Dev mode on school chromebook

[harry...@scarboroughcollege.co.uk]

Hey, i was wondering if there was a way to enable dev mode on a chromebook managed by a school that has disabled dev mode. Look in the top right of the image.

[Camdyn Saludo]

Hey Harry, 

It's impossible to bypass school restrictions on a Chromebook. Talk to your school's tech department or administrator if you want this unblocked. 

Hope this helps.
-Camdyn-

[Joe Ellett]

As Camdyn says, if you have a managed Chromebook, your administrator pwns you, heart and soul, and there's no way around it. Google did an excellent job in making management bulletproof. That's why schools and businesses love them so much.

Usually, the first things admins do is to disable dev mode, reset and recovery, but even if they don't, you can't escape management even if you completely wipe your machine.

Go buy your own Chromebook and have fun with that one.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[Mike Frysinger]

if you can't put it into dev mode, then you can't boot your own ChromiumOS build. it sounds like his school has dev mode disabled.

-mike

On Sat, May 5, 2018, 22:05 adam kearn <adamk...@gmail.com> wrote:

If he build his own chromium os and installed it then it wouldn’t be enrolled therefor letting he login using his personal account instead of his school account whould have policy’s stoping from doing things like using CROS for example

[adam kearn]

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

[Joe Ellett]

If the Chromebook is enrolled, then you cannot install Chromium OS. You cannot do anything but what the admins let you. This is true even if the SSD gets wiped, although if the device is enrolled, restore and recovery are almost certainly disabled so you can't wipe the disk.

On Sat, May 5, 2018 at 6:11 AM adam kearn <adamk...@gmail.com> wrote:

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

[Matthias Apitz]

On Sunday, 6 May 2018 03:27:39 CEST, Joe Ellett <joee...@gmail.com>
wrote:

> If the Chromebook is enrolled, then you cannot install Chromium OS. You
> cannot do anything but what the admins let you. This is true even if the
> SSD gets wiped, although if the device is enrolled, restore and
> recovery are almost certainly disabled so you can't wipe the disk.
>

One could replace the SSD, at least in my C720, and perhaps overwrite the
SeaBIOS.

matthias




--
Sent from my Ubuntu phone
http://www.unixarea.de/

[Joe Ellett]

Why bother? Once you do that you can't go back, and rewriting the BIOS requires that you mess with the motherboard and if you don't get things right the first time you'll have a brick. Even if you get it right, you'll have wasted so much time and effort and money that you should have simply started with a plain old PC. 

[Matthias Apitz]

On Sunday, 6 May 2018 07:50:41 CEST, Joe Ellett <joee...@gmail.com>
wrote:

> Why bother? Once you do that you can't go back, and rewriting the BIOS
> requires that you mess with the motherboard and if you don't get things
> right the first time you'll have a brick. Even if you get it right, you'll
> have wasted so much time and effort and money that you should have simply
> started with a plain old PC.
>

No. The C720 is a very small, but powerfull device. Mine runs FreeBSD since
2015.

[Mike Frysinger]

recovery would work, but wouldn't help. you could only boot official images, and the FRE logic would check everything to prevent dev mode.

-mike

[Mike Frysinger]

replacing the SSD is irrelevant, and the legacy firmware slot wouldn't help (not that you could write it in the first place as it's not on the SSD). legacy boot only works in dev mode.

-mike

[Keith I Myers]

Why not simply purchase your own Chromebook. 

Ethically speaking, you do not own this Chromebook, your School does. You should not modify anything that you do not own as you are responsible for the damage. Many Chromebooks are both affordable and easy to get. I also have a hard time with this topic as it could also help thieves flood the market with stolen Chromebooks.  

--

Keith I Myers http://KMyers.me Mobile : (305)-929-3475

[Mike Frysinger]

On Mon, May 7, 2018 at 11:11 PM Keith I Myers wrote:

Why not simply purchase your own Chromebook. 

not everyone can afford them.  $199 is not nothing to many people in this world, unfortunately.  it wasn't when i was growing up for sure (even adjusting for inflation).

Ethically speaking, you do not own this Chromebook, your School does. You should not modify anything that you do not own as you are responsible for the damage. Many Chromebooks are both affordable and easy to get.

at least in the US, public schools are funded by tax payers in the respective districts, so in a sense, they belong to the community.  it would be great if we could figure out a way to balance the needs/obligations of the schools (both academically and legally) while also supporting students who want to explore beyond the rigid bounds of most schools.  conformity is not the American way, we should all rage against the machine.  although the OP is British, so i can't speak as much to their national culture.

