For administrators who manage ChromeOS devices for a business or school.
By default, wiped devices automatically re-enroll into your account without users having to enter their username and password. Re-enrollment ensures that the devices remain managed and policies you set are enforced on the device. Otherwise, users can't sign in, browse in guest mode, or see the consumer sign-in screen.
- Don’t force devices that are used in developer mode to re-enroll. Instead, put them in a different organizational unit and turn off forced re-enrollment for that organization.
- If a device is no longer going to be managed by your account, you should deprovision the device.
Turn forced re-enrollment on or off
From the Admin console Home page, go to DevicesChrome.
- Click SettingsDevice.
- To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Go to Enrollment and access.
- Configure the Forced re-enrollment setting:
- Force device to automatically re-enroll after wiping—Wiped devices automatically re-enroll into your account without users having to enter their username and password.
- Force device to re-enroll with user credentials after wiping—Users must manually re-enroll devices into your account.
- Device is not forced to re-enroll after wiping—Users can use the device without re-enrolling it into your account.
- Click Save.
Settings typically take effect within minutes, but it might take up to an hour to propagate through your organization.
Sometimes, devices might not be able to automatically re-enroll themselves. If an error occurs during automatic re-enrollment, users are notified. They can click Enroll manually to proceed with manual re-enrollment. Devices that don’t support automatic re-enrollment show a screen that prompts users to manually re-enroll them.
Configure security settings to manage theft
For more information, watch this how to demo video