Enroll ChromeOS devices

For administrators who manage ChromeOS devices for a business or school.

Want to remotely enroll and manage ChromeOS devices? Start your Chrome Enterprise Upgrade trial at no charge today

To enforce the device policies you set in your Google Admin console, you need to enroll ChromeOS devices. If you’re a Chrome Enterprise Upgrade, Chrome Education Upgrade, or Kiosk & Signage Upgrade customer, you can let users enroll them. Each enrolled device complies with the policies you set until you wipe or deprovision it.

Note: Your account type determines what Chrome features are available to you. For example, if your organization has an education account and you enroll a ChromeOS device bundled with Chrome Enterprise Upgrade, you can't access Chrome features that are exclusive to enterprise accounts.

Before you begin

• Before you can start to enroll devices you must accept the Terms of Service (TOS) agreement by doing the following:
  1. Sign in to your Google Admin console.

     Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to  Menu  DevicesChromeDevices.
  3. In the TOS pop-up, click I Accept.
• ChromeOS devices bundled with Chrome Enterprise Upgrade or Chrome Education Upgrade automatically prompt users to enroll after they accept the end-user license agreement. After enrollment, users can sign in and start using the device. If they’re not prompted to enroll, users should press Ctrl+Alt+E or select Enterprise enrollment before anyone signs in.
• You must enroll devices before anyone signs in to them. If you don’t, you need to wipe the device and restart enrollment. For details, see Wipe ChromeOS device data.
• If you want to control which users can enroll devices in your domain, see the Enrollment permissions user policy.
• By default, devices automatically enroll in the top-level organizational unit. If you want devices to automatically enroll in the organizational unit that the user belongs to, see the Device enrollment user policy.

Manually enroll devices

1. Turn on the device and follow the on-screen instructions until you see the sign-in screen. Don't sign in yet. If you see the enrollment screen instead of the sign-in screen, go to Step 4.

2. If you're enrolling a Chromebook tablet, tap Email or phone. Then, tap More Switch to full layout to open the on-screen keyboard.

3. Open the enrollment screen. At the bottom of the sign-in screen, click Enterprise enrollment.
   Or, for Chrome Enterprise Upgrade or Chrome Education Upgrade, use keyboard shortcut keys. Press Ctrl+Alt+E.

4. Enter username and password.
5. If prompted, enter the asset ID and location.
6. For devices with ChromeOS version 103 or earlier, click Next.
7. For devices with ChromeOS version 104 or later:
   • Chrome Enterprise Upgrade or Chrome Education Upgrade—Click Enroll enterprise device.
   • Kiosk & Signage Upgrade—Click Enroll kiosk or signage device.
8. (Kiosk & Signage Upgrade) Make sure that you selected the enrollment type you wantclick Confirm.

9. When you get a confirmation message that the device is successfully enrolled, click Done.

For devices enrolled with Chrome Enterprise Upgrade or Chrome Education Upgrade, users can sign in and start using them. For devices enrolled with Kiosk & Signage Upgrade, users can't sign in or use managed guest sessions.

You can see a list of enrolled devices in your Admin console. For details, see View ChromeOS device details.

Let users enter details during enrollment

To make it easier to monitor and manage devices in your Admin console, let users enter or edit identifying information about the device before they complete enrollment.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. The User & browser settings page opens by default.

   If you signed up for Chrome Browser Cloud Management, go to Menu  Chrome browserSettings.

3. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
4. Go to Enrollment controls.
5. For Asset identifier during enrollment, select Users in this organization can provide asset ID and location during enrollment.
6. For Enrollment permissions, choose an option:
   • Allow users in this organization to enroll new or re-enroll existing devices—Users can enroll a new device or re-enroll a deprovisioned device. Users can also re-enroll a device that was wiped or factory reset.
   • Only allow users in this organization to re-enroll existing devices (cannot enroll new or deprovisioned devices)—Users can only re-enroll devices that were wiped or factory reset. They can’t enroll new or re-enroll deprovisioned devices.
7. Click Save.

How to enterprise enroll your Chromebook

Learn how to enterprise enroll your devices with Chrome Enterprise Upgrade.

How to enterprise enroll your Chromebook

Troubleshoot

Change the upgrade type

If you accidentally enrolled a device using the wrong upgrade type, you'll need to deprovision the device and enroll it again using the correct upgrade type.

Error: You do not have enough upgrades to enroll this device

You used all of your organization’s available standalone upgrades for other devices. You need to purchase additional standalone upgrades. For details, see Manage Chrome upgrade orders.

Error: This user account is not eligible for the service

You’re trying to enroll a device with a username that isn’t allowed to enroll devices. To let users enroll devices, see the Enrollment permissions user policy.

Related topics

• ChromeOS Device Quick Start Guide
• Move a ChromeOS device to an organizational unit
• Order options for Chrome Enterprise
• Migrating to cloud-based Chrome management