Google Admin Console Recommendations

IT support can implement Google Admin Console policies to prevent students from discovering loopholes that stop the Connect for Chrome extension from working properly.

Blocking all but allowing specific extensions

By default, students can install any extensions onto their browser. This means they can download VPN extensions that allow them access to blocked content.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Additional settings.
2. Search for Allow/block mode.
3. Select Edit.
4. Under Play Store and Chrome Web Store, select Block all apps, admin manages allowlist.

5. Select Save.

Disallowing incognito mode for students

By default, students can use incognito mode. The browser may not load all the extensions, including Connect for Chrome.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Incognito mode.
2. Search for Incognito mode.
3. Select Disallow incognito mode.

4. Select Save.

Preventing students from using Chrome task manager to end processes

Students can use the Chrome Task Manager to end processes, including the Connect for Chrome extension.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Task manager.
2. Search for Task manager.
3. Set the policy to Block users from ending processes with the Chrome task manager.

4. Select Save.

Preventing students from using developer tools to end processes

Students can use the Developer Tools to inspect and end processes, including the Connect for Chrome extension. It’s important to note that this tool may be valuable to your school's Coding or Computer Science classes. At a minimum, we recommend disabling the use of Developer Tools for force-installed extensions, however you have the option never to allow the use of Developer Tools.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Developer tools.
2. Search for Developer tools.
3. Set the policy to Allow use of built-in developer tools except for forced installed extensions.

4. Select Save.

Forcing students to log in to the Chrome Browser by default

By default, students can log in to other Google Accounts within the Chrome Browser. This can help students to avoid visibility.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Browser sign-in settings.
2. Search for Sign-in settings.
3. For Browser sign-on settings, select Force users to sign in to use the Browse.

4. Select Save.

Disabling multiple sign-in access

By default, students can log in to the Chrome Browser using multiple accounts without having to sign out and sign back in. This can prevent the Connect from Chrome extension from syncing properly.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > User experience.
2. Search for Multiple sign-in access.
3. Select Block multiple sign-in access for users in this organization.

4. Select Save.

Disabling Browser Guest Mode

Students can log in via Guest Mode, which may avoid visibility.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Browser guest mode.
2. Search for Browser guest mode.
3. Set the policy to Prevent guest browser logins.

4. Select Save.

Preventing students from using bookmarklets

Bookmarklets are bookmarks stored in a web browser that contain JavaScript commands that add new features to an existing browser. Students can configure the Bookmarklets to avoid the Connect for Chrome extension from working correctly.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > URL blocking.
2. Search for URL blocking.
3. Enter javascript://*

4. Select Save.

Shared Devices and Ephemeral Mode

This policy can be beneficial if your school has shared devices. Ephemeral mode ensures that user data is not stored locally when the user logs out, preventing Chrome Browser caching overload, which can impact negatively on extension installation for new users logging in.

1. Go to admin.google.com > Devices > Chrome > Settings > Users & browsers > Force ephemeral mode.
2. Search for Ephemeral mode.
3. Set the policy to Erase all local user data.

4. Select Save.