Force wiped Chrome devices to re-enroll

For administrators who manage Chrome OS devices for a business or school.

By default, wiped devices automatically re-enroll into your account without users having to enter their username and password. Re-enrollment ensures that the devices remain managed and policies you set are enforced on the device. Otherwise, users can't sign in, browse in guest mode, or see the consumer sign-in screen.

Considerations

  • Don’t force devices that are used in developer mode to re-enroll. Instead, put them in a different organizational unit and turn off forced re-enrollment for that organization.
  • If a device is no longer going to be managed by your account, you should deprovision the device.

Turn forced re-enrollment on or off

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Settingsand thenDevice.
  4. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Go to Enrollment and access.
  6. Configure the Forced re-enrollment setting:
    • Force device to automatically re-enroll after wiping—Wiped devices automatically re-enroll into your account without users having to enter their username and password. 
    • Force device to re-enroll with user credentials after wiping—Users must manually re-enroll devices into your account.
    • Device is not forced to re-enroll after wiping—Users can use the device without re-enrolling it into your account.
  7. Click Save.

Settings typically take effect within minutes, but it might take up to an hour to propagate through your organization.

Sometimes, devices might not be able to automatically re-enroll themselves. If an error occurs during automatic re-enrollment, users are notified. They can click Enroll manually to proceed with manual re-enrollment. Devices that don’t support automatic re-enrollment show a screen that prompts users to manually re-enroll them.

Configure security settings to manage theft

For more information, watch this how to demo video

Configuring security settings to manage theft

Was this helpful?
How can we improve it?