Sign users out of their Google Account on Windows 10 or 11 devices

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; Cloud Identity Premium.  Compare your edition

For computers enrolled in Windows device management.

As an administrator, you can remotely sign a user out of their account on a Microsoft Windows 10 or 11 device enrolled in Windows device management. Signing out a user can protect your organization’s data when a Windows device is lost or stolen, or if the user forgot to sign out of their Google Account.

How user sign-out works

• When you remotely sign a user out from their device, they're signed out of their Google Account in the web browser, not from the Windows device itself.
• After you sign a user out of their Google Account, the next time they sign in to the device, they must enter their Google credentials in the Google sign-in screen for additional security. Learn more about signing in after a security event.

Note: To automatically lock a users’ Windows device after a specific period of inactivity, add a custom setting for DeviceLock.

Sign a user out from their Google Account on a Windows device

Before you begin: Devices must be enrolled in Windows device management for this feature to be available. Learn more

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Go to Menu  DevicesOverview.
3. Click Endpoints.
4. Select the computers that you want to sign users out from.
5. At the top left, click MoreSign Out User. 
6. Click Sign Out User to confirm.