We have policies (ADM domain group policy) for student accounts that include applying ephemeral mode. For younger students (K-3) a problem arises in that we have sites that require Flash without prompting. These students are not yet capable of signing into their individual Google accounts or making setting changes themselves.
We have the default plug-ins policy set to "Allow all sites to automatically run plugins". This correctly applies as log as ephemeral mode is not applied. However this and, as far as I can tell, all other policies are all ignored if ephemeral mode is applied.
Is there a way, or is Google working on a way, to have specific settings to apply to any browser instance regardless of whether ephemeral mode is being enforced? The added security of forcing student accounts to be disconnected by simply closing the browser is welcome and has solved a plethora of issues. However, we seem to be confounded by the lack of ability to enforce other policies. Is it one or the other?
Optionally, another policy that forces accounts to disconnect but retains the user settings would help, but would not be as useful as having policies apply in normal and ephemeral modes.