How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
I am assuming that just as Domain policies override local policies in Windows that Google Suite?, enterprise? or what ever it is overrides our local chrome polices that are added to our local group policy with the chrome.adm template.
-
@DustinB3403 Yes. Thanks.
-
I dont know if there is anything that can be set in google to disable the sync, as it's per account as far as I know.
-
You can use Group Policies to disable users from logging into Chrome. I've pushed it out in the past and it works very well. There are a ton of settings you can use to lock down Chrome as well.
-
@coliver yes but this is a public library system. We have to assume that they are logging in to do school work or view assignments etc.
-
@coliver I use a ton of settings to lock down Chrome and they have been working great until this school year started. Evidently several of the local school districts are using some sort of Chrome administration and assigning students gmail accounts associated with the school.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver yes but this is a public library system. We have to assume that they are logging in to do school work or view assignments etc.
They can still do that. But this will prevent them from logging into the "Google Account" feature that Chrome has, not the G Suite websites themselves. You can also set it to remove browsing history when they close the window which will remove the tokens that hold the login.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver I use a ton of settings to lock down Chrome and they have been working great until this school year started. Evidently several of the local school districts are using some sort of Chrome administration and assigning students gmail accounts associated with the school.
G Suite for Education. It's really common.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
When students login to school accounts their enterprise policies apparently override our local policies and allow apps we don't want.
Apps inside of Chrome?
-
@coliver That sounds like what I need to do. What version of the template are you using? I have tried the one from chromium project and the one from Google enterprise. Please explain exactly how to do this. I must have missed it. To restate you can prevent logging into chrome but allow gmail and Gsuite? That would be perfect.
-
@scottalanmiller Yes apparently. This was just brought to my attention yesterday but the PC I brought to the back had a search bar across the top of the desktop even with Chrome browser closed. I can't remember the name of the search bar now.
-
-
@LJ I was able to get the user signed out and get everything straight after a few minutes but I am not always at this branch. It has very limited staff and is literally a hundred feet away from a high school campus.
-
@DustinB3403 thanks. Those solutions all start with "sign in to your Google admin console". I don't have a Google admin console but there are several school districts and community colleges around here that must. In the past I don't always get a lot of co-operation.
-
Since the accounts are for the school, you'd be better off working with the school to set these things. Otherwise you'll not going to get to far before you hit some sort of roadblock.
-
I can see where having policies for google accounts is useful such as separate rights for teachers and students but it is causing us problems. Does anyone think I could use a login script that would log off, clear history and restore my policy restrictions? I could instruct the staff to log on and off if I could come up with something like that.
-
@DustinB3403 I think you may be right but as I stated we don't always get a lot of co-operation and there are several distinct entities but I am readying an email to several of them.
-
If you wanted to go down the route of installing a system management software that a reboot restores everything that would work.
I can't recall the name of one that is FOSS, but I've used it and it works.
-
@scottalanmiller I should have said extensions not apps.
-
@DustinB3403 Yes I used something like reboot/restore Rx or drive Vaccine in the past. I had to quit that because about half of our public computers are older with 80 GB hard drives. When you make changes and save that as the new default it keeps adding to a hidden file until the computer slows to a crawl.
I am gradually getting rid of those machines but still have about 30 or so to go. Perhaps after that I can try that. I keep all my images the same for now but I could change that.
