force chrombook to use domain login and other questions

[Bjorn Behrendt]

Is there a way I can restrict the managed chromebook to only login accounts from my domain @msjvermont.org.    If so is there a way I can set it so that students don't have to type in their full email address and just their username.

other Q's?

1. For a 1:1 where students are assigned a specific machine and they are taken home are people letting the students be the first login which becomes the master one that cannot be deleted without a wipe, or are people using one set up by the administrator?   I want to use the show pictures option so students don't have to type their usernames but then it always shows the tech user that I first logged in as.   If I let the student log in first then they become the master.   I am not to worried since they are easy to wipe but I am just trying to establish a best practice.    

Bjorn Behrendt M.Ed ~ Never Stop Learning

   b...@askbj.net | (802) 772-0003

   Google Apps For Education Certified Trainer

My Sites

 ~ Edlisten.com

      ~ Google Weekly ~ 39: Ericom an alternative to Citrix   (8/2/2012)

      ~ Teaching Change ~ 3: Transferring Google Docs (6/4/2012)

 ~ AskBj.net ~ Online Training and Ed Tech Resources

 ~ VTed.org ~ Vermont's Personal Learning Network

Get The Year Started With Google Apps 3 credit course Aug 13-17: http://getgoogle.edlisten.com

[Joel Lowsky]

Hi BJ,

I haven't found a way yet to allow users to login with just their username (without the @domain part), but you can limit sign-in's to just your users by putting *@domain.com in the "Restrict sign-in to list of users" box on Device Settings, in Chrome OS, within the admin panel.  (You can also whitelist non-domain addresses here too, as I have I done).  See the screenshot below:

--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en

--
Joel Lowsky
Director of Technology
North Country School and Camp Treetops
(518) 523-9329, ext. 5406
4382 Cascade Road
Lake Placid, NY, 12946
www.ncstreetops.org

[Nic Finelli]

Bjorn,

I think it is a best practice to save time and give you control if you need to touch a computer without having to wipe it clean if you set up the admin as the first login (master).  As far as only allowing @msjvermont.org to be the only login can be done in the Chrome OS Settings in your admin control panel.  <Settings>, <Device Settings>, <"Restrict sign-in to list of users  box> -Enter a comma-delimited list of usernames who can sign in to the device. Wildcards (*) are allowed.

*@msjvermont.org

This should work.  Here is a screenshot.

[Nic Finelli]

Once the user has logged in, their icon should display (if allowed) and only a password would then be needed for each time they use the Chromebook.

[Bjorn Behrendt]

Thank you everyone for your help on this.  I thought I would just recap what I learned.

1. Restricting to just a domain is easy from the dashboard the syntax is *@domain.com
2. A chrombook that is managed has no master/owner account.  It is possible to delete the account that first logs into chromebook after being attached to the domain.   If you are using the picture login method add a second account to log in.  Then at the picture login screen hover over the picture and click the x.  Even if it was the first person to log in the account will go away.  I do believe that the users data will still be present until disc space is gets low then ChromeOS will automatically delete the local files of the old profile (like local pictures).
3. So the method I am planning to follow is to turn on the chromebook and attach it to the domain, but let the students be the initial person to logon.  I will either wipe or just delete the initial user if the chromebook needs to be repurposed.

Bjorn Behrendt M.Ed ~ Never Stop Learning

   b...@askbj.net | (802) 772-0003

   Google Apps For Education Certified Trainer

My Sites

 ~ Edlisten.com

      ~ Google Weekly ~ 39: Ericom an alternative to Citrix   (8/2/2012)

      ~ Teaching Change ~ 3: Transferring Google Docs (6/4/2012)

 ~ AskBj.net ~ Online Training and Ed Tech Resources

 ~ VTed.org ~ Vermont's Personal Learning Network

Get The Year Started With Google Apps 3 credit course Aug 13-17: http://getgoogle.edlisten.com

On Thu, Aug 9, 2012 at 9:34 AM, JP Connolly <jpcon...@saintannsny.org> wrote:

You can restrict the domain logins easily: see attached screenshot. It's in the Device Settings tab. That said, since people need to login with a full Google account name, I don't think you can have them omit their domains in their usernames. 

Also, managed Chromebooks should not have a "master" user or account - this only happens if you log in to the device before enrollment. If you enroll the device, all users that login are just users that have logged in. I'd wipe/restore the device, re-enroll (control+alt+e the very first time the login screen comes up before logging in, then use domain super admin account to log in, and you're all set), and then you can remove any users from the login screen to just leave the student. You'll want to make sure guest mode is also disabled, even though there was a ChromeOS bug where the guest icon was still showing up for us for some reason, even though it was inactive. 

Best,

JP

On Thu, Aug 9, 2012 at 9:14 AM, Bjorn Behrendt <b...@askbj.net> wrote:

--
JP Connolly
Director of Technology
Saint Ann's School

129 Pierrepont St.
Brooklyn, NY 11201

718.522.1660