Notification

Planning your return to office strategy? See how ChromeOS can help.

Enroll ChromeOS devices

For administrators who manage ChromeOS devices for a business or school.

Want to remotely enroll and manage ChromeOS devices? Start your Chrome Enterprise Upgrade trial at no charge today

To enforce the device policies you set in your Google Admin console, you need to enroll ChromeOS devices. If you’re a Chrome Enterprise Upgrade, Chrome Education Upgrade, or Kiosk & Signage Upgrade customer, you can let users enroll them. Each enrolled device complies with the policies you set until you wipe or deprovision it.

Note: Your account type determines what Chrome features are available to you. For example, if your organization has an education account and you enroll a ChromeOS device bundled with Chrome Enterprise Upgrade, you can't access Chrome features that are exclusive to enterprise accounts.

Before you begin

  • Before you can start to enroll devices you must accept the Terms of Service (TOS) agreement by doing the following:
    1. Sign in to your Google Admin console.

      Sign in using your administrator account (does not end in @gmail.com).

    2. From the Admin console Home page, go to  Menu and then Devicesand thenChromeand thenDevices.
    3. In the TOS pop-up, click I Accept.
  • ChromeOS devices bundled with Chrome Enterprise Upgrade or Chrome Education Upgrade automatically prompt users to enroll after they accept the end-user license agreement. After enrollment, users can sign in and start using the device. If they’re not prompted to enroll, users should press Ctrl+Alt+E or select Enterprise enrollment before anyone signs in.
  • You must enroll devices before anyone signs in to them. If you don’t, you need to wipe the device and restart enrollment. For details, see Wipe ChromeOS device data.
  • If you want to control which users can enroll devices in your domain, see the Enrollment permissions user policy.
  • By default, devices automatically enroll in the top-level organizational unit. If you want devices to automatically enroll in the organizational unit that the user belongs to, see the Device enrollment user policy.

Manually enroll devices

  1. Turn on the device and follow the on-screen instructions until you see the sign-in screen. Don't sign in yet. If you see the enrollment screen instead of the sign-in screen, go to Step 4.

  2. If you're enrolling a Chromebook tablet, tap Email or phone. Then, tap More More and then Switch to full layout to open the on-screen keyboard.

  3. Open the enrollment screen. At the bottom of the sign-in screen, click Enterprise enrollment.
    Or, for Chrome Enterprise Upgrade or Chrome Education Upgrade, use keyboard shortcut keys. Press Ctrl+Alt+E.

  4. Enter username and password.
  5. If prompted, enter the asset ID and location.
  6. For devices with ChromeOS version 103 or earlier, click Next.
  7. For devices with ChromeOS version 104 or later:
    • Chrome Enterprise Upgrade or Chrome Education Upgrade—Click Enroll enterprise device.
    • Kiosk & Signage Upgrade—Click Enroll kiosk or signage device.
  8. (Kiosk & Signage Upgrade) Make sure that you selected the enrollment type you wantand thenclick Confirm.
  9. When you get a confirmation message that the device is successfully enrolled, click Done.

For devices enrolled with Chrome Enterprise Upgrade or Chrome Education Upgrade, users can sign in and start using them. For devices enrolled with Kiosk & Signage Upgrade, users can't sign in or use managed guest sessions.

You can see a list of enrolled devices in your Admin console. For details, see View ChromeOS device details.

Let users enter details during enrollment

To make it easier to monitor and manage devices in your Admin console, let users enter or edit identifying information about the device before they complete enrollment.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Devicesand thenChromeand thenSettings. The User & browser settings page opens by default.

    If you signed up for Chrome Browser Cloud Management, go to Menu and then Chrome browserand thenSettings.

  3. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. Go to Enrollment controls.
  5. Click Asset identifier during enrollment.
    1. Select Users in this organization can provide asset ID and location during enrollment.
    2. Click Save.
  6. Click Enrollment permissions. Choose an option and click Save:
    1. Allow users in this organization to enroll new or re-enroll existing devices—Users can enroll a new device or re-enroll a deprovisioned device. Users can also re-enroll a device that was wiped or factory reset.
    2. Only allow users in this organization to re-enroll existing devices (cannot enroll new or deprovisioned devices)—Users can only re-enroll devices that were wiped or factory reset. They can’t enroll new or re-enroll deprovisioned devices.

How to enterprise enroll your Chromebook

Learn how to enterprise enroll your devices with Chrome Enterprise Upgrade.

How to enterprise enroll your Chromebook

Require managed users to enroll their devices

You can require managed users to enroll their non-zero touch devices if the following conditions are met:

  • This is the first user signing into the device. For example, the device is new or just been reset to factory settings.
  • The user has the permission required to enroll devices. For more details, see Enrollment permissions.
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Devicesand thenChromeand thenSettings. The User & browser settings page opens by default.

    If you signed up for Chrome Browser Cloud Management, go to Menu and then Chrome browserand thenSettings.

  3. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. Go to Enrollment controls.
  5. For Initial sign-in choose an option:
    • Don't require users to enroll device (default)—Managed users in the organizational unit the policy is assigned to can always sign in without enrolling their devices.
    • Require users to enroll device—Managed users in the organizational unit the policy is assigned to are required to enroll their devices.
  6. Click Save.

Troubleshoot

Change the upgrade type

If you accidentally enrolled a device using the wrong upgrade type, you'll need to deprovision the device and enroll it again using the correct upgrade type.

Error: You do not have enough upgrades to enroll this device

You used all of your organization’s available standalone upgrades for other devices. You need to purchase additional standalone upgrades. For details, see Manage Chrome upgrade orders.

Error: This user account is not eligible for the service

You’re trying to enroll a device with a username that isn’t allowed to enroll devices. To let users enroll devices, see the Enrollment permissions user policy.

Related topics

Was this helpful?

How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
12117490597445455998
true
Search Help Center
true
true
true
true
true
410864
false
false