UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36

Steps to reproduce the problem:
1. try to block all sites by device in org unit
2. does not work
3. does work for user

What is the expected behavior?
We use Chromebook and boxes in our school system.  We would like to have certain devices only have access to specific sites.  This can be done by user, but we have certain users in certain locations that need access to everything, while those same uses need very limited access depending on location within the school. We also use devices in kiosk mode and want to limit access.

What went wrong?
Can set this by user, but could really use this setting for devices.

Did this work before? No 

Chrome version: 59.0.3071.115  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 26.0 r0

Please give this special attention, since this is a setting that I have talked to others admins and they see a real use for this setting.