As an administrator, you can find details about the ChromeOS devices in your domain in the Google Admin console. You can see the user of each device and review information, such as serial number, enrollment date, and last synchronization. You can also create organizational units to apply settings to different groups of devices.
See device details
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Menu
Devices
Chrome
Devices.
Download a list of devices
You can download a list of your ChromeOS devices as a CSV file. The maximum number of devices that you can export to CSV is 100,000.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Menu
Devices
Chrome
Devices.
- To show all devices, on the left, click All devices. Otherwise, select a child organizational unit.
- (Optional) Apply filters to search for specific devices. For details, see Filter by status.
- At the top, click Export.
A link appears in the top right, under Your tasks. - Click Download CSV.
- Use Google Sheets, or your preferred spreadsheet software, to open the CSV file. For details, see Import data sets & spreadsheets.
Name | Description |
---|---|
deviceId | Device ID |
serialNumber | Serial number |
model | Hardware model |
lastPolicySyncMs | Last recorded date (UNIX Epoch time, milliseconds) that device synchronized with policy settings |
osVersion | ChromeOS version |
orgUnitPath | Organizational unit |
provisionStatus | Provisioning status |
annotatedAssetId |
Custom field: Asset ID Size limited to 1KB |
annotatedUser | Custom field: User |
annotatedLocation |
Custom field: Location Size limited to 1KB |
annotatedNotes |
Custom field: Note Size limited to 1KB |
ethernetMacAddress | Ethernet MAC address |
macAddress | Wi-Fi MAC address |
autoUpdateExpiration | Date when the device stops receiving automatic updates, determined by the Auto Update policy |
meid | Mobile equipment identifier |
eid | The eSIM chip’s hardware identifier. You will see the EID column only if devices with eSIM are enrolled. |
eUICC ID | Embedded universal integrated circuit card identifier, if available |
platformVersion | Platform version |
firmwareVersion | Firmware version |
lastDeprovisionMs | Last recorded date (UNIX Epoch time, milliseconds) that device was deprovisioned |
deprovisionReason | Reason why device was deprovisioned |
mostRecentActivity | Last recorded date (UNIX Epoch time, milliseconds) of the most recent device activity and duration of session (in seconds) |
mostRecentUser | The latest user’s user ID |
wifiSignalStrength | Wi-Fi signal strength (dBm) |
volumeLevelPercent | Volume level (as a percentage) |
cpuUtilizationPercent | CPU in use (as a percentage) |
memoryUsageByte | Memory in use (bytes) |
diskSpaceUsageByte | Disk space in use (bytes) |
kioskApp | Kiosk app ID and version |
lanIpAddress | LAN IP address |
wanIpAddress | WAN IP address |
lastIpAddressUpdateMs | Last recorded date (UNIX Epoch time, milliseconds) that LAN and WAN IP addresses were reported |
bootMode | Boot mode |
tpmFirmwareVersion | Trusted Platform Module (TPM) firmware version |
Note: No values are exported for lastReportMs and manufactureMs, even though they appear in the CSV file and spreadsheet.
About the devices page
On the ChromeOS devices page, you can see the following details for each of your users' ChromeOS devices.
Field | Description |
---|---|
Serial number | Device serial number. Click Serial Number to see general information about the device. To see the serial number before signing in to the device, press Alt+V. |
Status | Displays whether or not the device is in use, for example Provisioned or Deprovisioned. |
Asset ID | The administrator-annotated asset identifier. To see the ID and the ChromeOS version number, press Alt+V before signing in to an enrolled device. You can also see the ID on the chrome://policy page. You can update this field manually in the Custom fields section or during enrollment with the Asset identifier during enrollment feature. |
Online Status | A green circle means that the device is online and working correctly. Learn more about device states. This field only applies to organizational units that are set up to contain auto-launched kiosk devices. |
Enrollment time | Date and time the device was registered with your domain. |
Last policy sync | Date and time the device was last synchronized with the policy settings in the Admin console. |
User | Initially populated with the user who first enrolled the device. You can edit the field after auto population. |
Location | Address or location of the device. You can edit this field. |
Notes | Used for special information about a device. You can use this field to customize searches. |
OS version policy compliance |
Indicates whether the device's OS version is in compliance with the OS version specified by your organization's policy. Value is checked and updated every 3 hours. Possible values:
|
Device details
Click the serial number of any device to see device details. On the left, you can choose to move, disable, deprovision, clear user profiles, or remotely access a device. If the device is an autolaunched kiosk, you can also choose to reboot, capture logs, take a screenshot, set the volume on the device.
