Key settings for Chrome Device Management (Chrome Enterprise/Chrome Education Upgrade (CEU))

Key settings for Chrome Device Management (CEU)

There are more than 500+ policies that can be set through Chrome Device Management (CEU). There are five categories of settings: User Settings, Network Settings, Device Settings, Managed Guest Session Settings, and Kiosk Settings.

There are Chromebooks available for you to install and use the Google Play Store. "Google Play Store settings" has been added to Chrome Device Management for these Chromebooks. Your domain’s administrator can enable Play Store and Android Apps to be managed through the Admin Console.

One of the key elements of Chrome Device Management (CEU) is setting Chrome Device to Managed Guest Sessions, Kiosk Settings, and Single App Kiosk Mode.

Many users can share chrome Devices. For example, it can be used publicly, such as a business center PC, a PC for book searching in a bookstore or a library, or a public PC used by several production workers at a production factory for business purposes. Within Chrome Device Management, you can set this up as a public session in the Managed Guest session settings.

A single app Kiosk setting only allows you to run a single app that you specify, and this app will only work in full-screen mode. Other apps cannot run in this mode.

Typically, the most important of the administrative settings in a business or a school will be user settings and device settings. Public sessions and Kiosk mode settings are optional depending on your Chromebook usage. 

I easily organized the Chrome Enterprise Help documentation provided by Google regarding Chrome Device Management and made it easy to set up and manage what users actually need through ten workshops as described below.

l  How to manage Users & Browser

n  Workshop 1:How to change User’s Avatar

n  Workshop 2:How to disable to show ‘Home’ button of the browser.

n  Workshop 3:How to block URLs

n  Workshop 4:How to allow users to sign-in only to specific Google Workspace domains.

n  Workshop 5:How to force install Android apps in Google Play Store

l  How to manage Chrome Devices

n  Workshop 6: How to disable guest mode and restrict sign-in to a list of users.

l  How to manage Managed guest session and kiosk settings

n  Workshop 7: How to set up your Chromebook as a Public PC

n  Workshop 8: How to use Chromebook for student assessments using a single Kiosk app

n  Workshop 9: How to create Digital Signage System for In-house Promotion

l  Workshop 10: How to set locked mode for quizzes

For More information - https://amzn.to/38V80KU Kindle Store

How to Manage Android Apps for Google Workspace users using Chromebook

How to Manage Android Apps (Google Play(beta)) for Google Workspace users using Chromebook 

A Google Workspace  administrator can manage Chromebook users who want to install Andorid apps in the domain.

Here is the information on how to manage Chromebook users installing Android apps by Google Workspace administrator.

An administrator can force to install approved Android apps for Chromebooks logined in Google Workspace. or allow Google Workspace users to install the Android apps from Play Store. 

If you’re a Chrome for business customer, the managed Google Play Store is available for these Chromebooks using Chrome OS version 53 and later. For Chrome for education, the managed Google Play Store is supported on Chrome OS version 56 and later.

Before you begin

 

 

 

 

Enable Android apps for Chrome OS in your domain

Android apps on Chrome OS use the Android and Google Play management framework.

If you enable Android apps and the domain already has an Android for business subscription that uses a third party Enterprise Mobility Manager (EMM) (such as VMware AirWatch® or MobileIron), then the existing subscription and EMM combination is used, but other aspects of managing Android apps on Chrome OS are managed through the Google Admin Console.

If you enable Android apps and the domain doesn’t have an Android for business subscription, one is created automatically and Google Device Manager is selected as the EMM.

1.     Sign in to the Google Admin console.

2.     Click Device management.

3.     On the left, click Chrome management.

4.     Click Android application settings.

5.     Select Enable Android applications to be managed through the Admin Console.

You must be a domain administrator to enable this option.

6.     (Optional) Click Billing. Verify that an Android management subscription appears on the billing page.

7.     (Optional) Click Security > Manage EMM provider for Android. Verify that Google Device Manager is listed as your EMM provider. If you already have Google Mobile Management or a third party EMM as your EMM provider, then that provider will be listed, even though Android Apps on Chrome have been enabled.

Note: Enabling Android apps on Chrome OS for your domain does not automatically enable it for individual users. To give users access to the apps you must also enable the apps for organizational units.

Install Android apps on Chrome devices

Step 1: Approve apps

1.     Sign in to the Google Admin console.

2.     Click Device management  Chrome management  App management.

3.     Use the App Type filter setting to display Android Apps.

4.     Use the Type filter setting to display My Configured Apps or Approved Android Apps.

5.     Click  Approve Android Apps.

6.     Search for, and click the app you’d like to approve.

7.     Click Approve.

8.     To accept the app permissions on behalf of your organization, click Approve.

9.     Click Ok.

You can also approve apps in managed Google Play.

