Chromebooks & AD Integration

[AngryITGuy]

We are currently looking in to Chromebooks as an alternative to Windows laptops.

 

Can’t really ignore the Chromebooks for internet based research and tasks for some subject areas and obviously the cost makes them appealing too.

 

We are an Office 365 school and I am hoping to integrate the Chromebooks with AD.

 

In my head I want users to log in with AD credentials, sign in to 365 seamlessly with SSO use Office in the cloud, print and use online resources like Doddle, MyMaths etc

 

I originally thought that I would have to setup a G-Suite domain but searching online it looks like my option is to set up Chrome Enterprise Active Directory, so that was a relief assuming I’m correct!

 

We have a test Chromebook ordered to go through the process and see the restrictions available with Chrome Enterprise Active Directory and it’s accompanying group policies. Ideally I just want to be able to install the extensions for Impero and PaperCut. Push out proxy settings and stop users from modifying things.

 

Has anyone done anything similar? I would really appreciate any insight or advice from anyone that’s done anything similar or has any experience with Chromebooks.

[FN-GM]

I have had this working as well as the SSO with Office 365. This was before we moved everything over to GSuite.

 

We did it via ADFS. This also provides SSO for the apps on Windows PC. When ADFS is setup on Office 365 you set it up under the SAML section of G Suite and then turn on SAML under the device settings of the Chromebook in the admin console. This will allow you to use it once when you login to the Chromebook and any other area such as Office 365 won't require authentication again.

 

It will also allow the "change password on next login" to work on the Chromebook.

 

Thanks

[jmak]

It sounds like you've got a plan, but I would say don't rule out setting up G Suite. It's really straightforward and would potentially give you more control over the Chromebooks. You don't have to excuse any of the other services to users.

[ADMaster]

@FN-GM are you still running both O365 and Gsuite?

I'll have O365 mid July when the agreement renewal is processed. I'd like to be able to make users change their passwords at first log in.

 

Thanks,

[FN-GM]

@FN-GM are you still running both O365 and Gsuite?

I'll have O365 mid July when the agreement renewal is processed. I'd like to be able to make users change their passwords at first log in.

 

Thanks,

 

Kind of. I have 365 running in the background doing nothing. It get used for 2 things.

 

1. Installing office on personal devices at home.

2. If someone sends us encrypted messages via 365 the SSO works.

 

We use the free education products.