How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@Dashrender Do you think this prevents them from signing into Chrome while still allowing them to sign in to the Gsuite and email?
I do believe that - one has nothing to do with the other.. otherwise you likely wouldn't be able to use Google services from another browser.
-
Now, because of the nature that everything involved is Google based ( Google's g-suite, and Google's Chrome) - of course they could do whatever they want, and the enterprise stuff could still over ride this setting, but here's hoping.
You would think Google would have a way to not apply all that enterprise shit to just any ol' computer a g-suite user signs into.
-
@Dashrender I just booted up another public computer and found that setting. I will try to get to a public PC and set that and see find a student to try it.
-
@LJ That setting was in place already. I had a student who was using Google classroom on IE open Chrome, and login to his school email and Google Classroom. Then I had him close the browser without logging out. When he re-opened Chrome he was not logged in on either.
I either have a couple of computers not configured correctly or it may be that once logged in he could have had it remember his account and password and install extensions etc. He was heavily involved in school work but I told him to find me when he was though if his ride wasn't here. More info later. -
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ That setting was in place already. I had a student who was using Google classroom on IE open Chrome, and login to his school email and Google Classroom. Then I had him close the browser without logging out. When he re-opened Chrome he was not logged in on either.
I either have a couple of computers not configured correctly or it may be that once logged in he could have had it remember his account and password and install extensions etc. He was heavily involved in school work but I told him to find me when he was though if his ride wasn't here. More info later.OK, so you had him log into the webpage... what happens if he logs into Chrome itself?
-
@Dashrender I don't know darn it. I went back out there and he was getting in a car. Maybe some more students will come in. I wish I had had him try to install extensions while he was logged in.
I create an MMC for computer policy and non admin users then log in and out to create these folders
After that I paste into the contents of the GP and GP users folders from an already configured computer. I may have just missed a couple when I was updating my policies. I hope that is all it is. -
@Dashrender I am wrong . The setting isn't in place. the setting to clear contents etc on exit is in place and that must be what logged him out when he closed Chrome.
I'll go install that setting on some right now. -
I just tried setting the setting "restrict which users are allow to sign in to Google Chrome" to enabled and used*.@nologin as the allowed user.
I was still able to login from the restricted user. For this setting should you leave it blank for users or what? thanks. -
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
I just tried setting the setting "restrict which users are allow to sign in to Google Chrome" to enabled and used*.@nologin as the allowed user.
I was still able to login from the restricted user. For this setting should you leave it blank for users or what? thanks.I would expect you would leave it blank.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Had no idea that that was an option. Good idea.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
I don't understand the difference.
-
I found this thread about the GPO setting.
https://bugs.chromium.org/p/chromium/issues/detail?id=471268basically it says you need to put ^$ into the field to block all logins to Chrome itself.
Sadly - the user has to go through the whole logon process before Chrome reports they are not allowed to to log into Chrome - which will lead to your staff being told Chrome is broken, because it's likely some people think signing into Chrome is the same as signing into Google's webpages.If you do get this to work, you'll need to train the staff at those sites to point visitors to log in on the websites themselves, not the browser(Chrome).
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Aww, now I see
Incognito mode availability = 2 (Incognito mode forced)
The '>' threw me off.
-
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
What happens when you open multiple tabs in different Google services after logging into the first tab? If the creds don't flow tab to tab, this could become frustrating to users.
-
This post is deleted! -
Is Chrome a requirement on these PCs? What about getting rid of it entirely and using another browser? Firefox, vivaldi, opera etc?
-
@Dashrender said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
Aww, now I see
Incognito mode availability = 2 (Incognito mode forced)
The '>' threw me off.
My bad.
-
@Dashrender said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@black3dynamite said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
What happens when you open multiple tabs in different Google services after logging into the first tab? If the creds don't flow tab to tab, this could become frustrating to users.
They still flow from tab to tab.
-
Thanks to everyone who helped me. I believe my problem is solved now. Here is a little re-cap and some random ideas.
I jumped to conclusions late in the day when confronted with a problem. I now believe that the problem with the two PCs was that the Chrome.adm template was not applied or misconfigured or something. Since I copied the contents of Windows/System32/grouppolicy and Windows/System32/grouppolicyusers from another machine I will never know for sure. The other 18 public computers have no Chrome browser problems that I can find.
I still think its possible that enterprise policies might override local group policy or registry settings but I don’t think that is what happened here. Probably like active directory in the sense that unless it is configured at the higher level it probably doesn’t affect the local level.
The contributors here have given me several new ideas to try. I am continuously trying to improve my public computer configuration.
I learned a lot from this thread and am truly thankful for all the help. This is an awesome forum!