1.     Sign in to managed Google Play, using a managed Google Play administrator account.

2.     Search for, and click the app you’d like to approve.

3.     Click Approve.

4.     To accept the app permissions on behalf of your organization, click Approve.

5.     Click Ok.

6.     (Optional) To view a list of all approved apps for your organization, click My company apps from the Apps menu.

The Google Play for business help center contains detailed information on how to manage apps and app licenses for use in your organization.

Step 2: Decide how apps are installed

You can specify the type of installation available for each of your approved apps. You can create a subset of apps that users can choose to install, and also create a different subset of apps that the system automatically installs for every user in the organizational unit.

Force the installation of approved apps

From the list of apps you approved in managed Google Play, you can choose a subset that the system automatically installs for every user in the organizational unit. When the user logs into the device, the system automatically starts to download these apps.

Note: This policy is independent of any other Android phone or tablet policy you have in place with a third-party EMM. That means that you can have one set of apps configured to force-install on your Android phones and tablets using a third party EMM, and a different set of apps configured to force-install on Chromebooks using the Admin Console.

1.     Sign in to the Google Admin console.

2.     Click Apps.

3.     Click Additional Google services.

4.     Click Chrome management.

5.     Click App Management.

6.     On the left, select Android Apps from the App Type filter menu.

7.     Click the app you want to configure.

8.     Click User settings.

9.     On the left, select the relevant OU from the Orgs tree.

10.   Turn on Force installation.

11.   Turn on Pin to taskbar.

12.   Click Save.

Note: While the apps are being downloaded, the user can see a STOP button. If they press it the download is stopped. Another attempt at installation is made at the next login and install attempts will continue until the apps are successfully installed or until the app is no longer part of the list of apps that are force-installed.

Allow the installation of approved apps

If you don’t want to force the installation of apps you can create a list of apps that your users can voluntarily choose to install. The apps must be selected from the apps that you have approved in managed Google Play.

Note: If your organization is using a third-party EMM to manage Android phones or tablets, this option is not available to you. If the EMM has joined managed Google Play, the user sees the store layout as designed by the EMM in the managed Google Play store on their Chromebook.

If the EMM has not joined managed Google Play, the user sees an empty managed Google Play store on their Chromebook, and the only way for them to get Android apps is to configure the forced installation of approved apps.

1.     Sign in to the Google Admin console.

2.     Click Apps.

3.     Click Additional Google services.

4.     Click Chrome management.

5.     Click App Management.

6.     On the left, select Android Apps from the App Type filter menu.

7.     Click the app you want to configure.

8.     Click User settings.

9.     On the left, select the relevant OU from the Orgs tree.

10.   Turn on Allow installation.

11.   Click Save.

Apps configured to allow installation, appear in the Store home section of the managed Google Play store on the users’ dev

Step 3: Enable Android apps for users in an OU

Before you let Google Play Store be installed on Chrome devices, make sure you’ve approved and configured apps for users. Otherwise, they might see an empty Google Play Store on their device.

1.     ​Sign in to the Google Admin console.

2.     Click Device management.

3.     On the left, click Chrome management.

4.     Click User Settings.

5.     On the left, select the organization to which you want to apply the settings. Learn more.

Important: Make sure Chrome Management is turned on for this organization.

6.     Go to the Android applications section, select Allow from the Android applications on Chrome Devices (BETA) menu.

7.     At the bottom, click Save.

Settings typically take effect in minutes. But they might take up to an hour to apply for everyone.

Reference : https://support.google.com/chrome/a/answer/7131624?hl=en

For more information for Chromebook Management- https://amzn.to/389gZa8   - Paperback/Kindle Edition)

 

[New Book] Google Workspace :How to increase work efficiency by 200%.

 his book introduces the background behind Google's rebranding of G Suite as Google Workspace. Based on my practical experience of using Google Workspace as my main work tool, I introduced various useful tips and tried to include know-how on how to use various integrated work tools to increase work efficiency by 200%, especially when collaborating.

I am a technical director at a Google Authorized Partner in Korea. In the meantime, I learned the knowledge related to Google products (Google Workspace, Google for Education, Chromebook, Chrome device management, Google Meet hardware kit) faster than others. And while I was working to inform customers of this, I was able to summarize the accumulated practical experience and know-how.

This book is for business users who are new to Google Workspace, users who need to convert or upgrade existing G Suite services to Google Workspace, teachers and students using G Suite for Education services, and those who are curious about what collaboration tools are. I think it will be a Google Workspace white paper especially for those who are contemplating how to efficiently use the collaboration tools integrated into Google Workspace when collaborating remotely.

Author: Charly Choi(최흥식), Book Store: bit.ly/hsikchoi