Use Chromebooks for student assessments
Chromebooks are a secure platform for administering student assessments, and when setup properly, these devices meet K-12 education testing standards. With Chromebooks, you can disable students’ access to browse the web during an exam in addition to disabling external storage, screenshots, and the ability to print.
Assessments can be delivered on Chromebooks in any of these three ways:
- Scenario 1: The exam is delivered on Chromebooks set up as a "Single App Kiosk". In this method, the testing provider creates the exam as a Chrome kiosk app, and this exam app runs in a full screen mode.
- Scenario 2: A testing provider sets up a new domain specifically for taking the test, and the student takes the assessment on the provider-issued account.
- Scenario 3: A school delivers the test through managed guest sessions.
With each method, the administrator can configure the device for secure student testing.
- Sign in to the Admin console.
- Go to Device management > Chrome management > Device settings > Kiosk Apps. Click on Manage Kiosk Applications.
- In the dialog that appears select the exam kiosk app you want to use. You can search for it on the Chrome Web Store, or manually install it if you have the app ID and URL by selecting Specify a Custom App.
- On the same Device settings page, under Kiosk Settings > Auto-Launch Kiosk App, select the app.
- Make sure the devices you want to administer the exam with are under the organizational unit you select for the kiosk app.
Auto-Launch Setting for a Kiosk App
- If Auto-Launch Kiosk App is not configured, then the student will see a menu of kiosk apps in the system tray on the login screen. The student needs to select the appropriate kiosk app to launch it in order to take the test. After the test is complete, the student can exit the kiosk app and log back into a user session.
- If Auto-Launch Kiosk App is configured, when the device next boots, it will immediately load the kiosk app.
For help setting up Kiosk Settings, see Manage device settings.
Steps for the provider:
- The testing provider creates a separate domain, owned by the provider.
- The provider creates student accounts.
- In the Admin console, under Device management > Chrome management > User settings, set the following:
Setting How to configure Allowed Apps and Extensions Under Allowed Apps and Extensions, select Block all apps and extensions except the ones I allow. Incognito Mode Select Disallow Incognito Mode. Screenshot Select Disable Screenshot. URL Blocking Set up a URL Blacklist to block all URLs with a wildcard (*). And set a URL Blacklist Exception for the assessment URL and any other tools the student is allowed access. Learn more. Printing Select Disable printing. External Storage Devices Select Disallow external storage devices.
See Chrome policies for users for more details on each setting.
Steps for the school’s IT administrator:
- Sign in to the school’s Admin console used to manage the students’ Chromebooks.
- Go to Device management > Chrome management > Device settings and select the organizational unit your students' devices are in.
- Under User Data select Erase all local user data to erase the student's data from the device when they sign out. This is recommended for accounts specifically made for testing.
- (Optional step) Under Sign-in Restriction, enter “*@assessmentdomain.com” to Restrict sign-in to list of users. This will restrict those who can sign in to the device as only belonging to the assessment domain. Learn more.
Steps for the student:
- Sign in to the Chromebook using the credentials given by the provider.
- Take the test.
- Sign out once the test is complete. On signing out, the device is wiped.
More security information:
In addition to Chrome’s native management capabilities listed above, some assessment providers may also choose to deploy their own Chrome Extensions to add additional controls, such as tools to verify who’s logged into the device and additional reporting.
This requires the school to have Chrome devices enrolled in their domain.
- In the Admin console, put the students taking the assessment into their own organizational unit (OU).
- Configure a student’s device for managed guest sessions by placing it into the OU for managed guest sessions (see step 1 in Managed guest session devices help article).
- Under Device management > Chrome management > Managed guest session settings, set the following:
Setting How to configure Maximum User Session Length Set the Maximum User Session Length for the amount of time you’re allowing for the exam. This setting is optional, as many assessments or exam proctors will monitor the length of time a student has to take the exam. Logout on Idle after Change the Logout on Idle after time to at least 15 minutes, as the default is set to 5 minutes. Allowed Apps and Extensions Under Allowed Apps and Extensions, select Block all apps and extensions except the ones I allow. Incognito Mode Select Disallow Incognito Mode. Screenshot Select Disable Screenshot. URL Blocking Set up a URL Blacklist to block all URLs with a wildcard (*). And set a URL Blacklist Exception for the assessment URL and any other tools the student is allowed access. Learn more. Printing Select Disable printing. External Storage Devices Select Disallow external storage devices.
- Under Chrome management > User settings, for the organizational unit for the student’s regular account, put the assessment URL in the URL Blacklist.
- Have students sign in under the managed guest session to take the test.
- When the student is finished with the exam and exits the managed guest session, the session is wiped from the device.