Want to limit ability to reinstall ChromeOS and have an unmanged Chromebook
Reported by
tstud...@west-branch.k12.ia.us,
Apr 21 2017
|
|||
Issue descriptionUserAgent: Mozilla/5.0 (X11; CrOS x86_64 8872.76.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.105 Safari/537.36 Platform: chrome://version Steps to reproduce the problem: 1. Boot to USB and reinstall ChromeOS 2. Have a Chromebook that doesn't have policy's applications installed 3. What is the expected behavior? I see that under Device Mangement | Chrome Management | User settings there is the ability to disable USB/other storage. The problem is that the user would have to be logged in for this policy to apply. Can that option be applied to the Device instead? What went wrong? Feature is not under Device settings (it's in user settings), so a user could reboot to flash by Esc + Refresh + Power without being logged in. Then they could reinstall ChromeOS and have a device that isn't getting policies/software applied. If the Disable USB/other storage was applied to the device itself, they would be prevented from reinstall and bypass of policies. Did this work before? N/A Chrome version: 55.0.2883.105 Channel: stable OS Version: 8872.76.0 Flash Version: Shockwave Flash 24.0 r0
,
May 10 2017
Hmm, I'm sure you can lock down the device by setting Force Re-enrollment in Device Settings so this scenario should not be possible. +Max to dig deeper and see if there's any policy escape scenario here.
,
May 10 2017
Here's information on forced re-enrollment: https://support.google.com/chrome/a/answer/6352858 Please let me know if you are able to bypass this.
,
Jul 6 2017
Given lack of response to #3, closing this bug. |
|||
►
Sign in to add a comment |
|||
Comment 1 by pelets...@chromium.org
, May 10 2017Owner: dskaram@chromium.org