Recommended Google Admin settings

When using Securly Classroom, there are certain Google Admin settings that we recommend in order to prevent students from circumventing the restrictions imposed by the extension.

Note

No firewall or port changes are necessary when setting up Securly Classroom.

For Device OUs

Adjust these settings in the OU with the student devices.

Disable Guest Mode

This setting prevents students from using Guest Mode, then logging in from the browser with a personal Gmail account.

Go to Devices > Chrome Management > Device Settings > Sign-in Settings > Guest Mode.
Set “Guest Mode” to "Disable guest mode"

Sign-in Restriction

This setting allows login only for domain accounts to prevent students from signing into Chromebooks with personal Gmail accounts.

Go to Devices > Chrome Management > Device Settings > Sign-in Settings > Sign-in restriction.
Set “Sign-in restriction” to "Restrict sign-in to a list of users" and enter *@(your domain) in the list.

Forced Re-enrollment

This setting ensures that if a device is reset, it will be forced to enroll back into your domain.
Go to Devices > Chrome Management > Device Settings > Enrollment and access > Forced re-enrollment.
Set “Forced re-enrollment” to "Force device to re-enroll into this domain after wiping". This setting might already be inherited from a higher OU level, such as your organization level.

For Student User OUs

Adjust these settings in the OU with the student user accounts.

Disable Task Manager

This prevents students from closing the Securly Classroom extension by ending the process in the Task Manager.

Go to Devices > Chrome Management > User & Browser Settings > Apps and Extensions.
Set “Task Manager” to "Block users from ending processes with the Chrome task manager”.

Prevent Incognito mode

This setting prevents students from opening incognito windows that are not managed by Securly Classroom.

Go to Devices > Chrome Management > User & Browser Settings > Security.
Set “Incognito mode” to "Disallow incognito mode".