Reset devicesAs an admin, you can reset devices to reassign them from one person to another in your organization. For example, you might want to reassign a device when an employee leaves or move a device from one student to another.
When you reset a device, you can clear user profiles, which removes all user profiles and data from the device but keep the device's enrollment state and device data, such as network profiles.
Or, you can perform a factory reset which removes all data including user profiles, device policies, and enrollment data. Devices are restored to factory state. If forced re-enrollment is turned off, users can use the device without re-enrolling it into your account.
The clear user profiles command stays valid for up to 180 days, and the factory reset command stays valid for up to 5 years. This helps to ensure that the commands complete, even if devices are temporarily offline or unavailable. If there is already an existing pending command, subsequent commands are queued for the device. Queued commands might include reboot, set volume, take screenshot, upload logs, and so on. If a command remains stuck in pending for too long, connect the affected devices to the internet and reboot them. If you continue to have issues with a stuck command, contact support.
Note: Some fields might not be filled in, depending on whether you enabled device state reporting.
Hardware and OS
Field | Description |
---|---|
Model | Make and model of the device. |
Serial number | Device serial number. |
MEID / IMEI | Mobile equipment identifier. A unique number that identifies the device if it has cellular or mobile capabilities. For CDMA devices this will be MEID. Other cellular devices will report IMEI. A user needs to sign in to the device for you to see the MEID on the Devices page. |
eUICC IDs | Embedded universal integrated circuit card identifiers—the eSIM chip’s hardware identifier. |
Wi-Fi MAC | Media access control address. A network address that's assigned to the device for a Wi-Fi connection. A user needs to sign in to their device in order to see the MAC address on the Devices page. |
Ethernet MAC |
Media access control address. A network address that's assigned to the device for an Ethernet connection. A user needs to sign in to their device in order to see the MAC address on the Devices page. |
Chrome version | Version of Chrome that the ChromeOS version is based on. |
Platform version | Version of ChromeOS that the device is on. |
Firmware version | Version of the device firmware. |
TPM firmware version | Version of the device Trusted Platform Module (TPM) firmware. |
Boot mode | Specifies whether the device is in developer mode or verified mode. |
Last OS update | Date and time the device’s OS was last updated. |
Last OS update check | Date and time the device last checked to see if new OS updates were available. |
Last reboot | Date and time the device was last restarted. |
Update status |
Current update status. Possible values:
To see update status info, you need to turn on device state reporting. For details, read about the Device reporting setting. |
Channel version | Target device’s OS version set by your organization’s policy. |
OS version policy compliance |
Indicates whether the device's OS version is in compliance with the OS version specified by your organization's policy. Value is checked and updated every 3 hours. Possible values:
|
Enrollment time | Date and time the device was registered with your domain. |
Directory API ID | Directory API ID used for the unique device. This ID is different from the asset ID or serial number. |
Automatic updates until | Indicates when extended automatic updates stop, as determined by the Auto Update policy. |
Upgrade type |
Specifies whether the device is a ChromeOS device bundled with a Chrome Enterprise upgrade or a standalone ChromeOS device with an upgrade.
|
Custom Fields
To edit any of these fields, click Edit .
