Manage Public Session Kiosk

This article has general information on how to set up Public Sessions on Chrome devices. For specific instructions on how to use a Chromebook for student assessments, see Using Chromebooks for Student Assessments.

Chromebook icon updated Dec 2013

With Public Session Kiosks (also called Public Sessions), multiple users can share the same Chrome device without the need to sign in. For example, use Public Sessions to configure Chrome devices for use as kiosks, loaner devices, shared computers, or for any other work or school-related purpose for which users don't need to sign in with their credentials.

With Public Sessions, your users can have a full browsing experience and access multiple websites in a windowed mode (not fullscreen). Single App Kiosk mode is focused around a single application and offers the option for a fullscreen experience.

Prerequisites:

  • You need to first enroll the device you want to use as a Public Session kiosk in your domain. Once successfully enrolled, the device will show up in the Admin console under Chrome devices.
  • To enable Public Sessions, make sure that "Always show user names and photos" is enabled in the Admin console under Device management > Chrome > Device settings > Sign-in Screen.

Set up Public Sessions for your Chrome devices:

  1. Sign in to your Admin console.
  2. Go to Device management > Chrome management > Public session settings.
  3. Select the organizational unit (OU) for which you want the settings to apply.
  4. Configure the settings on the page and include a Session Display Name (that you would like to appear on the device’s home screen, such as the name of your organization). Click Save changes.
  5. Go to Device management > Chrome management > Device settings.
  6. Select the OU you want to configure and under Kiosk Settings > Public Session Kiosk, select Allow Public Session Kiosk. This attaches the Public Session settings to the devices in the OU you select.
  7. Click Save changes at the bottom of the screen. Settings typically take effect within minutes, but they might take up to an hour to propagate to the devices.
  8. Move the desired Chrome devices into the OU that has the Public Session settings applied. Note that the Chrome devices must be enrolled in the domain for management before they appear under Chrome devices in the Admin console.

If you set Auto-Login to Public Session to Yes and enter “0” into the field Number of seconds before delaying auto-login, the device will be a Public Session Kiosk after you logout and go to the sign-in screen. If you want to launch a Chrome device with a single Chrome app full-screen, see how to set up a Single App Kiosk.

Notes:
  • The displayed Public Session pods are prioritized over user pods on the login screen.
  • You can only associate settings from one organizational unit per device for setting up Public Session Kiosks.
  • Public Session settings only apply to the Chrome devices you specify.

Public Session user experience

On the login screen, the user sees the Session Display Name that you can set in the Admin console.

  1. When the user clicks a Public Session pod, it expands to show the domain name of the organization that manages the session.
  2. When the user clicks Enter, their session begins and they can start browsing the web. Note: If you uploaded a Terms of Service agreement in the Admin console, it will appear after the user clicks Enter, and they will need to click Accept to start the session.

The session is valid until a user signs out, or is idle for a period of time you specify and is automatically signed out. When the user ends the Public Session, all local user data is wiped from the device.

Public Session settings

Setting Description
Session Display Name Enter the name you want your users to see for the session. For example, "Fremont High School Library" or "Solarmora shared computer".
Maximum User Session Length You can specify the device to sign the user out of his session after 1 to 1440 minutes. Leave empty for unlimited sessions.
Logout on Idle after You can specify the device to sign the user out of his session if the device is idle for 1 to 1440 minutes. Leave empty to never logout.
Terms of Service agreement You can upload a custom Terms of Service agreement that you would like users of your device to accept. This file needs to be a .txt or .text file.
Policy Refresh Rate You can specify between 30 to 1440 minutes as the interval for the Chrome device(s) to sync new policies from the Admin console.

Common Public Session configurations

Assessments

You can set the length of time for the exam for one hour, two hours, or however long you want to give students to take the test. You can lock down Internet access to prevent students from looking up answers online, and prevent them from taking screenshots. Learn more about Using Chromebooks for Student Assessments.

Library use

You can specify the period of use for the device from 30 minutes or 3 hours, or whatever length of time you want to specify. You can also configure the device to print with Cloud Print.

Business center/cyber cafe

Similar to library mode, you can set up the length of time for the user session, and you can also set up device-based policies on the device.

Retail store

Unlike for library use, you can configure the device so that it doesn’t have a session timer. People can browse on the device at a kiosk or sales floor for an unlimited amount of time. For more on setting up the devices as a kiosk, see Single App Kiosk.

Common settings to configure with Public Sessions

In addition to the Public Session settings above, you can also configure any of the user and device settings offered by Chrome management with Public Sessions. Learn more about managing user settings and managing device settings. Popular settings include the following:

  • Set up a home page
  • Define a proxy
  • Cloud Print
  • Configure SafeSearch to filter objectionable content
  • Blacklist or whitelist access to different sites
  • Pre-install specific apps to the device
  • Configure a user’s length of session
  • Allow Incognito Mode, Screenshots, Access to External storage, Allow Audio I/O and Video Input, among others.

FAQs


How do I print from a Chrome device with Public Sessions?

You can set up printing with Public Sessions via the Cloud Print setting in the Admin console under Chrome Management > Device Settings.

How are Public Sessions different from guest mode?

Guest browsing is useful for quickly browsing the web. However, with guest browsing, you can’t preconfigure apps, limit the session length, enforce a variety of security policies, or manage sessions in a way most businesses and schools require. Public Session browsing allows you to enforce many user policies without requiring each user to sign in.

On what Chrome devices can I run Public Sessions?

Public Sessions can be set up on any Chrome device that has the management console. If you’re having difficulties, please update the device to the latest version of Chrome OS. Learn more about managed Chrome devices, and contact our sales team if you’re interested in purchasing devices or management licenses.

What security features are built into Public Sessions?

Public Sessions are built with all of the security settings that you get with Chrome, including sandboxing, privacy settings, and the ability for an admin to customize the security policies. What’s unique about using Public Sessions on Chrome devices is that all local user data is removed from the device when the user signs out.

How do I create a Chrome kiosk app that runs full-screen on the Chrome device?

See Tutorial: Create a Chrome kiosk app.