How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@coliver I use a ton of settings to lock down Chrome and they have been working great until this school year started. Evidently several of the local school districts are using some sort of Chrome administration and assigning students gmail accounts associated with the school.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver yes but this is a public library system. We have to assume that they are logging in to do school work or view assignments etc.
They can still do that. But this will prevent them from logging into the "Google Account" feature that Chrome has, not the G Suite websites themselves. You can also set it to remove browsing history when they close the window which will remove the tokens that hold the login.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver I use a ton of settings to lock down Chrome and they have been working great until this school year started. Evidently several of the local school districts are using some sort of Chrome administration and assigning students gmail accounts associated with the school.
G Suite for Education. It's really common.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
When students login to school accounts their enterprise policies apparently override our local policies and allow apps we don't want.
Apps inside of Chrome?
-
@coliver That sounds like what I need to do. What version of the template are you using? I have tried the one from chromium project and the one from Google enterprise. Please explain exactly how to do this. I must have missed it. To restate you can prevent logging into chrome but allow gmail and Gsuite? That would be perfect.
-
@scottalanmiller Yes apparently. This was just brought to my attention yesterday but the PC I brought to the back had a search bar across the top of the desktop even with Chrome browser closed. I can't remember the name of the search bar now.
-
-
@LJ I was able to get the user signed out and get everything straight after a few minutes but I am not always at this branch. It has very limited staff and is literally a hundred feet away from a high school campus.
-
@DustinB3403 thanks. Those solutions all start with "sign in to your Google admin console". I don't have a Google admin console but there are several school districts and community colleges around here that must. In the past I don't always get a lot of co-operation.
-
Since the accounts are for the school, you'd be better off working with the school to set these things. Otherwise you'll not going to get to far before you hit some sort of roadblock.
-
I can see where having policies for google accounts is useful such as separate rights for teachers and students but it is causing us problems. Does anyone think I could use a login script that would log off, clear history and restore my policy restrictions? I could instruct the staff to log on and off if I could come up with something like that.
-
@DustinB3403 I think you may be right but as I stated we don't always get a lot of co-operation and there are several distinct entities but I am readying an email to several of them.
-
If you wanted to go down the route of installing a system management software that a reboot restores everything that would work.
I can't recall the name of one that is FOSS, but I've used it and it works.
-
@scottalanmiller I should have said extensions not apps.
-
@DustinB3403 Yes I used something like reboot/restore Rx or drive Vaccine in the past. I had to quit that because about half of our public computers are older with 80 GB hard drives. When you make changes and save that as the new default it keeps adding to a hidden file until the computer slows to a crawl.
I am gradually getting rid of those machines but still have about 30 or so to go. Perhaps after that I can try that. I keep all my images the same for now but I could change that. -
Thanks for all the activity. I posted to Google chrome enterprise help this morning and haven't had a single reply.
-
How about something like UrBackup, where you / an trusted on-site employee can have the system be restored automatically?
Are there any resources to run a small server for UrBackup and to take images of the workstations?
-
@coliver I have the setting to remove browsing history but apparently that setting is overridden also.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver I have the setting to remove browsing history but apparently that setting is overridden also.
https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowserSignin
You'll want to disable that via the Google Chrome group policies. Make sure you're pushing these policies from the Computer settings piece.
-
@coliver he would love to set this up via the google admin console, but he's not the administrator. The schools are. So he needs an alternative that is either local to every workstation or some restoration process.