Field | Description |
---|---|
Asset ID | Unique ID of the device. |
User | Username that first enrolled the device to the domain (automatically populated). |
Location | Address or location of the device. |
Notes | Used for special information related to a device. You can use the information later when searching for devices. |
System activity and troubleshooting
Setting | What it monitors |
---|---|
Recent activity |
Shows activity on the device, when it was last used and for how long, in the last 30 days. The times and dates shown are based on the device’s time zone. To see recent activity info, you need to turn on device state reporting. For details, read about the Device reporting setting. |
Recent users |
Lists the last users of the device. Kiosk and guest sessions are not reported. Email addresses for unmanaged users are not displayed. Instead, they display as User not managed by your organization. To see recent users info, you need to turn on tracking recent device users. For details, read about the Device reporting setting. Only keeps the 100 most recent users. |
Wi-Fi signal strength |
Wi-Fi signal strength of devices. Wi-Fi information is not reported for the sign-in screen before users sign in or for users who sign in with a Google Account outside of your organization, such as a personal Gmail account. |
Volume level |
Volume level (%) of devices in kiosk mode. |
CPU utilization |
How much CPU (%) the device is using. |
CPU temperature |
Temperature of each CPU core, in Celsius (oC). |
Memory usage |
How much memory (% and GB) the device is using. |
Disk space usage |
How much disk space (% and GB) the device is using. |
Kiosk app info |
Not available for devices that are running managed guest sessions. App name and version number. |
IP addresses |
Date and time that the LAN and WAN IP addresses for the device were last reported. The time and date are based on the device's time zone. IP address information is not reported for the sign-in screen before users sign in or for users who sign in with a Google Account outside of your organization, such as a Gmail account. LAN—The wired or wireless network that the device is connected to. Sometimes, you can use this to locate the exact floor and building the device is in. WAN—The unique IP address that the device is connected to the Internet with. |
System logs |
Shows system logs that were automatically captured from kiosk devices. Logs are captured and uploaded every 12 hours. Logs are stored for a maximum of 60 days. The latest 100 logs are available to download. To see system log info, you need to turn on system log upload. For details, read about the Enable System Log Upload setting. Only keeps the last 30 days history. Tip: Use Log Analyzer to examine the system logs. |
Screenshots |
Most recent screenshots of devices, in reverse chronological order. Click a blue link to view the screenshot. Only keeps the last 30 days history. |
Device policies unable to be applied
Provides a list of any device policies that could not be applied to a device due to the policy not supporting the OS version of the device. For example, when a policy has a minimum supported ChromeOS version of 96, but the device is on ChromeOS version 90, you must update the device to M96 or later before you can apply the policy.
Recent device events
Provides a pre-filtered list of device events captured in Chrome log events. You can change the selection of events by modifying the filter. For more information on available events, see Chrome log events.
Note: Not all Chrome log events are displayed.
On each device’s page, you can use the following settings to remotely monitor devices. For details on monitoring kiosks, see Monitor kiosk health.
Device actions
Action | Description |
---|---|
Move |
When you enroll devices, they automatically go in the top-level organizational unit. Click Move and choose the organization that you want to move the device to. |
Reset | Remotely deletes data from devices. You can remove all user profiles and data from the selected device but keep the device's enrollment state and device data, such as network profiles. Or, you can completely wipe it, removing all data including user profiles, device policies, and enrollment data. For details, see Reassign a device to a different user. |
Reset ESIM |
Permanently removes all eSIM profiles from devices. Users see a message letting them know that eSIM profiles have been cleared from the device. eSIM profiles are no longer listed on the mobile data settings page on their devices. Check with your carrier for expected behavior before you reset your eSIM. In many cases, devices do not automatically get a new eSIM profile using the same policy configured SMDP+URL. Note: Reset ESIM is the only way to remotely remove an eSIM profile. If you remove cellular configurations, deprovision or disable devices, or move devices from one organizational unit to another, eSIM profiles remain on devices. |
Disable | Disable a device so no one can use it. For example, if it's lost or stolen. For details, see Repair, repurpose or retire ChromeOS devices. |
Deprovision | Deprovision devices that are no longer being used in your organization, so that you’re no longer managing them. For details, see Repair, repurpose or retire ChromeOS devices. |
Capture logs |
For devices that have enabled device system log upload Triggers a new upload of device attributes and logs for devices. Logs are stored in System logs, under System activity and troubleshooting. You’ll see a message when the device attributes are successfully uploaded. |
Export logs |
Only available for kiosk devices. Displayed instead of Capture logs when all requirements are met. Requirements
You can troubleshoot ChromeOS devices by capturing additional logs and exporting them from the Admin console. |
Remote desktop |
Starts a remote session to a device. For details, see Access ChromeOS devices remotely. |
Reboot |
Only available on kiosk devices Restarts the ChromeOS device if it's been running for at least 10 minutes. |
Take a screenshot |
Only available on kiosk devices Takes a screenshot of the device's screen and stores it in Screenshots, under System activity and troubleshooting. . If a screenshot fails, you’ll see a message with one of the following error codes:
Note: Devices that are in kiosk mode and have had user input (for example, mouse or keyboard movements within a kiosk session) are not eligible for screenshots until the device is restarted. Then, the device must autolaunch into a kiosk app for screenshots to work. |
Set volume |
Only available on kiosk devices Remotely sets the volume level for managed devices in kiosk mode. Use the slider to select the volume level and click Set volume. In the top right, under Your tasks, you’ll see a notification when the volume is successfully set on the device. |
To use bulk actions on the Devices page, check the box next to the devices you want to select. Then choose a bulk action:
- Move selected items
- Disable selected items
- Deprovision selected items
- Reboot selected items
- Reset selected items
- Reset eSIM (Available only if all selected devices are eSIM capable devices)
Searching
On the Devices page, click the heading of a column to sort by different criteria. You can apply filters to search for specific devices.
