New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 896442 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Nov 19
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Devices with force-enrollment do not re-enroll automatically

Project Member Reported by vkasatkin@google.com, Oct 17

Issue description

ChromeOS version: 69.0.3497.95, 71.0.3578.8
ChromeOS device model: Pixelbook, Lenovo N22 (Reks)
Case#: 17167999

Description:
Wiped or recovered devices with force-enrollment do not re-enroll automatically to a domain when they connect to a network.


Steps to reproduce: 

1. Enroll a device to a domain 
2. Wipe device via Esc-Refresh-Power 
3. Make sure Developer mode is disabled:
https://drive.google.com/open?id=1g0sUiPOzsRB8RsUH7dniDhK1WAxlI3d6
4. Once the network is selected, we are immediately shown the enrollment screen, where user name is required 

Current Behavior / Reproduction: 
User credentials are required for re-enrollment 

Expected Behavior: 
Re-enrollment should be performed automatically 

Drive link to logs: 
https://drive.google.com/corp/drive/folders/1PPhUjzjWzFQahSvMaDUEBzP3iDpDCbo8
Video reproduction of the issue:
https://drive.google.com/open?id=1VYhqJiNd_Yy8QbbgcsFHGlGJ3ozr1PBt

 
Another customer reports similar issue with Asuka devices, case 17215590
Case owner for 17215590, the customer reported that in addition to happening with Asuka devices, it's also happening with Chrome OS 69 Acer Chromebooks.
Labels: Enterprise-Triaged
Owner: marcuskoehler@chromium.org
Cc: poromov@chromium.org
poromov, who shall have a look here?
Cc: pmarko@chromium.org marcuskoehler@chromium.org
Owner: igorcov@chromium.org
Cc: igorcov@chromium.org
Owner: drcrash@chromium.org
+Yves to clarify current server-side behavior

I think the client side is behaving as expected, receiving the "force re-enrollment" signal (not automatic re-enrollment) and acting upon it.

However, IIRC we may have stopped (parts of) auto-enrollment server-side as a response to issues with attestation which were suspected to be related. Yves, is that the case or am I confusing things?
Yes, AFAIK Yves disabled the auto-re-enrollment on server side for now.
Hello team,

I would just like a clarification about auto-enrollment being disabled on the server side. Is it disabled globally? Because I have a customer telling me other schools in his district have auto-enrollment working at the moment.
It is disabled globally except for some test domains. None of those should
be schools. Can you ask for the domain of the school, and if you can a
picture from a device showing the auto re-enrollment confirmation screen
(or whatever you think you can ask them to make sure they are not confused
about auto re-enrollment being on).

On Tue, Oct 30, 2018, 22:48 mventura via monorail <
monorail+v2.811859063@chromium.org wrote:
Status: WontFix (was: Untriaged)
See #9
Our district looks forward to this feature working. It will save us tons of time. Students have discovered how to power wash and we have to go out to the school site and connect the Chromebook to the network and then enroll just to have the student to get back into the Chromebook. :-)
Owner: naveenv@chromium.org

Sign in to add a comment