+ Post New Thread
Results 1 to 14 of 14
Cloud Services Thread, Google Apps and Chrome management in Technical; As a newcomer to Google Apps for Edu I'm just looking into management of chromebooks (to replace older netbooks) I ...
  1. #1
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32

    Google Apps and Chrome management

    As a newcomer to Google Apps for Edu I'm just looking into management of chromebooks (to replace older netbooks)

    I have a single evaluation chromebook and I'm just curious as to how the management can be added. Do I automatically get a license per device I buy, or do I have to buy a separate licence for each chromebook? I can see there is no Chromebook management in my device management on the admin console but I'm not sure how to get this setup.

    I wanted to test it out on the evaluation one first before I committed to buying chromebooks, and then finding out I have to buy additional licenses etc.

  2. #2


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,643
    Thank Post
    250
    Thanked 2,912 Times in 2,144 Posts
    Rep Power
    830
    Quote Originally Posted by Sheridan View Post
    Do I automatically get a license per device I buy, or do I have to buy a separate licence for each chromebook?
    You need to buy management licenses (£19 each IIRC). Based on previous threads, these can take 1-2 weeks (or more) to be activated by Google after ordering them.

    Quote Originally Posted by Sheridan View Post
    I can see there is no Chromebook management in my device management on the admin console but I'm not sure how to get this setup.
    These links may help...

    Last edited by Arthur; 30th April 2014 at 09:23 PM.

  3. Thanks to Arthur from:

    Sheridan (30th April 2014)

  4. #3


    Join Date
    May 2009
    Posts
    3,317
    Thank Post
    293
    Thanked 889 Times in 667 Posts
    Rep Power
    341
    You buy licences for each chromebook, usually at the same time as the devices via an official reseller. You can buy the licences separately. If you are on a Google Apps for Education trial, I'm sure either a reseller or google support will bung you a licence for one.

  5. Thanks to pcstru from:

    Sheridan (30th April 2014)

  6. #4
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    Ah cheers that makes sense. We already have GAPPS but just have a chrome book on eval. I wanted to test the management facilities for chrome books but I guess I'll have to but some licenses. By the time they arrive the eval will have ended!

  7. #5
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    Another question - has anyone got their chromebooks working through a smoothwall proxy using ntlm authentication? It seems to have the settings for it (i.e proxy settings and dialogue box for username) but it sits at the main screen saying the network is not available. It worked when tested on a non authenticating proxy (i.e at home!)

  8. #6


    Join Date
    May 2009
    Posts
    3,317
    Thank Post
    293
    Thanked 889 Times in 667 Posts
    Rep Power
    341
    Quote Originally Posted by Sheridan View Post
    Another question - has anyone got their chromebooks working through a smoothwall proxy using ntlm authentication? It seems to have the settings for it (i.e proxy settings and dialogue box for username) but it sits at the main screen saying the network is not available. It worked when tested on a non authenticating proxy (i.e at home!)
    I don't believe that is possible as I understand it. Managed chromebooks need to grab settings from the domain via the chocolate factory prior to the user logging in (i.e. at boot). We list a bunch of google resources as bypassing authentication on smoothwall to allow this to happen. Users then log into the session page when the browser starts up. If anyone does know of a way to avoid that second login, I'd love to hear it.

    We also have to set up chrome books by bypassing smoothwall because all the proxy settings are distributed via the policy on the domain.

  9. #7
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    Hmm that might be the end of chromebooks here then. If they don't fit in with our existing filter then they're not going to be much use in school.

    It also seems we can't use the smoothwall methods to only allow the chromebooks to access our GAPPS domain, so that's pretty much killed them off here. Works on windows so I guess laptops are the next choice.
    Last edited by Sheridan; 1st May 2014 at 01:29 PM.

  10. #8


    Join Date
    May 2009
    Posts
    3,317
    Thank Post
    293
    Thanked 889 Times in 667 Posts
    Rep Power
    341
    Quote Originally Posted by Sheridan View Post
    Hmm that might be the end of chromebooks here then. If they don't fit in with our existing filter then they're not going to be much use in school.
    They do 'fit', it's just a bit clunky. For us it's the same as if a student in using their own device, they have to authenticate with smoothwall since the device isn't in the domain. There may be a way to single sign on - if you are using password sync the passwords will be the same. If there is though, I don't yet know how.
    It also seems we can't use the smoothwall methods to only allow the chromebooks to access our GAPPS domain, so that's pretty much killed them off here. Works on windows so I guess laptops are the next choice.
    Not sure what you mean by that. You can restrict the logins to users of the school domain. So someone can't log in to a chrome book using (say) their personal gmail account.

