You can tailor settings and policies for all users and devices in your organization.
Before you begin
- You can customize settings for groups of users or devices. Simply group users or devices that have specific requirements into organizational units. Then apply relevant settings to each organizational unit. For details, see How the organizational structure works.
Set user policies
User policies are enforced anywhere your users sign in, even if the device isn't enrolled in your domain. The policies are tied to the user's profile.
Before you begin: To set policies for a specific group of users, put their accounts in an organizational unit.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Chrome
If you signed up for Chrome Enterprise Core, go to Menu
Chrome browser
-
(Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how
Group settings override organizational units. Learn more
- Configure any settings. Common customized settings include:
- Force-installed apps
- Set pages to load at startup
- Configure a proxy server
- Enable or disable printing
- Enable SAML single sign-on
For details about user and browser settings, see Set Chrome policies for users or browsers.
Set device policies
You enforce device policies on ChromeOS devices that are enrolled in your domain.
Before you begin: To make settings for a specific group of devices, put the devices in an organizational unit.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
- To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Configure any settings. Common customized settings include:
- Allow devices to enroll automatically after they’ve been wiped
- Restrict sign-in to a list of users
- Allow guest browsing
- Enable or disable device reports
- Set a time zone
Related topics
- Chrome Enterprise policy list
- Chrome policies
- Create and deploy Chrome kiosk apps
- Set ChromeOS device policies
- Set Chrome policies for users or browsers
Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.