Chrome browser environment

§ Allowed apps and extension controls

§ Force apps and extensions to install

§ Chrome Web Store Permission Limitations

§ Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed

§ Proxy settings

§ Control the use of screenshots, block and allow access URLs

§ Print control etc.

oOrganizations that use  Google Workspace or Google Workspace for Education users can manage policies in the Google Workspace Admin console.

oCompanies and schools that do not use Google Apps must acquire and manage Chrome Device Management Console licenses.

· Device policies are to control and manage devices regardless of who logs in.

oControl who can log in, how to update, etc.

oControl how users operate the device rather than what they use on the device

§ Device registration and access

§ Allow Guest Mode, Login Restrictions (Use only specified users), SSO,

§ Chrome OS auto-update control, distribution channel control

§ Manage kiosk settings

§ Device status reporting

§ Scheduled reboot

§ Cloud Print Management

§ Bluetooth control

§ Stop using your device remotely

oDevice policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.

· Each policy is mutually exclusive. - There is no policy that conflicts with each other.

If you're using a Chromebook in a company or school that uses Google Workspace or Google Workspace for Education, you can manage your Chromebook users or set up your network without having to register your device. However, device management or opt-in settings, kiosk settings, device provision/deprovision, etc. are only available when you purchased the Chrome Device Management license.

Enterprises that use Chromebooks without Google Workspace will need the Chrome device management license to manage their Chromebooks and manage their users.

Settings	Google Workspace  Admin Console	Chrome device management console
User Settings	O	O
Network Settings	O	O
Device Settings	X	O
Public Settings	X	O
Kiosk Settings	X	O
Device Provision/Deprovision	X	O

For more details - https://amzn.to/37C9xEi