Search for devices- (Optional) To search all organizational units, on the left, click All devices.
Note: For delegated admins, clicking All devices lists only the devices from organizational units that the delegated admin has access to. - Click Search or add a filter and select the field to search.
- Enter your search criteria and click Apply.
- (Optional) To search multiple fields, add a filter for each field, enter search criteria, and click Apply.
You can filter the devices to see all that are provisioned, deprovisioned, disabled, or suspended.
- On the main listing page, click Status.
- From the menu, select a status and click Apply.
You can see all devices that have the specified status. You can also view all devices.
To search only in a specific field (for example, to search for a specific user), you add a filter for that field and enter search criteria.
Filters for the fields User, Location, Notes, and Model return only strings that contain the exact word you entered in the search criteria. For example, if some devices have the value tasty applepie and you enter apple in the filter, no device is returned. If you enter tasty all tasty applepie devices are returned. Symbols and punctuation marks are treated as spaces. For example, searching for admin@example.com is the same as searching for admin example com.
Filters such as Asset ID, Serial number, and Chrome version perform a real substring partial matching search when the user enters 2 or more characters. For example, to search for the version number 102.0.5005.20, enter 5005.
Use the following guidelines for each field.
Serial Number
Enter the serial number of the device that you’re searching for and click Apply. For example, to search for the 12345abcdefg serial number, enter 12345abcdefg.
Partial serial number searches are supported, as long as you enter at least 3 characters in the serial number.
Asset ID
Enter the asset ID. For example, to match the partial asset ID 1234, enter 1234.
Enrollment time
To view devices that were enrolled with the management server between a specified range of days, enter a start and end date and click Apply.
Last policy sync
View devices by when they last synced with Google's device management server. To search a specified date range, enter a start and end date and click Apply. To see the devices that synced on a specific day, enter the same day in both fields.
User
Enter a username and click Apply. For example, if you enter Tom Sawyer, the search returns all devices where the username includes Tom or Sawyer.
Location
To view all devices at a single location, enter the location and click Apply. For example, to match Seattle, enter seattle.
Notes
To search for devices with a specific note assigned to them, enter text that you expect to find in the note. For example, to match loaned from John, enter loaned from john.
Model
Enter the model name. For example, to match the partial model name Google Pixelbook Go, enter pixel.
Last user activity
To view devices that were last used within a specific timeframe, enter a start and end date and click Apply.
OS update status
Displays the OS update status of devices. For example, select Download not started to view devices that have not started downloading an update.
OS version compliance
Displays the OS version compliance of devices. For example, select Not compliant to view devices that have not downloaded the latest OS version.
OS policy support status
Displays the OS policy support status of devices. For example, select All policies supported to view devices that support all of your organization's applied policies.
Upgrade type
Displays the devices that are bundled with either Chrome Enterprise Upgrade, Chrome Education Upgrade, or Kiosk & Signage Upgrade. You can choose to view all devices, Enterprise upgrade devices, Education upgrade devices, or Kiosk & Signage upgrade devices.
Chrome version
Enter the version number of the device that you’re searching for and click Apply. For example, to search for the version number 102.0.5005.20, enter 5005.
Partial version number searches are supported, as long as you enter at least 2 characters in the version number.
Auto-update until
Displays devices based on their auto-update until date, as determined by the Auto Update policy. For example, you can search for devices whose automatic updates will stop within the next 3 months by selecting In the next 3 months and clicking Apply.
Recent user
Enter a user’s email address as the argument. For example, to search for all devices that admin@solarmora.com recently signed in to, enter admin@solarmora.com or admin.
WiFi MAC Address
Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for devices with WiFi MAC 6C:29:95:72:4C:50, enter 6c2995724c50.
Ethernet MAC Address
Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for the device(s) with Ethernet MAC E8:EA:6A:15:79:81, enter e8ea6a157981.