For administrators who manage ChromeOS devices for a business or school.
To enforce the device policies you set in your Google Admin console, you need to enroll ChromeOS devices. If you’re a Chrome Enterprise Upgrade, Chrome Education Upgrade, or Kiosk & Signage Upgrade customer, you can let users enroll them. Each enrolled device complies with the policies you set until you wipe or deprovision it.
Note: Your account type determines what Chrome features are available to you. For example, if your organization has an education account and you enroll a ChromeOS device bundled with Chrome Enterprise Upgrade, you can't access Chrome features that are exclusive to enterprise accounts.
Before you begin
- Before you can start to enroll devices you must accept the Terms of Service (TOS) agreement by doing the following:
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Menu
Devices
Chrome
Devices.
- In the TOS pop-up, click I Accept.
-
- ChromeOS devices bundled with Chrome Enterprise Upgrade or Chrome Education Upgrade automatically prompt users to enroll after they accept the end-user license agreement. After enrollment, users can sign in and start using the device. If they’re not prompted to enroll, users should press Ctrl+Alt+E or select Enterprise enrollment before anyone signs in.
- You must enroll devices before anyone signs in to them. If you don’t, you need to wipe the device and restart enrollment. For details, see Wipe ChromeOS device data.
- If you want to control which users can enroll devices in your domain, see the Enrollment permissions user policy.
- By default, devices automatically enroll in the top-level organizational unit. If you want devices to automatically enroll in the organizational unit that the user belongs to, see the Device enrollment user policy.
Manually enroll devices
-
Turn on the device and follow the on-screen instructions until you see the sign-in screen. Don't sign in yet. If you see the enrollment screen instead of the sign-in screen, go to Step 4.
-
If you're enrolling a Chromebook tablet, tap Email or phone. Then, tap More
Switch to full layout to open the on-screen keyboard.
-
Open the enrollment screen. At the bottom of the sign-in screen, click Enterprise enrollment.
Or, for Chrome Enterprise Upgrade or Chrome Education Upgrade, use keyboard shortcut keys. Press Ctrl+Alt+E. - Enter username and password.
- If prompted, enter the asset ID and location.
- For devices with ChromeOS version 103 or earlier, click Next.
- For devices with ChromeOS version 104 or later:
- Chrome Enterprise Upgrade or Chrome Education Upgrade—Click Enroll enterprise device.
- Kiosk & Signage Upgrade—Click Enroll kiosk or signage device.
- (Kiosk & Signage Upgrade) Make sure that you selected the enrollment type you want
click Confirm.
-
When you get a confirmation message that the device is successfully enrolled, click Done.
For devices enrolled with Chrome Enterprise Upgrade or Chrome Education Upgrade, users can sign in and start using them. For devices enrolled with Kiosk & Signage Upgrade, users can't sign in or use managed guest sessions.
You can see a list of enrolled devices in your Admin console. For details, see View ChromeOS device details.
Let users enter details during enrollment
To make it easier to monitor and manage devices in your Admin console, let users enter or edit identifying information about the device before they complete enrollment.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Chrome
Settings. The User & browser settings page opens by default.
If you signed up for Chrome Browser Cloud Management, go to Menu
Chrome browser
Settings.
-
To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Go to Enrollment controls.
- For Asset identifier during enrollment, select Users in this organization can provide asset ID and location during enrollment.
- For Enrollment permissions, choose an option:
- Allow users in this organization to enroll new or re-enroll existing devices—Users can enroll a new device or re-enroll a deprovisioned device. Users can also re-enroll a device that was wiped or factory reset.
- Only allow users in this organization to re-enroll existing devices (cannot enroll new or deprovisioned devices)—Users can only re-enroll devices that were wiped or factory reset. They can’t enroll new or re-enroll deprovisioned devices.
- Click Save.
How to enterprise enroll your Chromebook
Learn how to enterprise enroll your devices with Chrome Enterprise Upgrade.
How to enterprise enroll your Chromebook
Troubleshoot
Change the upgrade typeIf you accidentally enrolled a device using the wrong upgrade type, you'll need to deprovision the device and enroll it again using the correct upgrade type.
You used all of your organization’s available standalone upgrades for other devices. You need to purchase additional standalone upgrades. For details, see Manage Chrome upgrade orders.
You’re trying to enroll a device with a username that isn’t allowed to enroll devices. To let users enroll devices, see the Enrollment permissions user policy.