Block Google Chat on school-managed Chromebooks

You can block students from using Google Chat on their school-managed Chromebooks. You can block all students. Or, set different rules for students in certain groups.

Open all  |  Close all

Block Google Chat

Important: These steps work only on school-managed Chromebooks running Chrome OS.

Step 1: Block URLs

Before you begin: If needed, learn how to apply the setting to a department or group.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. 

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserSettings.

3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Under URL blocking, click Blocked URL and enter this URL:
   • https://chat.google.com
5. Click Blocked URL exceptions and enter https://hangouts.google.com/hangouts/_/meet.
6. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

For more details about blocking URLs, go to URL blocking.

Step 2: Put only the apps you need on your allowlist

If your school uses Android apps on Chromebooks, we recommend only adding the apps your school needs to your allowlist. You can also allow or block the installation of apps for all students or by group.

Related topics

• Deploy Android apps to managed users on Chromebooks
• Turn a service on or off for users

Step 3: Set a sign-in restriction

To prevent students from using personal accounts to access URLs on your denylist in Incognito mode, set a sign-in restriction on the school-managed devices for your organization.

For details, go to Sign-in restriction.

Step 4: Block secondary accounts

You can prevent students from downloading Android apps with their personal accounts.

Before you begin: If needed, learn how to apply the setting to a department or group.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. 

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserSettings.

3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Next to Sign-in to secondary accounts, click the Down arrow Block users from signing in to or out of secondary Google Accounts.
5. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

For more details, go to Sign in to secondary accounts.

Step 5: Disable Guest mode

To learn how to disable guest mode, go to Guest mode.