I also have a hard time with this topic as it could also help thieves flood the market with stolen Chromebooks.  

yeah, it's unfortunate it's impossible to disambiguate bad actors.  i'm fairly certain this group has seen at least one such posting since i started.

-mike

[adam kearn]

I agree with Keith where we shouldn't be discussing the posable ways to get around as thieves could use this agent's people, On the other hand without discussing them they wouldn't get patched/fixed.

When a Chromebook is enrolled does that disable letting users login using other accounts that are not in the same domain?

For example, if a Chromebook has been enrolled to this domain    @someschool.org

when you go to login using another domain like:  MarkZuc...@roblox.com

It won't let you...  Well, it works like that for the school I go to.

On Sunday, May 6, 2018 at 10:12:17 AM UTC+1, Mike Frysinger wrote:

recovery would work, but wouldn't help. you could only boot official images, and the FRE logic would check everything to prevent dev mode.

-mike

On Sun, May 6, 2018, 10:27 Joe Ellett <joee...@gmail.com> wrote:

If the Chromebook is enrolled, then you cannot install Chromium OS. You cannot do anything but what the admins let you. This is true even if the SSD gets wiped, although if the device is enrolled, restore and recovery are almost certainly disabled so you can't wipe the disk.

On Sat, May 5, 2018 at 6:11 AM adam kearn <adamk...@gmail.com> wrote:

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

[Keith I Myers]

It is possible for administrators to lock it down to domain accounts only. It is of course still possible to log into other accounts in the Chrome browser. 

On Mon, May 7, 2018 at 1:20 PM adam kearn <adamk...@gmail.com> wrote:

I agree with Keith where we shouldn't be discussing the posable ways to get around as thieves could use this agent's people, On the other hand without discussing them they wouldn't get patched/fixed.

When a Chromebook is enrolled does that disable letting users login using other accounts that are not in the same domain?

For example, if a Chromebook has been enrolled to this domain    @someschool.org

when you go to login using another domain like:  MarkZuc...@roblox.com

It won't let you...  Well, it works like that for the school I go to.

On Sunday, May 6, 2018 at 10:12:17 AM UTC+1, Mike Frysinger wrote:

recovery would work, but wouldn't help. you could only boot official images, and the FRE logic would check everything to prevent dev mode.

-mike

On Sun, May 6, 2018, 10:27 Joe Ellett <joee...@gmail.com> wrote:

If the Chromebook is enrolled, then you cannot install Chromium OS. You cannot do anything but what the admins let you. This is true even if the SSD gets wiped, although if the device is enrolled, restore and recovery are almost certainly disabled so you can't wipe the disk.

On Sat, May 5, 2018 at 6:11 AM adam kearn <adamk...@gmail.com> wrote:

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[adam kearn]

Yeah but even though you have logged into an unmanaged account within the web browser, you still have the policies from the account you first signed in with. 

Blocking him form enabling developer mode on his Chromebook  on the chrome://extensions  page

On Monday, May 7, 2018 at 6:22:42 PM UTC+1, Keith I Myers wrote:

It is possible for administrators to lock it down to domain accounts only. It is of course still possible to log into other accounts in the Chrome browser. 

On Mon, May 7, 2018 at 1:20 PM adam kearn <adamk...@gmail.com> wrote:

I agree with Keith where we shouldn't be discussing the posable ways to get around as thieves could use this agent's people, On the other hand without discussing them they wouldn't get patched/fixed.

When a Chromebook is enrolled does that disable letting users login using other accounts that are not in the same domain?

For example, if a Chromebook has been enrolled to this domain    @someschool.org

when you go to login using another domain like:  MarkZuc...@roblox.com

It won't let you...  Well, it works like that for the school I go to.

On Sunday, May 6, 2018 at 10:12:17 AM UTC+1, Mike Frysinger wrote:

recovery would work, but wouldn't help. you could only boot official images, and the FRE logic would check everything to prevent dev mode.

-mike

On Sun, May 6, 2018, 10:27 Joe Ellett <joee...@gmail.com> wrote:

If the Chromebook is enrolled, then you cannot install Chromium OS. You cannot do anything but what the admins let you. This is true even if the SSD gets wiped, although if the device is enrolled, restore and recovery are almost certainly disabled so you can't wipe the disk.

