For administrators who manage Chrome OS devices for a business or school.
To enforce the device policies you set in your Google Admin console, you need to enroll Chrome OS devices. If you’re a Chrome Enterprise Upgrade or Chrome Education Upgrade customer, you can let users enroll them. Each enrolled device complies with the policies you set until you wipe or deprovision it.
Note: Your account type determines what Chrome features are available to you. For example, if your organization has an education account and you enroll a Chrome OS device bundled with Chrome Enterprise Upgrade, you can't access Chrome features that are exclusive to enterprise accounts.
Before you begin
- Before you can start to enroll devices you must accept the Terms of Service (TOS) agreement by doing the following:
Go to DevicesChrome devices.
- In the TOS pop-up, click I Accept.
- Chrome OS devices bundled with Chrome Enterprise Upgrade with Chrome version 80 or later preinstalled automatically prompt users to enroll after they accept the end-user license agreement. After enrollment, users can sign in and start using the device. If they’re not prompted to enroll, users should press Ctrl+Alt+E.
- You must enroll devices before anyone signs in to them. If you don’t, you need to wipe the device and restart enrollment. For details, see Wipe Chrome OS device data.
- If you want to control which users can enroll devices in your domain, see the Enrollment permissions user policy.
- By default, devices automatically enroll in the top-level organizational unit. If you want devices to automatically enroll in the organizational unit that the user belongs to, see the Device enrollment user policy.
Manually enroll devices
Turn on the device and follow the on-screen instructions until you see the sign-in screen. Don't sign in yet. If you see the enrollment screen instead of the sign-in screen, go to Step 4.
If you're enrolling a Chromebook tablet, tap Email or phone. Then, tap More Switch to full layout to open the on-screen keyboard.
Choose an option to get to the enrollment screen:
Click More options Enterprise enrollment (not available on Chromebook tablets).
Enter the username and password from your Google admin welcome letter or for a Google Account that has eligibility to enroll.
If prompted, enter the asset ID and location and click Next.
When you get a confirmation message that the device is successfully enrolled, click Done.
Users can now sign in to devices and start using them.
You can see a list of enrolled devices in your Admin console. For details, see View Chrome OS device details.
Let users enter details during enrollment
To make it easier to monitor and manage devices in your Admin console, let users enter or edit identifying information about the device before they complete enrollment.
From the Admin console Home page, go to DevicesChrome.
- On the left, click SettingsUsers & browsers.
To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Go to Enrollment controls.
- For Asset identifier during enrollment, select Users in this organization can provide asset ID and location during enrollment.
- For Enrollment permissions, choose an option:
- Allow users in this organization to enroll new or re-enroll existing devices—Users can enroll a new device or re-enroll a deprovisioned device. Users can also re-enroll a device that was wiped or factory reset.
- Only allow users in this organization to re-enroll existing devices (cannot enroll new or deprovisioned devices)—Users can only re-enroll devices that were wiped or factory reset. They can’t enroll new or re-enroll deprovisioned devices.
- Click Save.
How to enterprise enroll your Chromebook
Learn how to enterprise enroll your devices with Chrome Enterprise Upgrade."You do not have enough software licenses to enroll this device"
You used all of your organization’s available standalone upgrades for other devices. You need to purchase additional standalone upgrades. For details, see Manage Chrome upgrade orders.
You’re trying to enroll a device with a username that isn’t allowed to enroll devices. To let users enroll devices, see the Enrollment permissions user policy.