New Advanced Chrome Device Management (Book) - Chrome Enterprise/Education Upgrade

In 2017, I published a book through Amazon titled “Advanced Chrome Device Management”. Many thanks to you for purchasing this book.

Google has been selling to schools and businesses under the name ‘Chrome Device Management license’ since 2017.

Google began strengthening its Chrome business in 2019. Google has launched a product called Chrome Enterprise. This Chrome Enterprise includes Chrome browser, Chrome OS, Chromebook, and Chrome Device management.

Beginning in 2020, Chrome Device Management License name has been changed to Chrome Enterprise Upgrade for businesses and Chrome Education Upgrade for education.

Since publishing the Advanced Chrome Device Management book in 2017, Google has changed its name and updated many of its internal features. This led to the need to publish new book to reflect these updates.

In this book, I easily organized the Chrome Enterprise Help documentation provided by Google regarding Chrome Device Management and made it easy to set up and manage what users actually need through ten workshops as described below.

How to manage Users & Browser

• Workshop 1:How to change User’s Avatar
• Workshop 2:How to disable to show ‘Home’ button of the browser.
• Workshop 3:How to block URLs
• Workshop 4:How to allow users to sign-in only to specific G Suite domains.
• Workshop 5:How to force install Android apps in Google Play Store

  How to manage Chrome Devices

• Workshop 6: How to disable guest mode and restrict sign-in to a list of users.

  How to manage Managed guest session and kiosk settings

• Workshop 7: How to set up your Chromebook as a Public PC
• Workshop 8: How to use Chromebook for student assessments using a single Kiosk app
• Workshop 9: How to create Digital Signage System for In-house Promotion

Workshop 10: How to set locked mode for quizzes

 
I'm a Google Certified Chrome Expert who is committed to teaching, consulting, and selling G Suite for Business, Chrome Device Management licenses, and G Suite for Education. Based on my experience, I've updated this book to make it possible for many businesses and schools to use Chromebook in the future.

Amazon Published -  https://amzn.to/39vGDXM

Differences between User and Device settings and Key settings for Chrome Enterprise Upgrade (CEU)

Key settings for Chrome Enterprise Upgrade (former, Chrome Device Management)

There are more than 400+ policies that can be set through Chrome Device Management. There are five categories of settings: User Settings, Network Settings, Device Settings, Managed Guest Session Settings, and Kiosk Settings.

There are Chromebooks available for you to install and use the Google Play Store. "Google Play Store settings" has been added to Chrome Device Management for these Chromebooks. Your domain’s administrator can enable Play Store and Android Apps to be managed through the Admin Console.

One of the key elements of Chrome Device Management is setting Chrome Device to Managed Guest Sessions, Kiosk Settings, and Single App Kiosk Mode.

Many users can share chrome Devices. For example, it can be used publicly, such as a business center PC, a PC for book searching in a bookstore or a library, or a public PC used by several production workers at a production factory for business purposes. Within Chrome Device Management, you can set this up as a public session in the Managed Guest session settings.

A single app Kiosk setting only allows you to run a single app that you specify, and this app will only work in full-screen mode. Other apps cannot run in this mode.

Typically, the most important of the administrative settings in a business or a school will be user settings and device settings. Public sessions and Kiosk mode settings are optional depending on your Chromebook usage. 

Differences between user and device settings

· User policies apply regardless of which devices are logged in

oTargeted users in the domain through the Admin Console.

oControl your Chrome browser environment

§ Allowed apps and extension controls

§ Force apps and extensions to install

§ Chrome Web Store Permission Limitations

§ Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed

§ Proxy settings

§ Control the use of screenshots, block and allow access URLs

§ Print control etc.

oOrganizations that use  Google Workspace or Google Workspace for Education users can manage policies in the Google Workspace Admin console.

oCompanies and schools that do not use Google Apps must acquire and manage Chrome Device Management Console licenses.

