How to effectively manage many Chromebooks and users at School

In general, when a school distributes computers to students, it requires the cost and staffing of user preferences, software, OS updates, security software updates, and replacement or repair for other computers in the event of a malfunction.  

Chromebook is easy to manage remotely through the Chrome Device Management Console. Administrator can manage all of their environments, software to be installed, automatic OS updates, and the ability to use the Internet only on a controlled network.

If a Chromebook is lost or if it is stolen in a cafe, the administrator can remotely disable the device directly and the device will be immediately logged out and no longer available. If a lost Chromebook is retrieved, the administrator can make it available immediately by changing the device to reuse.

To efficiently manage the many Chromebooks distributed to students at school, Chrome Device Management console is required. The Chrome device management console allows administrator or teacher to define and set up more than 150 policies. But It's more complicated than it sounds, and it takes a lot of time and effort to figure it out and use it efficiently. 

Key policy settings for Chrome Device Management

If you're using a Chromebook at a school that uses G Suite for Education, you may be confused by the difference between user settings and Chromebook device settings.

User settings can be set through admin console of G Suite for Education. However, Chrome Device Management console is required for Chromebook device-specific settings.

There are more than 150 policies that can be set through Chrome Device Management. The settings can be broadly categorized into five categories - User Settings, Network Settings, Device Settings, Public Session Settings, and Kiosk Settings.

One important aspect of setting up Chrome devices is setting Chrome devices to Public Session, Kiosk Settings, and Single App Kiosk Mode.

For example, if you are using a chromebook for multiple users, a business center PC, a PC for book searching in a bookstore or library, or a public PC used by several production workers in a production plant for business purposes, Device Management is setting this as a public session. You can use your PC without a login in a public session.

A single app kiosk setting lets you run only a single specified app, which only works in full-screen mode. Other apps, including things like regular Internet search, will not be available.

Typically, the most important of the administrative settings at a school will be User settings and Device settings. Public session and kiosk mode settings are optional depending on your Chromebook usage.

Differences between user and device settings

• User policies apply regardless of which devices are logged in
• Targeted users in the domain through the Admin Console.
• Control your Chrome browser environment
• Allowed apps and extension controls
• Force apps and extensions to install
• Chrome Web Store Permission Limitations
• Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed
• Proxy settings
• Control the use of screenshots, block and allow access URLs
• Print control etc.
•  Organizations that use G Suite for Education users can manage policies in the G Suite Admin console.
• Schools that do not use G Suite for Education must acquire Chrome Device Management Console licenses..

• Device policies are to control and manage devices regardless of who logs in.
• Control who can log in, how to update, etc.
• Control how users operate the device rather than what they use on the device

● Device registration and access

● Allow Guest Mode, Login Restrictions (Use only specified users), SSO,

● Chrome OS auto-update control, distribution channel control

● Manage kiosk settings

● Device status reporting

● Scheduled reboot

● Cloud Print Management

● Bluetooth control

● Stop using your device remotely

•       Device policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.

●         Each policy is mutually exclusive. - There is no policy that conflicts with each other.

You can manage all users using Chromebook and set up network without having to register your device. However, device management or opt-in settings, kiosk settings, device provisioning /deprovisioning, etc. are only available if you have a Chrome Device Management license.

Companies that use Chromebooks without G Suite will need a Chrome device management license to manage their Chromebooks and manage their users.

Management topics	G Suit /GSuite for Education Admin Console	Chrome device management console
User Settings	O	O
Network Settings	O	O
Device Settings	X	O
Public Settings	X	O
Kiosk Settings	X	O
Device Provision/Deprovision	X	O

For More information - https://goo.gl/IMl8Bu Kindle Store - Paperback/Kindle Edition

-----------