Description:
A company should be able to deploy a chrome device that should not have any identifiable information that it is corporate owned machine before a user authenticates themselves. The sign-in and lock screens should not show any personal information regarding user or domain.
Use case:
Security does not like a device to be identifiable as corporate-owned. Enrolled devices are shown as "Managed by [domain]" - we'd want a policy control to hide the domain and display "Device is enterprise-enrolled" or something similar. Policy should also control lockscreen where someone can use drop-down arrow for username to see full email and pic of user including domain (domain should be hidden). With a compromised device, we fear user intimidation or extortion.
Motivation:
With a compromised device, we fear user intimidation or extortion.
Existing workarounds:
None, except use a dummy domain which is not feasible with corporate accounts using other google services.
Comment 1 by pbond@chromium.org
, Feb 2 2017Owner: dskaram@chromium.org
Status: Assigned (was: Untriaged)