Overview: Managing Chrome device policies

This page is for administrators who manage Chrome devices for a business or school.

As a Chrome Enterprise admin, you can manage Chromebooks and other devices that run Chrome OS, from a cloud-based Admin console. Here is an overview of how to manage policies and settings. Click links for details.

From your Admin console...

Set device-level policies

On the Device settings page, set policies that apply to anyone who uses a managed Chrome device, even if they sign in as a guest or with a personal Gmail account.

  • Force-enroll the Chrome devices you want to manage
  • Control who uses devices, for example, by blocking guest mode
  • Use a device as a purpose-built kiosk app
  • Manage Chrome device updates

For details, see Set Chrome device policies.

Set user-level (Chrome profile) policies

On the User & browser settings page, set policies that apply when users sign in to their managed Google Account on any device. 

  • Enforce 100+ of the same Chrome policies that can be managed with on-premise tools like Windows Group Policy.
  • Sync users' work apps, home tabs, and themes when they sign in to Chrome on their personal computers.

For details, see Set Chrome user policies.

Set app and extension policies

Set policies that control the use of apps and extensions.

From the Apps and extensions management page:  

  • Set policies for a specific app. For example, force-install an app and pin it to the Chrome taskbar.
  • View all your configured apps, and search for more apps to configure.
  • Upload a config file to install custom policies and settings for managing an app.
  • Deploy an app as a single-app kiosk app (and optionally start it automatically when the device boots).
  • For details, see Set Chrome policies for one app.

Other options

Was this helpful?
How can we improve it?