Use Chromebooks for student assessments

When set up properly, Chromebooks meet K–12 education testing standards and are a secure platform for student assessments. You can disable students’ access to browse the web during an exam, external storage, screenshots, and the ability to print.

Both the Partnership for Assessment of Readiness for College and Careers (PARCC) and the Smarter Balanced Assessment Consortium have verified that Chromebooks meet hardware and operating system requirements for online student assessments.

Before you begin

Set up Chromebooks for assessments

Option 1: School sets up Chromebook as a single-app kiosk running the exam app

Requirement: You need to have the exam available as a Chrome kiosk app. For more information, see Create and deploy Chrome kiosk apps.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome management.
  3. Click Apps & extensions.
  4. Select Kiosks
  5. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  6. Find and click the app you want to use and configure the settings. For details, see View and configure apps and extensions.

  7. Next to Auto-launch app, choose the app that you want to automatically launch on Chrome devices.

  8. Click Save.

Auto-launch setting for a kiosk app

  • If Auto-launch kiosk app is not configured, then the student sees a menu of kiosk apps in the system tray on the sign-in screen. The student must select the appropriate kiosk app to launch it and take the test. After the test is complete, the student can exit the kiosk app and sign back into a user session.
  • If Auto-launch kiosk app is configured, when the device next starts, it immediately loads the kiosk app.

For help setting up kiosks, see Managed guest settings.

Option 2: Testing provider sets up domain and student accounts for assessment

Steps for the provider:

  1. The testing provider creates a separate domain, owned by the provider.
  2. The provider creates student accounts.

Steps for the school’s IT administrator:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome management.
  3. Click Device settings and select the organizational unit your students' devices are in.
  4. Under User data, select Erase all local user data to erase the student's data from the device when they sign out. This is recommended for accounts specifically made for assessments.
  5. (Optional) To restrict who can sign in to the device as only those belonging to the assessment domain, under Sign-in restriction, select Restrict sign-in to a list of users and enter *@assessmentdomain.com.
  6. Block all apps but those you want to allow.​​

    1. From the Admin console Home page, go to Devicesand thenChrome management.
    2. Click Apps & extensions.
    3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
    4. At the top, click Users & Browsers.
    5. From the Allow users to install other apps & extensions menu, choose Block all other apps & extensions.
    6. Click Save.
  7. Apply security measures for users and browsers.
    1. From the Admin console Home page, go to Devicesand thenChrome management.
    2. Click User & browser settings.
    3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
    4. For Incognito mode, select Disallow incognito mode.
    5. For Screenshot, select Disallow users from taking screenshots.
    6. For URL blocking, set up a URL blacklist to block all URLs with a wildcard (*). And set URL blacklist exceptions for the assessment URL and any other tools the student is allowed access. Learn more.
    7. For Printing, select Disable printing.
    8. For External storage devices, select Disallow external storage devices.
      For details on each setting, see Set Chrome policies for users or browsers.

Steps for the student:

  1. Using the username and password from the provider, sign in to the Chromebook.
  2. Take the test.
  3. When the test is complete, sign out of the Chromebook.

When a student signs out, the device is wiped.

More security information:

In addition to Chrome’s native management capabilities listed above, some assessment providers may also choose to deploy their own Chrome extensions to add additional controls, such as tools to verify who’s signed in to the device and additional reporting. For more information, see Add apps and extensions.

Option 3: School sets up the assessment with managed guest sessions on devices

Chrome version 73 and later.

Before you begin

For managed Chromebooks and other devices running Chrome OS.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome management.
  3. Click Managed guest session settings.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Next to Managed guest session, select Allow managed guest sessions.
  6. Enter the name that you want your users to see for the session. 
  7. Configure managed guest session settings:
    1. (Optional) To set a specific amount of time for the exam, select Maximum user session length and enter a time.
    2. For Idle settings—Set the idle time in minutes to at least 15 minutes.
    3. For Incognito mode—Select Disallow incognito mode.
    4. For Screenshot—Select Disable screenshot.
    5. URL blocking—For URL blacklist, enter https://* to block all URLs. For URL blacklist exceptions, enter the assessment URL and any other URLs that the student can access during the assessment.
    6. For Printing—Select Disable printing.
    7. For External storage devices—Select Disallow external storage devices.
  8. Click Save.
  9. Choose the apps and extensions that you want to install. For details, see Automatically install apps and extensions.
  10. Prevent students from accessing the test URL outside of the managed guest session:
    1. From the Admin console Home page, go to Devicesand thenChrome management.
    2. Click User & browser settings.
    3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
    4. Scroll to URL blocking.
    5. For URL blacklist, enter the assessment URL.
    6. Click Save.

Make sure that students use the managed guest session to take the test and don't sign in to their Google Account. When students finish the exam and exit the managed guest session, the session is wiped from the device.

Related topics

Was this helpful?
How can we improve it?