GAFE and Chromebooks Admin Console Best Practices and Tips


Updated March 2017

Google Apps for Education and Chromebooks are very popular with education for many reasons, one of which is the ease of management and deployment. The Admin Console allows staff to manage apps, user settings, devices settings and much more. Here are some tips and best practices for settings in the Admin Console.

The Admin Console is relatively easy to use, although some settings can be hard to find. Remember to use the help features by clicking on the question marks throughout the console.


The icons on the console can be moved and arranged via drag-and-drop so you can put the ones you use most up front. Typically, Users, Device Management, and Apps are the most used. 

Below are some of the main tips and settings to consider. Most of them are under Device Management. This is not a complete list, but one to help you get started. 

Here is another great article on this from GoGuardian. 

Admin Accounts: ("Admin Roles")
You can designate users at different levels of admin access. There are preset roles and you can create your own. You should have at least two Super-Admins in case one is out. Help Desk admin can only reset passwords for non-administrators and are good to have in each school. 

User Settings:
Organizational Units (set under Users) - you will want to have at least the following OUs setup: Admin, IT, Faculty, K-8 Students, High School students. This allows you to customize the settings for each one. K-8 students cannot use Google+, so you will want Google+ turned off for them. You can also turn off outside email for them. 

Under Apps, Click on Additional Google Services, click on the three vertical dots next to Google+ and click Turn Off or On for some Organizations and make sure it is off for K-8. 

Device Management > Chrome Management > User Settings
These settings apply to the Chrome Browser also (when a user logs into it)

Force-Installed Apps and Extensions: you can push out apps and extensions to all users. There are a few I recommend, including Office Editing. Here is a list. 

Allow or Block All Apps and Extensions: you can either allow users to install any apps except the ones that you block, or block all apps except the ones that you allow. It is a local decision on how to manage this. Blocking all means your IT staff have to handle requests from staff. Allowing all means that some students might find some unsavory apps to install, but you can block them as you find them. 

If you want to allow all except the ones you block, here is a list of some that you should block. 

Allowed Apps and Extensions: create a list here if you are blocking users from installing them. Here are some lists of app recommendations. 

Make sure you are saving Browser History if you want to track what users are doing. 

I recommend turning on Safe Browsing, but that is a local decision.

You can also set up web pages to auto-load when a user logs in. Most schools set it up so that the district or school home page loads. 

Another nice feature is the ability to block websites by user OU. You can enter as many URLs as you like. This means that those users cannot get to the site, even if it is allowed through your filter. This can be useful for more granular control. 

You can also push out managed bookmarks, which is a great feature. You can push the district homepage, Google Apps page, student SIS system, etc for quick access by your users. 

Turning off Outside Email for K-8:
 https://support.google.com/a/answer/2640542?hl=en 


Device Management > Chrome Management > Device Settings:

Definitely turn on Forced Re-Enrollment. This will prevent users from factory resetting the Chromebooks and then taking them out of your domain. Even if they do factory reset the device, it will force them to re-enroll it in your domain and not allow them to use it.

Guest Mode - allows a user to access the Chromebook without an account. I recommend against this if you have GAFE accounts for all of your users.

Incognito Mode - turn this off for students also.

Sign-In Restriction: this allows you to restrict which accounts can be used to login to a Chromebook. Most schools do set this to restrict logins to their GAFE accounts only. It is one more feature that makes Chromebooks less attractive to thieves.

Kiosk Apps - this is where you would install testing apps for PARCC and SBAC. Kiosk apps run without a user needing to login to the Chromebook itself.

Auto-Updates - allow this unless you have concerns about a new version of Chrome OS causing an issue with an app. For example, SBAC is only setup for Chrome OS 41, so while auto updates are turned on, you can limit the version to 41 and it won't update to the latest version which is 42. 

Device Reporting - enable this and user tracking so that you can see the device info when you select a device. You can also see who the last user was, which can be helpful in tracking a missing device. 

Do Not Erase Local User Data - this will keep the user account on the Chromebook which speeds up logins. Shared Chromebooks can support a lot of users (I've seen up to 20 different users on a single Chromebook). 

Disabled Device Return Instructions - if you disable a device, it will show a message on the screen asking for it to be returned. You put in the address and contact info. 


Device Management>Network:
Network Settings - you can, and should, put in your network settings here so that the Chromebooks automatically connect to your WiFi. You can even put in a hidden SSID and all of the security and passwords here. 



Hopefully you find these tips useful.




Related:

Google for Education Resources (Google Apps, Chromebooks and more)

Chromebook Deployment Help Resources

Tips for Troubleshooting Chromebooks and some typical issues

Note: I oversaw the successful deployment of over 11,000 Chromebooks and 26,000 GAFE user accounts in my home district and have assisted over 300 school districts successfully deploy GAFE and Chromebooks. I am also a Google Certified Administrator and Deployment Specialist. I use lessons learned from my own deployment experience, research and conversations with other administrators. Contact me if you would like help with deployment, setup or training in Google Apps and/or Chromebooks.





-

Comments

Post a Comment

Popular posts from this blog

September is National Preparedness Month - Here are some great resources!

Image
It's National Preparedness Month , and start of the Hurricaine Season. With all of the crazy weather we have seen, it's good to be prepared. It is important to consider three scenarios when planning for an emergency: 1) an escape route and meeting point if everyone is in the house; 2) what to do during a school day; and 3) how to handle an emergency during the weekend, when family members might be scattered. Although many people are familiar with the concept of developing a family plan for emergencies, most fail to take the time to sit down and actually come up with one. One great resource is the FEMA -sponsored website: http://www.ready.gov/ . Check out their kids section too:  http://www.ready.gov/kids Schools need to be prepared themselves, as well as teach their staff and students how to be prepared. Each household, business, and school should have an emergency plan, emergency kits and people trained in emergency preparedness and response. I started my training in emergency...
Read more

Social Media and Kids - what you should know - guest post

Image
How Kids Are Using Mainstream Social Apps What You Should Know About Your Child’s Social Media Platforms The Most Popular Social Apps Among Teens and How They’re Using Them What Are the Mainstream Social Apps and How Are Teens Using Them? Guest Post: Hilary Bird is a digital journalist who writes about the things that fascinate her the most: relationships, technology, and how they impact each other. As more and more people become more and more reliant on their tech devices, Hilary wants to help them stay safe and understand how these devices will reshape the way we communicate. According to new research by the Pew Research Center, 95% of teens say they have access to a smartphone, and 45% indicate that they’re online “almost constantly.” With increasingly easy access to social media via smart devices—and an hour’s worth of social media data being within reach in under two seconds as internet speeds grow—parents and teachers should stay informed and aware of what social media platfor...
Read more

Google for Education Best Practices Resources and Tips

Image
Google Apps for Education and Chromebooks  are very popular with education for many reasons, one of which is the ease of management and deployment. The Admin Console allows staff to manage apps, user settings, devices settings and much more. Here are some tips and best practices for settings in the Admin Console. The Admin Console is relatively easy to use, although some settings can be hard to find. Remember to use the help features by clicking on the question marks throughout the console. The icons on the console can be moved and arranged via drag-and-drop so you can put the ones you use most up front. Typically, Users, Device Management, and Apps are the most used.  Here are some excellent resources: Resources for IT Teams (G Suite for Education) - Learn more about G Suite for Education and Chromebooks, review best practices for deploying the tools smoothly, and access support when you need it. Transition Guides - help prepare your organization for the switch to G Suite. ...
Read more