You can block all students in an organizational unit from using Google Hangouts and Google Chat on their school-managed Chromebooks.
Step 1: Block URLs
Step 2: Whitelist only the apps your school needs
If your school uses Android apps on Chromebooks, we recommend whitelisting only the apps your school needs. To enable Google Hangouts or Google Chat for teachers in your organization, but keep those apps blocked for students, change the installation policy for student organizational units to Block.
For more information about whitelisting Android Apps, go to Deploy Android apps to managed users on Chromebooks.
Note: To learn how to turn off Google Chat by organizational unit, go to Turn a service on or off for G Suite users.
Step 3: Set a sign-in restriction
To prevent students from using personal accounts to access blacklisted URLs in Incognito Mode, set a sign-in restriction on the school-managed devices for example.com.
For step-by-step instructions, go to Set Chrome device policies: Sign-in restriction.
For more information about Incognito mode, go to Set Chrome policies for users or browsers: Incognito mode.
Step 4: Block secondary accounts
To prevent students from downloading Android apps with their personal accounts, in the Admin console, go to DevicesChrome managementsUser & browser settingsselect a student organizational unit (OU). Next to Sign-in to secondary accounts, select Block users from signing in to or out of secondary Google Accounts.
For step-by-step instructions, go to Set Chrome policies for users or browsers: Sign in to secondary accounts.