Deprovision and disable Chrome devices


To manage Chrome devices, you need to first enroll the devices in your domain. Once enrolled, you can view your devices in the Google Admin console. They will be listed as Provisioned in the device list. This article describes what to do if you lose or need to return devices.

  • If you no longer need a device or are returning it, you must first deprovision it.
  • If you lose a device or if it’s stolen, you should disable the device.
  • If you have Forced re-enrollment enabled, you need to deprovision the device when you no longer want to manage it in your domain.

Deprovision Chrome devices

Chrome device deprovisioning

To remove devices that are no longer active, being resold, or are being submitted for return / repair, you must deprovision the device. This does the following for selected devices:

  • Removes device policies, device-level printers, and access to Kiosk Mode (including Public Sessions)
  • For same-model replacements, licenses associated with a deprovisioned device can be used to enroll other devices that comply with Chrome device license policies.
  • Removes the serial number from the default (“Provisioned”) view. Select “Deprovisioned” from the filter in order to view a list of deprovisioned devices.

To deprovision devices:

  1. Sign in to the Admin console at
  2. Go to Device Management > Chrome devices.
  3. In the device list, select the provisioned device(s).
  4. Click More Actions and choose Deprovision.
  5. In the warning message that appears, choose your reason for deprovisioning the device, and click Deprovision to complete the process. The table below contains guidelines on which option to select.

Noting your deprovisioning reason

Scenario Deprovision reason to select
You have a return materials authorization (RMA), and the replacement device is the same model as your original (defective) device. Same Model Replacement
You're replacing a malfunctioning device, that's under warranty with a new device from the same manufacturer (for example, special case RMA). Same Model Replacement
You're upgrading or replacing your device with a newer model of the same device. Different Model Replacement
You're reselling, donating, or permanently removing the device from use. Retiring from fleet

Note: If your device has been stolen or lost, don’t deprovision it. Instead you need to disable the device.

Re-Enroll a Deprovisioned Device

Common reasons for re-enrolling a deprovisioned device:

  • Repaired device is returned
  • Misplaced device is found
  • Accidentally marked as deprovisioned

To re-enroll the device, follow the manual enrollment process with a user that is eligible to enroll. Learn more about enrollment.

Disable Chrome devices

Disable Chrome device setting

If you believe a device in your organization has been lost or stolen, you can disable the device so that no one else can use it. When a device is disabled, all the user can see when turning on the Chrome device is a screen telling them that it’s been disabled, and your desired contact information of where to return the device.

Important: Your devices may not be properly disabled unless your organization has Forced re-enrollment enabled.

Device disable message screen

Device disable screen as seen on a user's Chromebook.

This feature requires that the device is running Chrome version 40+. Device disabling does the following:

  • Signs out any user on the device and takes them to the device disabled page. This page (above) informs anyone using the device that it’s disabled and has return instructions that you can customize for your domain.
  • Once the disabled page is displayed, a user cannot sign in to the device, and it will stay in a disabled state until an admin re-enables or deprovisions the device.
  • Returns licenses associated with the device(s) to the license pool while it remains in a disabled state.
  • Removes the serial number from the default (“Provisioned”) view. To see the device in your Admin console, select “Disabled” from the filter.

To disable a Chrome device:

  1. Sign in to the Admin console at
  2. Go to Device Management > Chrome devices.
  3. In the device list, select the provisioned device(s).
  4. Click More Actions and choose Disable.
  5. In the warning message that appears, click Disable to complete the process.
    Note: Be sure to put your organization's contact information in the Admin console so that it shows up on the disable page.

Re-Enable a Disabled Device

Re-enable Chrome device setting

You will want to re-enable a disabled device when a misplaced device is found or a lost device is returned. You can also use this feature if you accidentally mark a Chrome device as disabled.

To re-enable a disabled device:

  1. Sign in to the Admin console at
  2. Go to Device Management > Chrome devices, access devices under the “Disabled” filter.
  3. In the device list, select the disabled device(s).
  4. Click More Actions and choose Re-enable.
  5. In the warning message that appears, click Re-enable to complete the process.

Chrome license are returned to your organization's license pool when devices are disabled or unenrolled due to a same-model replacement. You must have available licenses to re-enroll a device or re-enable a disabled device.

Your devices will not be properly disabled unless you ensure that Forced Re-Enrollment is turned on.
View All Devices

Every device status is listed in this view. However, to deprovision, disable, or re-enable a device, you need to switch to a different status view.

Chrome Device Statuses

Status View What devices are in this view Actions admin can take from this view
Provisioned Devices that have successfully been enrolled. Deprovision or Disable
Deprovisioned Devices that have been deprovisioned by an admin. No action
Disabled Devices that have been disabled by an admin. Re-enable or Deprovision
All All the above device statuses in one view. No action

Error Messages

“This device has been placed into a deprovisioned state by the administrator. To enable it for enrollment, please have your administrator place the device into a pending state."

If you see this error message on a user’s Chrome device, you must place the device into a pending state.

Was this article helpful?
How can we improve it?