You may want to restrict users from logging in using their personal Gmail IDs on school-owned Chromebooks. Personal Gmail IDs can lead to evasion of filtering and auditing of the Chromebook.

For full and further details on how to keep devices secure please see our full Chromebook Best Practice KB here.

Restricted login:

Log in to your Google Workspace account at admin.google.com
Navigates to Devices > Chrome > Settings > Device Settings
Scroll down to Sign-in Settings > Sign-in restriction
Select the 'Restrict sign-in to a list of users' configuration, enter your school domain and save.
In the text box enter the domain you want to allow sign-ins from and save. For example, *@k12publicschools.org will restrict logins to only k12publicschools.org and prevent users from signing in using their Gmail IDs.

Make sure that you do not restrict access to https://accounts.google.com/AccountChooser to allow teachers to switch between accounts and use the temporary allow sites feature seamlessly.

Securly also allows you to customize access to your personal Gmail on school devices. Click here to learn how.

How to implement sign-in restrictions for Chromebooks?