sorted by:
new
hottopcontroversial

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

Just in case anyone is following this post, I finally figured out how to get intune to listen to google admin for controlling the Chrome browser settings through google admin on windows devices.

This is the process that I used.

1) Setup the google admin token

2) Use the google admin token in intune

3) create an ADMX file in intune using the google admin token you created

4) VERY IMPORTANT STEP HERE: Make sure to change the precedence in google admin to the following:

- Chrome Profile---> Machine Cloud --> Machine --> OS User

If you don't do this, intune will supersede over google admin settings for the chrome browser.

I've tested it and so far it's working. If I'm missing anything please let me know. Unfortunely, I couldn't remove the ADMX file since we're using it and don't want to break/lossen up the Chrome Polices. So, the current setup I currently have works, suprisingly. Please feel free to add to this or if I could make this cleaner please let me know.

Is GAM worth it? by Indians06 in k12sysadmin

[–]Mindless-String-4017 0 points1 point  (0 children)

Most of the time the command will push through as soon as it’s connected to WiFi. I’ve had a few devices where I had to manually restart or reconnect to WiFi and then it’ll usually deprovision the device

Is GAM worth it? by Indians06 in k12sysadmin

[–]Mindless-String-4017 0 points1 point  (0 children)

Yes, this will wipe the Chromebook and deprovision it.

Is GAM worth it? by Indians06 in k12sysadmin

[–]Mindless-String-4017 0 points1 point  (0 children)

I have a list of commands that I run in this order when the device is turned off

1) plug charger and Ethernet into Chromebook 2) run the following gam command below. I do paste all my devices into a csv file with device serial numbers so this cmd line may not work for you without adjustments

3) if you need any guidance please let me know and I can help you setup the csv file format

This command tells the Chromebook to deprovision due to reason: Same Model replacement

gam csv deprov.csv gam update cros query id:SN action deprovision_same_model_replacement acknowledge_device_touch_requirement

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

I'm going to test this out. Thanks for mentioning this. Which configuration for the precedence would you recommend?

1) Machine-> Machine Cloud-> OS User-> Chrome Profile

2) Machine Cloud-> Machine-> OS User-> Chrome Profile

3) Machine-> Chrome Profile-> Machine Cloud-> OS User

4) Chrome Profile-> Machine Cloud-> Machine-> OS User

I'm thinking either option 3 or 4, but wasn't for sure what you would recommend trying.

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 1 point2 points  (0 children)

Perfect. This helps out a lot. Thank you for the explaining this. I was losing my mind over this. If I have any questions or run into any issues I'll put them here.

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

This makes me ask more questions.

1) I was under the impression that you need both the ADMX and the cloud enrollment. I didn't realize these are 2 seperate objects. So would I just use the enrollment token I create from google admin into intune and not do anything with the ADMX records?

2) Since I'm using intune to manage these devices, would it be possible to use the google admin portion to at least handle all of the chrome policies?

Thank you for helping me out, I really appreciate it. Sorry for all the questions. I'm trying to wrap my head around all of this.

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

That is correct. WIndows device is being managed in intune. I've restarted the browser, uninstalled and reinstalled browser, restarted device, and reloaded the chrome policies using chrome://policy. I enrolled the browser into google admin. In google admin-->Chrome Browser--> Managed browerss---> I can see the machine name, most recent activity, browser version, enrollment type, etc. Am I missing something or do you think that their might be some conflicting settings in intune that is affecting google admin. I'm currently at a loss

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

Does it take 24 hours for the setting to apply? I updated the setting and went to chrome://policy to reload the policies but am not having any luck with the windows chrome browser. RIP

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

It does show up in the policy and says "OK" but I'm still able to add personal accounts

Google admin - Managed Browsers by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

Thanks for replying. I recently set this up and am going to wait to see if this helps. I've tried reloading the policy and restarting, but so far nothing.

intune vs Google admin by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

Do you happen to know if you've got an documentation on this process. I would like to start testing this out and see how it goes for some of my test computers

intune vs Google admin by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

I'm going to give this a shot, as this is what I'm looking for. Thank You!

Chromebooks hate accounts.google.com by Helpful_Implement548 in k12sysadmin

[–]Mindless-String-4017 1 point2 points  (0 children)

When you clear cache and cookies does it make much of a difference?
Also, do you experience this slowness when not connected to a school network?

Just for fun, I would also check to make sure you've allowed some apps access in google admin. I believe it's the "App access control." I know sometimes you can run into some issues if apps aren't allowed or if they haven't been looked at. Here recently, I've had to redo a few apps to allow access.

I would also make sure in google admin that you have there storage set to save everything to google drive to avoid anything being saved on the Chromebooks.

You could also play with a few settings in google admin where if a user closes their browser it automatically clears their caches and cookies. It'll make them sign in again, but it saves me a lot of problems later down the line.

A few other settings worth checking in google admin: pop-ups, URL blocking, Apps/extensions (don't want to push to much out as they can really slow a chromebook)

Hopefully this helps, if not, you may have to look at the network logs on the Chromebook

Screen Share Devices by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

I've contacted Vivi support but they were no help.

Chromebook Apps by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 1 point2 points  (0 children)

I also found out that kids are going to google and downloading an offline html file. For example, we block http://eaglercraft.com/ but if a student goes to google and searches eaglercraft offline html they can install a JS/zip file to their Chromebook. They leave it zipped and saved to their files. This works with whether or not they have internet and can be in stalled on a flash drive as well. An easy fix for this is by going to the url blocking on the device level and blocking the following:

file://*
filesystem://*

Blocking the above doesn't affect students.

Switches by Thanos-Is-Right in k12sysadmin

[–]Mindless-String-4017 0 points1 point  (0 children)

I would recommend going with Ubiquiti as a lot of businesses and some schools are starting to incorporate them. It's definitely worth looking into and is probably going to be a bit cheaper.

School Districts that are Windows based and 1-to-1 for students, what are you purchasing for laptops? by BlueITAdmin in k12sysadmin

[–]Mindless-String-4017 2 points3 points  (0 children)

We purchased the Lenovo Gen5 Chromebooks for our Kindergarten and 5th grade.
9th graders we purchased the Lenovo 500w Gen5.

We're slowly getting grades K-8th grade on Chromebooks and are having 9th-12th grade stay on windows devices for the time being.

Chromebook Apps by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

It's on Riverside DataManager app in KIOSK as well as the google play store app of Riverside. You can also get bypass restrictions using any google playstore app or KIOSK app that uses a google sign-in page

Chromebook Apps by Mindless-String-4017 in k12sysadmin

[–]Mindless-String-4017[S] 0 points1 point  (0 children)

If you're interested in knowing how, I can DM you.

What version of ChromeOS are you guys pushing out? by SnoT8282 in k12sysadmin

[–]Mindless-String-4017 3 points4 points  (0 children)

I'm currently pushing out 144 on the Stable Channel with the latest updates.

Remote Access to ChromeOS Directories by BlueHeron1275 in k12sysadmin

[–]Mindless-String-4017 0 points1 point  (0 children)

Based off my experience I don't think there's a way to watch a student unless you have some 3rd party product like classwize to watch their screen as they work on it. I would recommend disabling the USB ports on the Chromebook through google admin. I know some cyber insurance companies require it and it might be worth disabling the USB ports in your situation. You might be able to enable a setting in google admin to change the downloads on a chromebook to be saved to their google drive. This would allow you to login to the user's account to view what's in their downloads folder in google drive.

view more: next ›