You need to first enroll your Chrome devices to enforce policies on them set in your Admin panel. Each device you enroll adheres to the Chrome settings you set in the Admin panel until you wipe or recover the device.
You have two options: Manual enrollment or Automatic enrollment. Manual enrollment will work for all devices, and automatic enrollment only applies to devices that have a Support end date listed under the Devices page in the Admin panel.
Manual enrollment
Manually enroll the device before anyone (including administrators) signs in to the Chrome device. If a user signs in before you enroll the device, the device ignores the Admin panel settings, and you must wipe the device and restart the enrollment process.
-
Turn on the Chrome device and follow the onscreen instructions until you see the sign on screen. Do not sign in yet.
-
Before signing in to the Chrome device, press the key combination Ctrl-Alt-E. The enrollment screen appears.
-
Enter the username and password from your Google admin welcome letter, or the username and password for an existing Google Apps user on your account.
- Click Enroll device. You will receive a confirmation message that the device has been successfully enrolled.
Automatic enrollment
To enable automatic enrollment, in the Admin panel, go to Settings > Chrome > Device Settings, and make sure the setting Enroll Devices Automatically is set to Allow devices to enroll automatically.
Automatic enrollment will enroll a Chrome device the first time a user signs in with their Google Apps username and password, and it requires no additional action from the user. If a user attempts to sign in with a username that's outside of your domain, such as a personal Gmail account, the device shows an alert that says the username is ineligible for use on the device.
- While automatic enrollment guides the user with enrolling the device, it shouldn't be used as the only way to enforce enrollment of the devices. If the device doesn’t automatically enroll, follow the instructions above to manually enroll the device.
- If you need to automatically enroll many devices in your organization, test automatic enrollment with a few devices first before deploying it to all devices in your organization.