There a number of questions surrounding the management of ChromeOS devices in schools that crop up on a fairly frequent basis. So I thought I'd answer a few of the most common ones here that are not that obvious unless you are in the know. To do the following, you must have device management licences. Some of these tricks can be achieved using other means through third party add ons - but this is all done with just device management. Prevent non domain users logging on In the admin console go to 'Device Management', 'Chrome', 'Device Settings' Use the above policy to restrict who can sign-in to your devices. Wildcards are allowed as in the example above. This does not stop users signing into a non-domain account once signed into the device. Prevent users from signing into private accounts or adding accounts once signed in. In the admin console go to 'Device Management', 'Chrome', 'User Settings' Use this policy t...