  11. #9
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    The way we have smoothwall set up here is using https inspection (i.e man in the middle) so that personal gmail cannot be accessed, but our gapps domain can - this isn't working on the chromebook as it doesn't recognise the certificate from the smoothwall. We deployed this on the windows PCs with group policy but I can't see how to get this on the chromebook.

    Even when I put the proxy settings in, and authenticate I simply get the 'network not available' on the chromebook homepage, so it seems not to work at all with the authentication methods on our smoothwall. Like I said, works fine at home on a basic setup, but not in our current setup. As this is an evaluation I didn't want to start having to create unauthenicated proxies etc so in that sense its been sucessful as the windows laptops work fine. From this I can't see how multiple users are going to deal with this.

  12. #10


    Join Date
    May 2009
    Posts
    3,317
    Thank Post
    293
    Thanked 889 Times in 667 Posts
    Rep Power
    341
    Quote Originally Posted by Sheridan View Post
    The way we have smoothwall set up here is using https inspection (i.e man in the middle) so that personal gmail cannot be accessed, but our gapps domain can - this isn't working on the chromebook as it doesn't recognise the certificate from the smoothwall. We deployed this on the windows PCs with group policy but I can't see how to get this on the chromebook.
    You do it through the domain management (effectively their version of group policy). I think smoothwall support should be able to help you with that once you have a management licence for the device.
    Even when I put the proxy settings in, and authenticate I simply get the 'network not available' on the chromebook homepage, so it seems not to work at all with the authentication methods on our smoothwall. Like I said, works fine at home on a basic setup, but not in our current setup. As this is an evaluation I didn't want to start having to create unauthenicated proxies etc so in that sense its been sucessful as the windows laptops work fine. From this I can't see how multiple users are going to deal with this.
    I think for a proper evaluation you need to get a management licence and look at what is available in the domain. Our worst complaint is the two logins required, once to the chromebook and another into smoothwall when they run the browser. YMMV though.

  13. Thanks to pcstru from:

    Sheridan (1st May 2014)

  14. #11
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    Ah right, so the device management does a bit more than I thought then - that might sort that problem out then.

    It does look like ntlm authentication on the smoothwall is going to be an issue, or something that has to be worked around. We can get ipads and ipods to work properly with this so they might be a choice in conjunction with some windows tablet/laptops. Once we enter the smoothwall credentials on the prelogin screen, we just get the daft dinosaur icon and 'network not available'

    If you login in as guest and authenticate it with the smoothwall then you can browse ok - so its variable as to when it decides to work - no use for us. All I want is to deploy the wireless and proxy settings (including a default user for the smoothwall box) so all the users need to do is login with their google credentials, this doesn't appear to be possible for us.
    Last edited by Sheridan; 1st May 2014 at 03:03 PM.

  15. #12


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,643
    Thank Post
    250
    Thanked 2,912 Times in 2,144 Posts
    Rep Power
    830
    Quote Originally Posted by Sheridan View Post
    this isn't working on the chromebook as it doesn't recognise the certificate from the smoothwall. We deployed this on the windows PCs with group policy but I can't see how to get this on the chromebook.
    https://support.google.com/chrome/a/answer/3504942

  16. Thanks to Arthur from:

    Sheridan (1st May 2014)

  17. #13
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,410
    Thank Post
    127
    Thanked 103 Times in 69 Posts
    Rep Power
    32
    Looks like there might be ways around a lot of these, apart from the ntlm authentication! Shame I can't get hold of a license to evaluate it properly in school. I guess I'll have to buy some licences and a single chromebook to test it out properly.

  18. #14
    robjduk's Avatar
    Join Date
    Jun 2011
    Posts
    521
    Thank Post
    25
    Thanked 76 Times in 59 Posts
    Rep Power
    26
    I use alot of Chromebooks at my place and would recommend you have a chat to Google Apps Premier Reseller | Cloud Technology Solutions (Julian) for licences and help.



SHARE:
+ Post New Thread

Similar Threads

  1. Moodle 2.x with integrated Google Apps and GMail - anyone had success?
    By Bumbles in forum Virtual Learning Platforms
    Replies: 0
    Last Post: 24th November 2011, 11:19 AM
  2. Google Apps and MS Exchange
    By jstuttard in forum How do you do....it?
    Replies: 5
    Last Post: 18th November 2011, 09:38 AM
  3. Can I run both Google Apps and live@edu under the same domain?
    By edutech4schools in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 13th December 2010, 12:00 PM
  4. Google Apps and SSO
    By fontburn78 in forum Virtual Learning Platforms
    Replies: 3
    Last Post: 3rd March 2010, 11:52 AM
  5. Google Apps and CC3
    By emdudley in forum Web Development
    Replies: 4
    Last Post: 11th July 2009, 09:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •