(See Granting GAT Additional Access rights and GAT Device Audits also)
Google Chrome Management
G Suite provides device management for Chrome OS devices and also lets you manage the Chrome browser (installing apps, managing security settings etc.) on PC and Mac.
Management is all done through the G Suite Admin Console
There is an additional licence required to manage Chrome OS devices, however, managing the Chrome Browser on PC and Mac is included as part of your G Suite for Business licence.
Note: When associating a name with a Chrome Device in the Admin panel, use the user email address from your domain. This will enable GAT to link the device with the user reports and allow cross reporting.
Managing the Chrome Browser
Note: If you wish to use Chrome Management on PC or Mac the Chrome Browser must be installed using the Chrome for Business MSI package which can be downloaded here
Chrome Management settings are accessed by logging into the G Suite Admin Console and going to Device Management > Chrome
To manage the Chrome Browser settings click on “User Settings”. These settings apply both to the Chrome Browser on PC/Mac (installed using the .msi) and to the Chrome Browser on managed Chrome OS devices.
From here you have options to:
- Allow or block particular types of Chrome apps and extensions
- Pre-install Apps and Extensions
- Choose which Apps and Extensions are Pinned to the Chrome Launcher
- Manage the Chrome Web Store experience
- Adjust Security Settings (like use of the password manager, incognito mode, browser history etc)
- Set a proxy server
- Set a Homepage and Pages to Load on Startup
Managing Chrome OS devices
The other screens under “Chrome” are exclusively for Chrome OS devices and require a separate licence from Google.
With Chrome OS devices you have options to configure
- Public Sessions – Configure settings for public session mode.
- Device Settings – Enforcing device enrollment, enable or disable Guest Mode, restrict sign into a set list of users etc
- Network Settings – Configure WiFi, Ethernet and VPN settings.
- Devices – View and audit enrolled Chrome OS devices.
Enrolling Chrome devices that have already been used
You need to first enrol your Chrome devices to enforce policies on them set in your Admin console. Each device you enrol adheres to the Chrome settings you set in the Admin console until you wipe or recover the device. Note that if you “powerwash” the device, you will not be able to enrol it. If you need to reset the device, see Wipe device data.
New devices should always be manually enrolled. Devices that have been previously enrolled, deprovisioned, wiped and placed back into pending are eligible for automatic enrollment if the policy is enabled.
See this link below for more details.