Chrome for Business and Education

Chrome Devices

Manage device settings

This article is for Chrome for Business and Education administrators only.

The Chrome device settings in the Admin console configure your organization's Chrome devices regardless of who signs in. To manage device settings:

  1. Sign in to the Admin console.
  2. Select Settings from the menu at the top.
  3. Select Chrome from the list of services on the left and then click Device Settings.
  4. Select the organizational unit to which you want the settings to apply.
  5. Configure the policies on the page.
  6. Click Save changes at the bottom of the screen. Settings typically take effect within minutes but might take up to an hour to propagate through your organization.

The device policies are as follows.

Read the descriptions of every setting below to understand the available configuration options and how to optimize your organization's Chrome experience.
Enroll devices automatically

Specifies whether Chrome devices you purchase from Google can be enrolled in your domain automatically the first time a user in your domain logs into it. If this setting is disabled, an administrator must enroll each Chrome device manually using the steps decribed in Enroll Chrome devices.

Automatic enrollment only works for devices already listed under the Devices page in the Admin console. Also, automatic enrollment requires Chrome version 18 or higher.
Allow Guest mode

Controls whether to allow guest browsing on managed Chrome devices. If you select Allow guest mode (the default), the main sign-in screen offers the option for a user to sign in as a guest. If you select Do not allow guest mode, a user must sign in using a Google Account or Google Apps account. When a user signs in using guest mode, your organization's policies are not applied.

Restrict sign-in to list of users

Enables you to control which users have permission to sign into a managed Chrome device.

By default, any user with a Google Account or Google Apps account can sign in; however, if you include one or more user names in the text box, only the named users can sign in; other users will receive an error message. Enter user names in the form of their primary email addresses, with names separated by commas. The names can include the wildcard * (to match any set of characters).

If you allow guest browsing, any user will be able to use the machine regardless of the restriction by using guest mode.
Erase all user info, settings, and state after each sign-out

Specifies whether enrolled Chrome devices delete all locally-stored settings and user data every time a user signs out. Data the device syncs persists in the cloud but not on the device itself.

Show user names and photos on the sign-in screen

Specifies whether the Chrome device's sign-in screen displays the names and pictures of users who have signed in to the device.

Auto update

Specifies whether Chrome devices automatically update to new versions of Chrome OS as they are released. Allow auto-updates is strongly recommended.

Software support is available only for the latest version of Chrome OS.
Restrict google chrome version to at most

Prevents Chrome devices from updating to versions of Chrome OS beyond the version number specified. Using this setting is recommended only if a later version of Chrome OS causes compatibility issues with tools in your domain that need to be resolved prior to updating.

You can configure one or more of your Chrome devices to use the development or beta channel to help identify compatibility issues in upcoming versions of Chrome OS.

Software support is available only for the latest version of Chrome OS.
Randomly scatter auto updates over

Specifies the approximate number of days over which managed Chrome devices in your organization download an update following its release. The downloads occur at various times during this period to avoid causing traffic spikes that can impact old or low-bandwidth networks. Devices that are offline during this period download the update when they go back online.

Set this policy to its default (none) or a low number unless you know your network can't handle traffic spikes. This lets users benefit from new Chrome enhancements and features quicker, minimizes the number of concurrent versions in your organization, and simplifies change management during the update period.

Release channel

Specifies whether users can change the release channel on this device.

If you select Keep channel as it is on device currently, administrators can override the policy on an individual device as follows:
  1. If the device is enrolled, wipe or recover it. Do not re-enroll the device yet.
  2. Sign in to the Chrome device.
  3. Update the channel.
    If you change to a more stable channel, the Chrome device starts receiving updates from the more stable channel when its Chrome OS version number catches up to the Chrome OS version number of the less stable channel currently running on the Chrome device. To immediately change to the stable channel, recover the Chrome device.
  4. Check the About Chrome OS page to verify Chrome downloads the update according to the newly-selected channel. If Chrome does not download the update, click Check for updates.
  5. After the update installs, reboot, wipe, and re-enroll the device.
Google recommends that a few IT personnel and end-users in your organization use the beta and development release channels to help your organization:
  • Become familiar with new Chrome OS features before they appear on the stable channel.
  • Prepare users for any user interface changes prior to the update.
  • Determine whether your network has incompatibilities or issues with the next version of Chrome.
  • Understand if problems are specific to certain versions of Chrome when troubleshooting.
  • Provide feedback on upcoming Chrome updates.
Mobile data roaming

Specifies whether users on this Chrome device can go online using a mobile network maintained by a different carrier. With this setting, you fix the value of the Allow mobile data roaming check box on the Internet page in the Chrome device Settings.

If you allow data roaming, charges may apply.

Anonymous metric reporting

Specifies whether the Chrome device sends Google usage statistics and crash reports whenever a system or browser process fails.

Usage statistics contain aggregated information such as preferences, button clicks, and memory usage. They don't include web page URLs or any personal information. Crash reports contain system information at the time of the crash, and may contain web page URLs or personal information, depending on what was happening at the time of the crash.

Device state reporting

Specifies whether Chrome devices enrolled in your domain report their current device state, including firmware, Chrome and platform version, and boot mode. If this setting is enabled, you can view a Chrome device's current device state by clicking on the device in the Devices tab.

Time Zone
Specify the timezone to set for your users' devices from the drop-down list.