u/Mindless-String-4017

Greetings!

I was able to get managed browsers in google admin up and working. I had to create a token from google admin for the "managed browsers" and then add that token to intune. Since I've done that I can see my windows' devices.

Is there a way to lock down the Chrome browser with google admin. For example, on a windows device, if I open up Chrome for the 1st time, I'm able to login with a personal account or an organization account. I want to be forced to sign-in with my domain account and not to be able to add additional google profiles. I do notice that when users open up Chrome for the 1st time, they get prompted to sign-in their account. Once the user signs in, they get 2 profiles, 1 is a "work" profile and the other is their actual domain profile. Is there a way to get rid of that on the google admin side as well or is that just a chrome browser thing that I have to manually get rid of for each user.

I've went through google admin to confirm that I have secondary accounts disabled, Forced browser sign-in, multiple sign-in access blocked, as well as restrict sign-in pattern enabled with my domain. I'm not for sure if google admin has this capability or if I need to go through intune for my windows devices to enforce the Chrome browser to sign in with a domain account.

Any ideas of what I could try via the google admin console or will I need to go through intune to set this process up. I appreciate for any guidance on this.

Greetings!

To keep a long story short I'm in charge of google admin for all the Chromebooks in our district and my coworker is in charge of all intune (windows) devices in district. The issue we're having with windows devices is the Chrome browser. I explained to my coworker that intune and google admin are having conflicting settings, hence why we're having so many issues with the Chrome browser on windows devices. Some of my settings of google admin go through and other settings do not because of intune -_-

My coworker made a good point that through google admin we can't force users to sign in their organization email. We're trying to figure out the best way for staff and some students to be able to add their personal Chrome profile in their Chrome browser while ensuring our filtering is working for Personal Chrome browsers and their organization email. We currently use linewize if that helps.

Any ideas of what we could try as a school district?