To enforce the policies you set in the Admin console on your Chrome devices, you need to enroll the devices in your domain. Each device you enroll adheres to the Chrome management policies you set in the Admin console until you wipe or recover the device.
Note: You must enroll a device before any user signs in to it (including you as the administrator). If a user signs in first, your policies will not apply, and you must wipe the device to restart enrollment.
Manually enroll Chrome devices
-
Turn on the Chrome device and follow the onscreen instructions until you see the sign on screen. Don't sign in yet.
-
Before signing in to the Chrome device, press Ctrl+Alt+E to go to the enrollment screen.
-
Enter the username and password from your Google admin welcome letter, or the username and password for an existing Google Apps user on your account that has eligibility to enroll.
Note: You can control which users can enroll in your domain with the Enrollment Permissions user policy.
-
Click Enroll device. You'll receive a confirmation message that the device has been successfully enrolled.
Once enrolled, you can find the device in your Admin console by clicking Device management > Chrome devices.
Note: By default, devices are enrolled into the top-level organization for your domain. You can change where a device is enrolled with the Device Enrollment user policy.
Important: If domain policies are not applied it maybe because the chrombook does not have the latest chrome update. Follow the instructions in 'Update Google Chromebook' guide.