Chrome Management - Restrict networks and network interfaces

[FN-GM]

Does anyone know if this applies to users or devices please? It seems to reference both.

 

https://support.google.com/chrome/a/answer/6326250?hl=en&safe=vss&nfpr=1#restrictnetwork

[rogerdnixon]

I believe you can apply it to both. We use that policy on our trolley devices/Chromeboxes/bases so they can only connect to the school wifi. These devices never go home or off site. I'd not apply it to users as it would restrict where they can work or any devices that might go offsite e.g. 1:1/Staff devices.

[FN-GM]

I want to allow 1 student to connect to his come WIFI.

 

If i put the device in its own OU and uncheck "restrict WIFI networks" but keep this selected on the other devices it should be ok?

 

Thanks

[rogerdnixon]

That should work. Remember that this will apply to any user of that device.

[FN-GM]

That should be fine. Does mean I need to change my OU structure.

[FN-GM]

When a device that is locked down to approved SSID only, Seems to work when logged in. But on the login screen the user is able to select any network.

 

Any thoughts please?

[fiza]

When a device that is locked down to approved SSID only, Seems to work when logged in. But on the login screen the user is able to select any network.

 

Any thoughts please?

 

From that link you posted

To ensure these policies do not cause major deployment errors, we do not apply the restrictions before user sessions start. This means the Chromebook sign-in screen will not enforce these restrictions. That way if the admin misconfigured the policy, a user can simply sign out, connect to any network from the sign-in screen, and sign back in to their session while connected to a valid network that allows them to download the amended policy.

[FN-GM]

Also means students could stuff up the settings

[rogerdnixon]

If you deploy the WiFi to the device, they cannot edit the settings associated with that SSID - so there is nothing to mess up. They may try and us a mobile hotspot, but get dumped back onto the school network once logged in.

If you use filtering that works on and offsite, its all rather academic. We find students don't bother as it makes no difference and they just use up their own mobile data.

[FN-GM]

They could connect to our open guest network, then can't access the internet as they don't have a voucher code, leave the machine and the next user comes along confused. Edited May 31, 2017 by FN-GM

[rogerdnixon]

At login the machine will auto connect to the wifi you push to it. Once logged in the user is restricted to the SSID you enforce (if you do this). When they logoff - it back to whatever you push to the device. I suppose if you have an open network they could connect to that - but if there is no internet they cannot login and get nowhere. The user would then put it back to the SSID its meant to be on or restart and it would do it itself.