· Device policies are to control and manage devices regardless of who logs in.

oControl who can log in, how to update, etc.

oControl how users operate the device rather than what they use on the device

§ Device registration and access

§ Allow Guest Mode, Login Restrictions (Use only specified users), SSO,

§ Chrome OS auto-update control, distribution channel control

§ Manage kiosk settings

§ Device status reporting

§ Scheduled reboot

§ Cloud Print Management

§ Bluetooth control

§ Stop using your device remotely

oDevice policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.

· Each policy is mutually exclusive. - There is no policy that conflicts with each other.

If you're using a Chromebook in a company or school that uses Google Workspace or Google Workspace for Education, you can manage your Chromebook users or set up your network without having to register your device. However, device management or opt-in settings, kiosk settings, device provision/deprovision, etc. are only available when you purchased the Chrome Device Management license.

Enterprises that use Chromebooks without Google Workspace will need the Chrome device management license to manage their Chromebooks and manage their users.

Settings	Google Workspace  Admin Console	Chrome device management console
User Settings	O	O
Network Settings	O	O
Device Settings	X	O
Public Settings	X	O
Kiosk Settings	X	O
Device Provision/Deprovision	X	O

For more details - https://amzn.to/37C9xEi 

[Chromebook Tip] How to set the screen locked mode up for Quizzes using Chromebooks

You can help keep students focused while they take quizzes and tests on their Chromebooks. When students take a quiz in locked mode, they won’t be able to browse other websites or open any other apps.

About locked mode

Locked mode collects email addresses and limits quizzes to only your domain. When in locked mode:

• Students can’t use other apps. 
• Some extensions and keyboard shortcuts are disabled.
• If a student exits the quiz, or opens any other tab, the teacher is notified via email.

Important: To use locked mode, you need:

• A Google Workspace for Education Account.
• A Chromebook managed by your school for each student. Learn about managed Chromebooks[1]. 
• Chrome OS 75 and up.

Turn on locked mode

1. In Google Forms, open a quiz.
2. At the top, click Settings > Quizzes.
3. Check the box next to “Turn on locked mode.”

Accessibility features & extensions in locked mode

Recommended Chromebook accessibility features

• ChromeVox (text-to-speech)
• High contrast mode
• Fullscreen magnifier
• Docked magnifier

Learn how to turn on your Chromebook’s accessibility features. [2]

Recommended Chrome extensions

From Don Johnston:

• Quizbot: An automatic quiz creator for Forms (for teachers).
• Snap&Read: A text reader that can translate, clarify, and organize ideas. 
• Co:Writer: A writing help tool with word prediction, speech recognition, and translation.

To learn more about these tools, visit the Don Johnston site.[3]

From Texthelp:

• EquatIO: Converts your input into mathematical equations, formulas, and more.
• Read&Write for Google Chrome: Converts text to speech and speech to text, with picture dictionaries, text prediction, and more.

Tip: If you can't find an accessibility feature, use accessibility shortcuts[4] instead.

More details about Chrome Devive Management - https://amzn.to/2SXN6Em

---

[1] Chromebook Help - http://bit.ly/2SbJfnM

[2] Chromebook Help - http://bit.ly/37hojA2

[3] http://bit.ly/38cTHRK

[4] Chromebook Help - http://bit.ly/38e6naN

Key settings for Chrome Device Management (Chrome Enterprise/Chrome Education Upgrade (CEU))

Key settings for Chrome Device Management (CEU)

There are more than 500+ policies that can be set through Chrome Device Management (CEU). There are five categories of settings: User Settings, Network Settings, Device Settings, Managed Guest Session Settings, and Kiosk Settings.

There are Chromebooks available for you to install and use the Google Play Store. "Google Play Store settings" has been added to Chrome Device Management for these Chromebooks. Your domain’s administrator can enable Play Store and Android Apps to be managed through the Admin Console.

One of the key elements of Chrome Device Management (CEU) is setting Chrome Device to Managed Guest Sessions, Kiosk Settings, and Single App Kiosk Mode.

Many users can share chrome Devices. For example, it can be used publicly, such as a business center PC, a PC for book searching in a bookstore or a library, or a public PC used by several production workers at a production factory for business purposes. Within Chrome Device Management, you can set this up as a public session in the Managed Guest session settings.

A single app Kiosk setting only allows you to run a single app that you specify, and this app will only work in full-screen mode. Other apps cannot run in this mode.

Typically, the most important of the administrative settings in a business or a school will be user settings and device settings. Public sessions and Kiosk mode settings are optional depending on your Chromebook usage. 

I easily organized the Chrome Enterprise Help documentation provided by Google regarding Chrome Device Management and made it easy to set up and manage what users actually need through ten workshops as described below.

l  How to manage Users & Browser

n  Workshop 1:How to change User’s Avatar

n  Workshop 2:How to disable to show ‘Home’ button of the browser.

n  Workshop 3:How to block URLs

n  Workshop 4:How to allow users to sign-in only to specific Google Workspace domains.

n  Workshop 5:How to force install Android apps in Google Play Store

l  How to manage Chrome Devices

n  Workshop 6: How to disable guest mode and restrict sign-in to a list of users.

l  How to manage Managed guest session and kiosk settings

n  Workshop 7: How to set up your Chromebook as a Public PC

n  Workshop 8: How to use Chromebook for student assessments using a single Kiosk app

n  Workshop 9: How to create Digital Signage System for In-house Promotion

l  Workshop 10: How to set locked mode for quizzes

For More information - https://amzn.to/38V80KU Kindle Store

How to Manage Android Apps for Google Workspace users using Chromebook

How to Manage Android Apps (Google Play(beta)) for Google Workspace users using Chromebook 

A Google Workspace  administrator can manage Chromebook users who want to install Andorid apps in the domain.

Here is the information on how to manage Chromebook users installing Android apps by Google Workspace administrator.

An administrator can force to install approved Android apps for Chromebooks logined in Google Workspace. or allow Google Workspace users to install the Android apps from Play Store. 

If you’re a Chrome for business customer, the managed Google Play Store is available for these Chromebooks using Chrome OS version 53 and later. For Chrome for education, the managed Google Play Store is supported on Chrome OS version 56 and later.

Before you begin

 

 

 

 

Enable Android apps for Chrome OS in your domain

Android apps on Chrome OS use the Android and Google Play management framework.

If you enable Android apps and the domain already has an Android for business subscription that uses a third party Enterprise Mobility Manager (EMM) (such as VMware AirWatch® or MobileIron), then the existing subscription and EMM combination is used, but other aspects of managing Android apps on Chrome OS are managed through the Google Admin Console.

If you enable Android apps and the domain doesn’t have an Android for business subscription, one is created automatically and Google Device Manager is selected as the EMM.

1.     Sign in to the Google Admin console.

2.     Click Device management.

3.     On the left, click Chrome management.

4.     Click Android application settings.

5.     Select Enable Android applications to be managed through the Admin Console.

You must be a domain administrator to enable this option.

6.     (Optional) Click Billing. Verify that an Android management subscription appears on the billing page.

7.     (Optional) Click Security > Manage EMM provider for Android. Verify that Google Device Manager is listed as your EMM provider. If you already have Google Mobile Management or a third party EMM as your EMM provider, then that provider will be listed, even though Android Apps on Chrome have been enabled.

Note: Enabling Android apps on Chrome OS for your domain does not automatically enable it for individual users. To give users access to the apps you must also enable the apps for organizational units.

Install Android apps on Chrome devices

Step 1: Approve apps

1.     Sign in to the Google Admin console.

2.     Click Device management  Chrome management  App management.

3.     Use the App Type filter setting to display Android Apps.

4.     Use the Type filter setting to display My Configured Apps or Approved Android Apps.

5.     Click  Approve Android Apps.

6.     Search for, and click the app you’d like to approve.

7.     Click Approve.

8.     To accept the app permissions on behalf of your organization, click Approve.

9.     Click Ok.

You can also approve apps in managed Google Play.

