Configure Device Policy

This allows administrators to remotely configure device policies and apply them to the enrolled devices. 

To configure Device Policy remotely on an enrolled device, follow these steps:

1. Navigate to SureMDM Web Console > Profiles > ChromeOS > Add > Device Policy > Configure.

2. Enter a Profile Name.

3. Configure Device Policy settings and click Save.

Settings

Description

Device Policy
  • Powerwash: Enables the triggering of a Powerwash, which restores ChromeOS devices to their original settings.
  • Verified Access: This ensures ChromeOS devices in your organization will verify their identity to content providers.
  • Verified mode: Provides the option to require a verified mode boot for verified access, or skip the boot mode check for verified access.
  • Integrated FIDO second factor: Offers the ability to enable or disable an integrated second factor for authentication, or provides the choice to the user.

Sign in Settings
  • Guest mode: Allows temporary user sessions on Chromebooks.
  • Sign-in restriction: Controls who can sign in to the Chromebook.
  • Autocomplete domain: Automatically fills in the domain name during sign-in.
  • Autocomplete domain prefix: Sets the domain name for automatic filling during sign-in.
  • Show user names and photos on the sign-in screen: Allows to set user names and photos on sign-in.
  • Single sign-on cookie behavior: Enables SSO for internal websites and cloud services.
  • Sign-in language: Controls the language on the sign-in screen.
  • Single sign-on verified access: Allows certain websites to perform verified access checks during SAML authentication.
  • System info on sign-in screen: Displays device system information on the sign-in screen.
  • Privacy screen on sign-in screen: Enables a privacy screen on the sign-in screen.
  • Show numeric keyboard for password input: Displays a numeric keyboard for password input on touchscreen Chromebooks.

Sign-in Screen Accessibility 
  • Spoken feedback: Toggles the screen reader, also known as ChromeVox.
  • Select to speak: Toggles selective screen reading, which reads only specific parts of the screen, like selected text or certain sections.
  • High contrast: Toggles high contrast mode, which changes the font and background colors to improve readability.
  • Screen magnifier: Toggles the screen magnification feature.
  • Sticky keys: Toggles inputting key combinations one keypress at a time, without holding any keys down.
  • On-screen keyboard: Toggles the virtual keyboard displayed on the screen.
  • Dictation: Toggles speech-to-text input.
  • Keyboard focus highlighting: Toggles enhanced object highlighting during keyboard navigation on the sign-in screen.
  • Caret highlight: Toggles a ring around the caret (keyboard cursor) during typing.
  • Auto-click enabled: Toggles automatic mouse clicking when the cursor stops moving.
  • Large cursor: Toggles a bigger mouse cursor.
  • Cursor highlight: Toggles a ring around the mouse cursor during mouse movement.
  • Primary mouse button: Specifies the primary mouse button for interactions.
  • Mono audio: Toggles single-channel audio.
  • Accessibility shortcuts: Toggles the built-in accessibility shortcuts.

Device Update
  • Variations: Enables the Chrome  Variations framework for selective security fixes and experimental features on the Chrome OS.

The newly created profile will be listed in the Profiles section.

4. Go back to the Home tab and select the required group(s).

5. Click Apply to launch Apply Job/Profile To Device prompt.

6. In the Apply Job/Profile To Device prompt, select the created policy and click Apply.

Note: Unlike other platforms, the ChromeOS policy cannot be assigned to individual devices; it can only be assigned to the ChromeOS group.