After pushing the GoGuardian extensions onto student devices, there are a series of settings in Google Admin console that need to be configured to ensure that GoGuardian filtering and monitoring will work correctly. Although these steps can be completed in any order, we recommend following this guide to make sure everything goes smoothly.

 

In this part of the guide, we will show you how to configure settings in the following areas of Google Admin console: 

1. User Settings
2. Device Settings
3. Apps

1. Using your administrator-level credentials, log into the Google Admin console at admin.google.com.
2. Click on Device Management.
   
   
   
   
3. Click on Chrome Management, under the Device Settings heading on the left side of the screen.
   
   
   
   
4. Click on User Settings.
   
   
   
   
5. Select an OU containing students. 
   
   
   
   
6. Scroll to the Apps and Extensions heading.
   
1. Under the Allow or Block All Apps and Extensions section, choose Block all apps and extensions except the ones I allow option. 
   
   
   
   
2. Under the Allowed Apps and Extensions section, click the Manage button. In the window the appears, enter the two GoGuardian extension IDs you used in Part I, and then click Save.
   
   
   
   
3. Under the Task Manager section, choose Blocks users from ending processes with the Chrome Task Manager option. 
   
   
   
   
7. Scroll to the Security heading.
   
   
   1. Using the Geolocation dropdown menu, select the Allow sites to detect users’ geolocation option.
      
      
      
      
   2. Using the Incognito Mode dropdown menu, select the Disallow incognito mode option.
      
      
      
      
8. Scroll to the User Experience heading.
   
   
   1. Using the Developer Tools dropdown menu, select the Never allow use of built-in developer tools option.
      
      
      
      
   2. Using the Multiple Sign-In Access dropdown menu, select the Block multiple sign-in access for users in this organization option.
      
      
      
      
9. Scroll to the Content heading.
   
   
   1. Using the Screenshot dropdown menu, select the Enable screenshots option.
      
      
      
      
10. Scroll to the Google Play Apps heading.
    
    
    1. Using the Allow the Google Play and Android Apps to be installed on Chrome devices dropdown menu, select the No policy set (default=Do not allow) option.
       
       
       
       
11. At the bottom of the screen, click Save.
    
    

1. Using your administrator-level credentials, log into the Google Admin console at admin.google.com.
2. Click on Device Management.
   
   
   
   
3. Click on Chrome Management, under the Device Settings heading on the left side of the screen.
   
   
   
   
4. Click on Device Settings.
   
   
   
   
5. Select an OU containing students. 
   
   
   
   
6. Scroll to the Sign-in Settings heading.
   
   
   1. Using the Allow Guest Mode dropdown menu, select the Do not allow guest mode option.
      
      
      
      
   2. Using the Restrict sign-in dropdown menu, select the Restrict Sign-in to list of users option. 
      
      
      
      
      1. In the text box, use a wildcard (an * symbol) + your school’s domain to restrict sign-in to only your school.
      2. For example, *@yourschool.edu would allow anyone with @yourschool.edu in their email address log in to your school’s Chromebooks.
      3. You can also add multiple domains and subdomains, e.g. *@yourschool.edu, *@students.school.edu.
         
         
7. Scroll to the Enrollment & Access heading.
   
   
   1. Using the Forced Re-enrollment dropdown menu, select the Force device to re-enroll into this domain after wiping option.
      
      
      
      
8. At the bottom of the screen, click Save.
   
   
   
   

1. Using your administrator-level credentials, log into the Google Admin console at admin.google.com.
2. Click on Apps.
   
   
   
   
3. Click on G Suite.
   
   
   
   
4. Click on Google+.
   
   
   
   
5. Click on Advanced Settings.
   
   
   
   
6. Under the Google+ APIs heading, make sure that the Allow apps to access the Google+ APIs box is checked/enabled.
   
   
   
   
7. At the bottom of the screen, click Save.