Overview: Managing Chrome device policies
This page is for administrators who manage Chrome devices for a business or school.
As a Chrome Enterprise admin, you can manage policies and settings for Chromebooks and other devices that run Chrome OS from the cloud-based Google Admin console.
Setting device-level policies
On the Device settings page, you can set policies that apply to anyone who uses a managed Chrome device, even if they sign in as a guest or with a personal Gmail account.
- Force-enroll the Chrome devices that you want to manage
- Control who uses devices, for example, by blocking guest mode
- Use a device as a purpose-built kiosk app
- Manage Chrome device updates
For details, see Set Chrome device policies.
Setting user-level (Chrome profile) policies
On the User & browser settings page, set policies that apply when users sign in to their managed Google Account on any device.
- Enforce more than 100 Chrome policies that can be managed with on-premise tools, such as the Windows Group Policy Management Editor.
- Sync users' work apps, home tabs, and themes when they sign in to Chrome on their personal computers.
For details, see Set Chrome policies for users or browsers.
Set app and extension policies
Set policies that control the use of apps and extensions.
From the Apps and extensions management page:
- Set policies for a specific app. For example, force-install an app and pin it to the Chrome taskbar.
- View all your configured apps and search for more apps to configure.
- Upload a configuration file to install custom policies and settings for managing an app.
- Deploy an app as a single-app kiosk (and optionally start it automatically when the device starts).
For details, see Set policies for an app.