1.     Sign in to managed Google Play, using a managed Google Play administrator account.

2.     Search for, and click the app you’d like to approve.

3.     Click Approve.

4.     To accept the app permissions on behalf of your organization, click Approve.

5.     Click Ok.

6.     (Optional) To view a list of all approved apps for your organization, click My company apps from the Apps menu.

The Google Play for business help center contains detailed information on how to manage apps and app licenses for use in your organization.

Step 2: Decide how apps are installed

You can specify the type of installation available for each of your approved apps. You can create a subset of apps that users can choose to install, and also create a different subset of apps that the system automatically installs for every user in the organizational unit.

Force the installation of approved apps

From the list of apps you approved in managed Google Play, you can choose a subset that the system automatically installs for every user in the organizational unit. When the user logs into the device, the system automatically starts to download these apps.

Note: This policy is independent of any other Android phone or tablet policy you have in place with a third-party EMM. That means that you can have one set of apps configured to force-install on your Android phones and tablets using a third party EMM, and a different set of apps configured to force-install on Chromebooks using the Admin Console.

1.     Sign in to the Google Admin console.

2.     Click Apps.

3.     Click Additional Google services.

4.     Click Chrome management.

5.     Click App Management.

6.     On the left, select Android Apps from the App Type filter menu.

7.     Click the app you want to configure.

8.     Click User settings.

9.     On the left, select the relevant OU from the Orgs tree.

10.   Turn on Force installation.

11.   Turn on Pin to taskbar.

12.   Click Save.

Note: While the apps are being downloaded, the user can see a STOP button. If they press it the download is stopped. Another attempt at installation is made at the next login and install attempts will continue until the apps are successfully installed or until the app is no longer part of the list of apps that are force-installed.

Allow the installation of approved apps

If you don’t want to force the installation of apps you can create a list of apps that your users can voluntarily choose to install. The apps must be selected from the apps that you have approved in managed Google Play.

Note: If your organization is using a third-party EMM to manage Android phones or tablets, this option is not available to you. If the EMM has joined managed Google Play, the user sees the store layout as designed by the EMM in the managed Google Play store on their Chromebook.

If the EMM has not joined managed Google Play, the user sees an empty managed Google Play store on their Chromebook, and the only way for them to get Android apps is to configure the forced installation of approved apps.

1.     Sign in to the Google Admin console.

2.     Click Apps.

3.     Click Additional Google services.

4.     Click Chrome management.

5.     Click App Management.

6.     On the left, select Android Apps from the App Type filter menu.

7.     Click the app you want to configure.

8.     Click User settings.

9.     On the left, select the relevant OU from the Orgs tree.

10.   Turn on Allow installation.

11.   Click Save.

Apps configured to allow installation, appear in the Store home section of the managed Google Play store on the users’ dev

Step 3: Enable Android apps for users in an OU

Before you let Google Play Store be installed on Chrome devices, make sure you’ve approved and configured apps for users. Otherwise, they might see an empty Google Play Store on their device.

1.     ​Sign in to the Google Admin console.

2.     Click Device management.

3.     On the left, click Chrome management.

4.     Click User Settings.

5.     On the left, select the organization to which you want to apply the settings. Learn more.

Important: Make sure Chrome Management is turned on for this organization.

6.     Go to the Android applications section, select Allow from the Android applications on Chrome Devices (BETA) menu.

7.     At the bottom, click Save.

Settings typically take effect in minutes. But they might take up to an hour to apply for everyone.

Reference : https://support.google.com/chrome/a/answer/7131624?hl=en

For more information for Chromebook Management- https://amzn.to/389gZa8   - Paperback/Kindle Edition)