Manage Chromebooks

For approved users, the KM console can now manage and enroll Chromebooks and Chrome OS apps. Like with Android devices, the KM agent for Chromebooks is available on Google Play.

Chrome OS management overview

Chrome OS and Chromebook management on KM relies on a link between the managed services on the Google Admin console and the KM console. Due to this fact, there are some important differences you should keep in mind when managing Chrome OS and Chromebooks compared to the other supported OSs on KM:

  • Automatic syncing — Organizations, users, and devices are synced from the Google Admin console. You cannot create new organizations or users from the KM console.
  • Organization-based deployment — Devices can only be assigned to organizations. Groups are not supported.
  • Organization-based profiles — Each organization has an automatically-generated profile associated with it. To set policies for deployments, you must edit the associated profile. You cannot create additional profiles.
  • User-based enrollment — Each user account is associated with a Chromebook.
IMPORTANT — Currently, the User & Browser and App & Extension policies are available. Support for Device policies is planned for a future release.

Set up Chromebook management

Before you can begin managing Chromebooks, you must set up your Google Admin Console and KM:

  1. First, you need to upgrade your Chrome license:
    1. Depending on which license you have, purchase the Chrome Enterprise Upgrade or Chrome Education Upgrade from your Knox reseller or the Google Admin Console.
  2. Next, you need to set up an organization and users:
    1. On the Google Admin console, create an organization and users.
    2. Register at least one Chromebook with the organization.
  3. Lastly, register the Google admin account with KM:
    1. On the KM console, go to Setting > Chrome OS > Sign in with Google. The Google accounts page opens.
    2. Log in to the Google account.
    3. Select all permissions, then click Continue. The browser returns you to the KM console. The Google Authorization Code field is now filled in.

      Granting Google account permissions on GSuite.

    4. Enter the same account for the Google Admin Email Address, then click Authorize.

      Registering the Google account on the KM console.

See also

Once your tenant is set up to manage Chromebooks, you can configure Chrome OS profiles, add apps, and then assign apps.

Share it: