New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 594942 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jun 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Access ti guest mode even if restricted by policy

Project Member Reported by djeche@chromium.org, Mar 15 2016

Issue description

Chrome Version: 48.0.2564.116, 49.0.2623.75
Chrome OS Version: 7647.84.0, 7834.52.0
Chrome OS Platform: Lenovo N21 Chromebook, but affects any model


Please specify Cr-* of the system to which this bug/feature applies (add
the label below).

Steps To Reproduce:
Steps to Reproduce: 
1. They do ESC + REFRESH + POWER 
2. As Forced Re-enrollment is set, the error message that developer mode is disabled comes up. 
3. After the semi wipe, select the network in the Welcome Screen, and click on continue. 
4. As soon as they click on "Accept Terms and Conditions", they turn OFF WiFi. 
5. They have the offline dinosaur picture and a message: "Your Chromebook is unable to connect to the internet. Please choose another network. You can also try to 'Browse as Guest’ to fix this error. 
6. They Click on 'Browse as Guest' and sometimes have full access to the internet, sometimes they have an error: "Web Page Blocked. Enrollment process is missing". 
* It is important to note that this issue is not reproducible 100% of the times. Students keep on wiping the devices until they successfully get the ‘Browse as Guest’ option. This option is disabled by default when Forced-Re-enrollment is set, and Guest Mode is disabled for the devices. In this case, Guest Mode is disabled domain wide for this account. 


Expected Result: 
When chrome is force enrolled into a domain with no guest mode allowed, it should prevent user's from not using guest mode even if the device is wiped.  

Actual Result:
Student's are able to access guest mode on the device and gain full browsing privileges.

How frequently does this problem reproduce? 

It will be really difficult to fix it, as this is something that’s not reproducible 100% of the times, and it is really difficult to get "browse as guest" prompt. Students are stubborn to keep on doing it even if advised not to do it.


What is the impact to the user, and is there a workaround? If so, what is
it?

No particular work around. The problem is that it allow's student's full access to browser from a guest mode session.

Please provide any additional information below. Attach a screen shot or
log if possible.

Video & device logs demonstration: https://drive.google.com/a/google.com/folderview?id=0B9BQIK7d0CYNcWhiMmIyZjJpUDg&usp=sharing

 
I took a look at the video demonstration, and everything shown is working as intended.

Before FrE check is completed, we allow access to a guest session if and only if there was a network issue completing the check (since OOBE is blocked until FrE check is completed). However, all browsing in guest mode is blocked as it is meant only to be used for network diagnostic tests (to determine what the network issues are and to collect logs).

Do you have a video demonstrating a device with FrE enabled that is allowing browsing in guest mode before the FrE check is complete? Your repro steps suggest that happened, but I don't see it in the video and can't repro myself on test devices.

Comment 2 by autumn@chromium.org, Mar 28 2016

Labels: -Infra-ChromeOS

Comment 3 by jayhlee@google.com, Jun 28 2017

Status: WontFix (was: Untriaged)
WAI.

Sign in to add a comment