New issue
Advanced search Search tips

Issue 714163 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Jul 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Want to limit ability to reinstall ChromeOS and have an unmanged Chromebook

Reported by tstud...@west-branch.k12.ia.us, Apr 21 2017

Issue description

UserAgent: Mozilla/5.0 (X11; CrOS x86_64 8872.76.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.105 Safari/537.36
Platform: chrome://version

Steps to reproduce the problem:
1. Boot to USB and reinstall ChromeOS
2. Have a Chromebook that doesn't have policy's applications installed
3. 

What is the expected behavior?
I see that under Device Mangement | Chrome Management | User settings there is the ability to disable USB/other storage.  The problem is that the user would have to be logged in for this policy to apply.  Can that option be applied to the Device instead?

What went wrong?
Feature is not under Device settings (it's in user settings), so a user could reboot to flash by Esc + Refresh + Power without being logged in.  Then they could reinstall ChromeOS and have a device that isn't getting policies/software applied.  If the Disable USB/other storage was applied to the device itself, they would be prevented from reinstall and bypass of policies.

Did this work before? N/A 

Chrome version: 55.0.2883.105  Channel: stable
OS Version: 8872.76.0
Flash Version: Shockwave Flash 24.0 r0
 
Labels: Enterprise-Triaged
Owner: dskaram@chromium.org
Owner: maxkirsch@chromium.org
Hmm, I'm sure you can lock down the device by setting Force Re-enrollment in Device Settings so this scenario should not be possible. +Max to dig deeper and see if there's any policy escape scenario here.
Here's information on forced re-enrollment: https://support.google.com/chrome/a/answer/6352858

Please let me know if you are able to bypass this.
Status: WontFix (was: Unconfirmed)
Given lack of response to #3, closing this bug.

Sign in to add a comment