Force restricted YouTube settings on managed chromebooks

[Hannah Hauser]

Hello,

I'm hoping someone has a magic answer for how to do this.... 

We use chromebooks and have always allowed students to log into a personal gmail account on their chromebook after signing into the device initially with their school account. This has helped our votech students still access their CTC accounts in addition to our district accounts. 

We now have a string of occurrences of where students are able to access YouTube unrestricted because they are logging in with a personal account. We do force YouTube restrictions when they are logged into YouTube with their district account, but all they have to do is switch over to their personal and they now have open access. Interestingly, this has not been a problem for us until now and we've had Chromebooks for 8+ years. 

From what we can tell, you can force SafeSearch in the Admin Console on the device, but we are having a hard time finding out if it is possible to force restricted YouTube settings on a managed device (rather than just on an account). Hoping someone has some advice or insight on this! Thanks so much in advance!!

[Mark Willis]

Hannah, 

I hope all is well.   You can make is so your Chromebook only allows your Domain to sign on and then White the CTC Account Domain as well.   And then only allow them to have one sign-on when logged into Chrome.   Those are all settings in your Admin Console.   

That is what we did in the School District Philadelphia to prevent students from using their personal Gmail accounts to get to YouTube and other apps that are blocked by the district.   

If you have any questions please feel free to email me directly. 

Thanks

Mark Willis, PMP

Senior IT Project Manager

School District of Philadelphia

(215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

Click here to 

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at help...@philasd.org.

Visit philasd.org/technology for more information.

Visit sishelp.philasd.org for SIS training resources.

This electronic message, including any attachments, constitutes information that may be privileged and confidential and is expressly for the use of the intended addressee(s) only. If you are not the intended recipient(s) of this email or have received this email in error, please notify the sender immediately and promptly destroy any record of this email. Any dissemination, copying or use of the information contained in this email or any attachment by anyone other than the intended recipient(s) is strictly prohibited.

--
You received this message because you are subscribed to the Google Groups "GEG Pennsylvania" group.
To unsubscribe from this group and stop receiving emails from it, send an email to geg-Pennsylvan...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/geg-Pennsylvania/82db67c4-bcbe-432a-817e-551416e147ecn%40googlegroups.com.

[Thomas, Ashley]

Food for thought - wouldn't it be easier/more secure to whitelist the vo-tech domain for your devices instead of having it wide open for personal accounts? This may help solve your problem. 

Ashley Thomas

Assistive Technology Specialist

Northampton Area School District

On Fri, Dec 16, 2022 at 12:04 PM Hannah Hauser <hannah...@hasdtigers.com> wrote:

[Brad Lieberman]

In the past, we also allowed students to log into their personal account after original sign-in. We discovered that by permitting that, it also gave them free reign to install whatever apps they wanted from the Google Play Store.  Once we found that out, we shut down that access.