Enrolling Chromebooks in a Google Apps domain is extremely simple, but if you’re starting fresh there are a lot of configuration settings that you’ll want to get right first time.

I won’t go through all of the options — there are far too many to list and each is well explained in the Google Apps control panel — but I will mention features I felt were most relevant to us. Each use case is different, so you may find that these don’t apply to you or that others that I’ve missed off do. Let me know in the comments!

Chromebook Wireless Network Configuration

Getting the Chromebook’s WiFi configuration correct is essential. You can, if you choose, simply set up the configuration manually on each device, but this doesn’t give much flexibility in future. Luckily the Google Apps control panel allows us to manage the Chromebook WiFI settings remotely.

Google Apps gives you a surprising number of options for configuring Wi-Fi. In many respects the GAFE control panel is a simpler and more effective way to manage device WiFi than Microsoft’s Group Policy.

How your teachers and students are using the Chromebooks will depend on how you set up WiFi. If your users will have their own dedicated Chromebook you may want to look at using WPA2 Enterprise and authenticate your users against Active Directory via RADIUS.  For more information on how to do this take a look at Google’s guide, in particular check out the “Username Variables” section.

If you just have a shared trolley of Chromebooks, the above configuration is probably not necessary. As long as you’re authenticating users further down the line, unless you’re extremely security conscious, a standard Pre-Shared Key (PSK) configuration pushed out by the Google Apps control panel is probably sufficient.

Here’s how I recommend doing it:

Create a new Organisational Unit for Your Chromebooks

The first thing you will want to do is drop your Chromebooks into their own suborganisation (Google’s equivalent of an Active Directory Organisational Unit). Doing this will allow you to manage groups of devices more effectively and apply settings in a more granular fashion.

  1. Open your Google Apps for Education control panel.
  2. Go to the Devices tab and select the top level of your domain. Any newly enrolled Chromebooks will be listed.
  3. Select the Chromebook(s) you want to move.Chromebook Management
  4. Click “Move to” and select the suborganisation that you want to move them to. You can create new suborganisations by clicking the “Add suborganisation” button. In this case my Chromebooks are going to be used within the Science department, but you may want to organise them type room name or type of user (students, teachers etc.).Chromebook Management

Configuring Chromebook WiFi Settings

Chromebooks rely on a solid Internet connection to do everything. This means that the device has to be able to connect to the WiFi before the user can logon, but once logged on we may want to, for example, switch to a different Wi-Fi network depending on whether they are a student or a teacher.

To do this we need to have two stages of WiFi authentication. One, to allow the device to connect to the Internet before the user has signed in so that Google can authenticate them, and a second to authenticate the user against our WiFi network once they have successfully logged in.

  1. Click Settings > Chrome Management > Networks
  2. Select the top level of your domain. Here we will create the first level of WiFi authentication. This policy will apply to all Chromebooks within our domain and is used by the device to connect to the WiFi network before the user logs on. Without this the Chromebook will never connect to the Internet and will never be able to authenticate users.Chrome-management-settings
  3. In the bottom pane labeled “Settings” click “Add WiFi” and enter your WiFi and proxy server configuration settings.

Once these settings have taken effect your Chromebooks will automatically connect to WiFi.

To set alternate settings based on the end user click “For Users”, select the suborganisation you want to affect, and “Add Wi-Fi” again in the same way. As with Active Directory, the closer the suborganisation on which the settings are configured is to the user the higher priority it has.

Proxy server settings can be set within either the User Settings or Networks menus.

Additional Chromebook Settings

Under the Settings > Chrome Management menu there are many additional settings that you should be aware of. Some of the options that were important for us are below.

 Chromebook Guest Mode

When a user signs into a Chromebook using guest mode,  your organisation’s policies are not applied. We disabled this option.

 Wi-Fi Username Variables

If you’re authenticating your users against RADIUS the username variable option will simplify configuration for your users.

Your Chrome devices can automatically try to connect to a secure network with the username or full email address of the currently logged-in user. Your users then only need to provide their password to authenticate. To use this feature, specify one of the following variables in the Username and/or Outer identity fields during configuration:

Show user names and photos on the sign-in screen

We disabled this option to prevent a list of previously signed-on users stacking up on the login screen.

These changes may take up to 24 hours to propagate to all users

When saving settings you are warned that “These changes may take up to 24 hours to propagate to all users”. By rebooting the machine, however, you force a policy refresh.


Finally, the thing which taught us the most about Chromebook use by far was actually buying one and using it for day to day tasks. Unless you can develop work flows and familiarlity with a new device you’re never going to be able to pass on that invaluable experience to your students.

Even if none of the advice above is relevant to you go and buy a Chromebook today and just use it!

I’ll be adding more information to this page as we learn more, but if you have your own advice please let us know in the comments![color-box rounded="false"]You may also be interested in:

Chromebook Experiment – Part 1: Purchasing

Chromebook Experiment – Part 2: Management Licenses

Chromebook Experiment – Part 3: Setting up the Chromebooks

Chromebook Experiment – Part 4: Managing Expectiations

Best Practice: Configuring Chromebook With Google Apps[/color-box]



About Author

Profile photo of Karl Rivers

Karl is an award winning Director of IT for the Royal Grammar School Guildford, based near London, England. He has been working in education for more than ten years and founded ClassThink in 2013 to share technology best practice with other schools. In 2014 he won the NAACE Impact Award for support services in schools, and writes edtech articles for Education Executive Magazine.


  1. I will be in my school next week connecting about 25 or so to the domain in apps. This really helped me out! I have been working on a Chromebook at home and am very excited about using them in school- we just set up a Chromebook Lab!

      • Thanks! I will! This may be a silly question, but we truly live on a very small budget in our school, and have been debating if it is worth purchasing an air conditioning unit for our Chromebook Lab. They typically do not generate that much heat, and our weather is very mild (Buffalo, NY). Is it truly necessary? Would you recommend it? Thanks- and this whole site has been an amazing find!

        • Profile photo of Karl Rivers

          You’re right the Samsung Chromebooks generate very little heat. I’m from the UK so our weather is probably very different, but the Chromebooks are very unlikely to need additional cooling. The room temperature is likely to become more uncomfortable for your students before the Chromebooks have a problem!

          I’m really pleased your finding ClassThink useful! That’s exactly why I started it. Please consider sharing it with anyone you think would find it helpful!

  2. Hi, We were enrolling 30 Chromebooks for one cart. When we finished only 29 were showing in the device manager. We thought we had missed one. After looking for it, we came back to the screen and only 12 were listed. The screen did show that we had used 39 licenses. We were enrolling 180 total. Do you have any idea why this is happening? Thanks.

  3. Always Looking for more info. I currently manage a 1:1 Chromebook school and believe me enrolling lots takes time. If you check around lots of GAFE Chromebook partners will white glove them for you. We are doing this on our second round of purchases for next year. They will come already enterprise enrolled, and with the latests software updates.

Tell us what you think!