On Sat, May 5, 2018 at 6:11 AM adam kearn <adamk...@gmail.com> wrote:

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

[Mike Frysinger]

the dev mode we're talking about here is the CrOS system one where you can bypass verified boot, get a shell, and run arbitrary programs (usually video games). it's not the dev toggle on the extensions page where you can load unpacked extensions or debug existing installed extensions.

-mike

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--

Keith I Myers http://KMyers.me Mobile : (305)-929-3475

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[Mike Frysinger]

CrOS security is based on solid principles and implementations (objectively biased opinion), not on obscurity. if we can't openly talk about attacks and their mitigations, then we're not really confident in the security of the platform.

at this time, there is no known (to CrOS engineers) software attack to bypass FRE (forced re-enrollment). if someone finds a way, they should report it via crbug.com/new as security reports are often rewarded with cash bounties (which you could use to then buy your own system, CrOS or otherwise). although you should consult the VRP page for specific details :p.

-mike

On Tue, May 8, 2018, 02:20 adam kearn <adamk...@gmail.com> wrote:

I agree with Keith where we shouldn't be discussing the posable ways to get around as thieves could use this agent's people, On the other hand without discussing them they wouldn't get patched/fixed.

When a Chromebook is enrolled does that disable letting users login using other accounts that are not in the same domain?

For example, if a Chromebook has been enrolled to this domain    @someschool.org

when you go to login using another domain like:  MarkZuc...@roblox.com

It won't let you...  Well, it works like that for the school I go to.

On Sunday, May 6, 2018 at 10:12:17 AM UTC+1, Mike Frysinger wrote:

recovery would work, but wouldn't help. you could only boot official images, and the FRE logic would check everything to prevent dev mode.

-mike

On Sun, May 6, 2018, 10:27 Joe Ellett <joee...@gmail.com> wrote:

If the Chromebook is enrolled, then you cannot install Chromium OS. You cannot do anything but what the admins let you. This is true even if the SSD gets wiped, although if the device is enrolled, restore and recovery are almost certainly disabled so you can't wipe the disk.

On Sat, May 5, 2018 at 6:11 AM adam kearn <adamk...@gmail.com> wrote:

You could try building your chromiumos and installing that onto the chrome book, so you can then login using your personal account and not your schools account therefore you won’t have google policy’s letting you enable dev mode

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[Bartosz Fabianowski]

We actually have a solution for this in the works. If the Chromebook was
bought by the school, chances are, the school will want to control what
happens on the device 24/7. But in other cases, devices are bought by
parents. Lock-down is needed in class to prevent distraction and
cheating. When the Chromebook is taken home in the evening, controls can
be relaxed though (school and parents permitting). +Max is driving a
feature that will allow schools to configure "off hours" during which
their policies do not apply.

- Bartosz

[Dymphe]

Manage Chrome device settings - Google Chrome Enterprise Help
https://support.google.com/chrome/a/answer/1375678

[adam kearn]

Looking at the OP he wants to enable "developer mode" to load his own-made extensions, not get into the BIOS on the chrome book.

The best posable way to do this would be to just ask his schools IT Technicians and I'm sure they would enable it the admin console.

Our schools IT Technicians are really nice, they let me go in at lunch to work on projects.   :)

[CamdynSaludo.CBC]

My school's tech department gave me an unenrolled Chromebook and Chromebox to do dev-mode stuff on. Pretty cool. They also gave me a Windows workstation to experiment with VMWare and such. 

-ℂ𝕒𝕞𝕕𝕪𝕟-

[Mike Frysinger]

sorry, you're absolutely right.  i missed the image because i didn't read the OP's post carefully enough.

-mike

--

--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

[adam kearn]

So there aren't any posable ways around to enable developer mode on his chrome book then?

Without changing it on the admin console

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

[Joe Ellett]

No, there aren't. If there were, you could make some money by reporting it.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[Mike Frysinger]

all the previous answers in this thread still apply :).

-mike

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

[13...@adnaschools.org]

Nope, no chance. Also highly unsuggested...

[_elijah perris_]

That is not true dev mode. That just shows you the ids of the extensions. If you want real dev mode, press esc+refresh and press the power button. You will get a scary looking message. press ctrl+d. Then press enter. The following process will take about 15 minutes. IT WILL WIPE YOUR LAPTOP SO MAKE A COPY OF YOUR DOWNLOADS FOLDER!! Once in dev mode, you can pretty much do everything, even install windows. Im too much of a wuss to do it though.