Considering this issue as Feature-Request and marking it as untriaged, so that it will be addressed to dev team for further assistance.

Thanks!

[mac triage]

Feature request --> dskaram@

Just to understand the ask

Device enrolled in school.edu.
User policies applied on users from school.edu

Personal users signs in to the managed device

Expectation is that user policies are applied on the personal user's session?

I imagine having generic User Settings in user OU and having custom User Settings in device OU so that only managed devices in device OU get User Settings from the same OU.

OK so I think we are on the same page. Unfortunately, there is a very clear user and device separation in Chrome OS. We allow admins to turn off personal usage by restricting sign in to non-managed users. But if admins make the decision to indeed allow unmanaged users on the device, then we don't give them the ability to apply any management to those users.

If admins are uncomfortable with unmanaged users, then they should turn that feature off. If they want to allow it, then it's a fully unmanaged session. We are very unlikely to change our stance on this issue.