nikkonine

Sounds like with older versions of Chrome it had to be Superadmin. With newer version (we are on 29) it doesn't matter. If you have subdomains and on 29 or earlier the account you choose can make a difference. If you join using an account in root domain your users in sub-domain will not get policies the first time they login. This also works the other way around. This is fixed in 30 but it is still in beta

I've considered that option before but it looks like that leaves your wireless password hanging out there is a read only login script that anyone can access if they know where to look.

I've used netsh command for firewall and network settings but i am trying to see how i would use it to update 400 laptops. Have you used netsh this way? I was thinking there should be a way via group policy or Novell Zenworks.

Has anyone pushed the wireless password via group policy? Group policy lets you push the SSID but not password for SSID.

We have faculty laptop connected to our production network and the users are able to reveal the wireless password. (Faculty are members are local admins). Also there are several free utilities that will read the exported key. Has anyone successfully changed registry settings or group policy settings to prevent them from viewing the password?

So i am trying to work this out with Google but they are telling me the Chromebooks have to be enrolled with the superadmin account in the primary domain. (We have custom roles for our techs so that only one or two of us have full access). Google is telling me a custom account won't work it has to be the full superadmin account or the policies wont apply properly.

AliG is right. Are the Chromebooks showing in your console under devices. If not they may have been registered under a subdomain.

You probably already have your answer by now, but here it goes. !!Do not log into your Chromebooks when you get them!!! You will have to press Ctrl + Alt + E to get an enrollment login. This is what will tie the Chromebooks to your account. Your Chrome devices will show up in your Google App console. When you purchased your Chromebooks you were probably asked about your domain name, the devices will show up under that domain. If you haven't already done so you will want to start working on your suborganizations so that you can apply different policies to your chromebooks if needed. For instance you might make a suborg that is the year students graduate. Then you can have different Chromebook policies for High School vs an Elementary school. When you get the device and you register it is the key to licensing them. If you purchased your Chromebooks from Google you will have Mac address and other information about the device. If you got them from a Chromebook vender (CDW or other) this information will not be propagated to your management console. Make sure you take down all the information about each Chromebook before they are deployed so you aren't trying to track down the devices later. Why? Chromebooks don't really have names, but you might want to have certain Chromebooks receive a certain IP so that they don't get caught in your firewall or content filtering. You will need to know what Chromebook device with X serial number goes with X MAC address.

I am having some confusion as to how computer side GPO settings will be applied when a teacher logs in at a student computer depending on the AD structure. I have our AD structure with student users in one OU and Teachers in another OU right below the domain. The Teacher and Student OU's are not sub OU's of one another to make sure that privileges do not flow from one group to the other. I also have the student computers in a sub-OU of Students and Teacher computers in a sub-OU of Teachers. I feel that in doing this I will have issues when a teacher sits down at a student computer. I haven't completely tested it but I think the teacher will get the computer settings from the Student GPO that is applied to the Student OU when the student computer is in a sub-OU. Should the teacher and student computers be in OU's at the root of the domain like the user OU's are and then when a user logs in the computer side settings of the GPO for the student or teacher will just apply to the computer? So basically should I think of it as GPO settings are based on login and therefore follow the user which is applied to the computer the user is logged into? A. Domain -Students OU -Student Computers -Teacher OU -Teacher Computers or B. Domain -Student OU -Teacher OU -Student Computer OU -Teacher Computer OU