Chromebooks - deny personal accounts from school external IP.

[timbo343]

Students at our place have the option to bring in their chromebook which is joined to our Google Domain and part of the Chromebook scheme.

 

We allow them to use their personal google account on them at home as well as their school account however is there a setting in Workspace that we can set so that if OnPremise at school or connect to the net via our External IPs they cannot use their personal accounts, and if aay from school they have the ability to use both accounts.

[paulkerton]

Students at our place have the option to bring in their chromebook which is joined to our Google Domain and part of the Chromebook scheme.

 

We allow them to use their personal google account on them at home as well as their school account however is there a setting in Workspace that we can set so that if OnPremise at school or connect to the net via our External IPs they cannot use their personal accounts, and if aay from school they have the ability to use both accounts.

 

No. You can set managed Chromebooks to only allow certain domains between certain times though - but they have to be managed and they aren't limited between on and off prem.

[PrimaryNetMan]

Yes off hours is the setting you're looking for.

 

You could then enforce school account only during school hours.

[timbo343]

Yes off hours is the setting you're looking for.

 

[ATTACH=CONFIG]65586[/ATTACH]

You could then enforce school account only during school hours.

That would work if students were at school every week but it doesnt work when they are on school holiday and i'll be damned if im going into workspace every 6 weeks to edit the rule.

[timbo343]

No. You can set managed Chromebooks to only allow certain domains between certain times though - but they have to be managed and they aren't limited between on and off prem.

So as with most things Google, it's either on or off with no happy medium - great!

Let's hope students dont get savvy and start using their personal accounts in school.

[rogerdnixon]

We use this feature and do change it for holidays. We have a term time OU and a holiday OU for student devices. Just move the devices in bulk at the end of term and the start. Takes a couple of mins to do. Could do with a GAM script if you want.

[gh5000]

Have a look at the below. Don't know if you have any infrastructure currently that would allow the required changes to firewall/filtering

 

https://support.google.com/a/answer/1668854?product_name=UnuFlow&hl=en&visit_id=637894047474265872-2852160002&rd=1&src=supportwidget0&hl=en#zippy=%2Cstep-configure-the-network-to-block-certain-accounts

 

But this would take effect only when on your school network. And not sure what effect it would have on Chromebooks and especially ones that are already signed on to the personal account.

Edited May 29, 2022 by gh5000