5 ms·

I think GoGuardian is normally full device, but on Chromebooks it is installed via extensions. Extensions in on Chromebooks are 'user' policies so they are app

I think GoGuardian is normally full device, but on Chromebooks it is installed via extensions. Extensions in on Chromebooks are 'user' policies so they are applied to entire OUs of users. (docs here for anyone who is interested : https://support.google.com/chrome/a/answer/6177431?hl=en#zippy=%2Callow-or-block-all-apps-and-extensions-except-the-ones-you-specify https://support.google.com/chrome/a/answer/6177431?hl=en#zip...) These types of solutions are really common for schools because under CIPA you must filter your network to receive e-rate funding. Deploying it to the device meets these requirements and also extends filtering off site which is a commonly requested feature. If it is just being managed at the user level - then creating a second account is exactly the way to go.

mike_d 5y ago
^ This guy is correct. OP is vastly overstating the situation or uninformed. Unless it was school provided hardware, management is done at the account level and accounts are fully isolated. Powerwash (https://support.google.com/chromebook/answer/183084?hl=en https://support.google.com/chromebook/answer/183084?hl=en) the device, login with a personal account to make it the primary, and then login with your kids school account. Yes they will be monitored when logged in to the school account, but that is for compliance with the law. If you don't like it, write your representative.
- julian_sark 5y ago
  The article you recommend for resetting a device itself says: "If you're using your Chromebook at work or school, you can't reset it." So it likely does not apply here.
- cameldrv 5y ago
  What law are you referring to? How could a device owned by the student/parent require monitoring while not in school?
  - philamonster 5y ago
    Not the device, the student district-managed account that is logging into the device. Districts are bound by law (varying from state to state) at a basic level to filter content and restrict access in the broadest sense, on or off the district network. I've worked in multiple states for various districts they all had similar compliance requirements.
    - cameldrv 5y ago
      I don't see how the mere fact of someone being logged into a school account could create such a requirement. If I log into the school account from a normal desktop computer, I don't believe that the school even has the ability to restrict what webpages can subsequently be accessed. Is the school then failing to meet its responsibilities? If not, then how could they be required to enforce this on a chromebook that they do not own?
      - staticassertion 5y ago
        We run Chromebooks. I'm logged into one right now, on my personal account. There is no way for me, the GSuite admin of my company, to fuck with that personal account. I can't read anything from it, I can't manage it in any way, I can do nothing. Some things in the personal account aren't accessible (you can only have one account on Chromebooks with a Linux VM), that's it.
    - ccleve 5y ago
      Not true, and also not possible. If a kid or parent can log in from offsite, it is not technically possible to force all browsers or systems to monitor and restrict activity. I can log in through Firefox (or curl, for that matter) and not have my activity sent to the school. Also, there is absolutely no legal way the school could force the monitoring of activity from an offsite computer (unless it were school-owned), even if it were technically possible. To secretly and silently install spyware on a parent's computer when the parent logs into the child's account would violate so many laws and constitutional protections I can't even list them.

mike_d 5y ago

^ This guy is correct. OP is vastly overstating the situation or uninformed. Unless it was school provided hardware, management is done at the account level and accounts are fully isolated. Powerwash (https://support.google.com/chromebook/answer/183084?hl=en https://support.google.com/chromebook/answer/183084?hl=en) the device, login with a personal account to make it the primary, and then login with your kids school account. Yes they will be monitored when logged in to the school account, but that is for compliance with the law. If you don't like it, write your representative.

julian_sark 5y ago
The article you recommend for resetting a device itself says: "If you're using your Chromebook at work or school, you can't reset it." So it likely does not apply here.
cameldrv 5y ago
What law are you referring to? How could a device owned by the student/parent require monitoring while not in school?
- philamonster 5y ago
  Not the device, the student district-managed account that is logging into the device. Districts are bound by law (varying from state to state) at a basic level to filter content and restrict access in the broadest sense, on or off the district network. I've worked in multiple states for various districts they all had similar compliance requirements.
  - cameldrv 5y ago
    I don't see how the mere fact of someone being logged into a school account could create such a requirement. If I log into the school account from a normal desktop computer, I don't believe that the school even has the ability to restrict what webpages can subsequently be accessed. Is the school then failing to meet its responsibilities? If not, then how could they be required to enforce this on a chromebook that they do not own?
    - staticassertion 5y ago
      We run Chromebooks. I'm logged into one right now, on my personal account. There is no way for me, the GSuite admin of my company, to fuck with that personal account. I can't read anything from it, I can't manage it in any way, I can do nothing. Some things in the personal account aren't accessible (you can only have one account on Chromebooks with a Linux VM), that's it.
  - ccleve 5y ago
    Not true, and also not possible. If a kid or parent can log in from offsite, it is not technically possible to force all browsers or systems to monitor and restrict activity. I can log in through Firefox (or curl, for that matter) and not have my activity sent to the school. Also, there is absolutely no legal way the school could force the monitoring of activity from an offsite computer (unless it were school-owned), even if it were technically possible. To secretly and silently install spyware on a parent's computer when the parent logs into the child's account would violate so many laws and constitutional protections I can't even list them.