As an administrator, you can find details about the ChromeOS devices in your domain in the Google Admin console. To view the device list page, go to Menu DevicesChromeDevices. Click the serial number of any device to view device details. You can also create organizational units to apply settings to different groups of devices.
Before you begin
Reporting policies
To view all the new notifications, dashboards, and device details attributes, turn on all the reporting policies in the Admin console.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu DevicesChromeSettingsDevice settings.
- Scroll down to User and device reporting.
- Turn on each the following settings:
- Report device OS information
- Report device hardware information
- Report device telemetry
- Report device user tracking
- Report kiosk session status
Admin privileges
Role privileges determine what information an admin can access in the Admin console, as well as what tasks they can perform.
To view Chrome reports and manage ChromeOS device settings, assign the desired role privileges.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
- Go to Menu Account > Admin roles.
- Click the role you want to assign. Alternatively, you can create a new role.
- Click Privileges.
- Scroll down to Chrome ManagementView Reports and select these checkboxes:
- View Chrome Versions Report
- View Insights Report
- Scroll down to Manage ChromeOS Devices and select these checkboxes:
- ReadTelemetry API
- Manage ChromeOS Device Settings
ChromeOS device list
The ChromeOS device list page has two tabs:
- Devices—Includes the notifications module and the list of devices.
- Dashboards—Displays aggregated insights into your device fleet through various dashboard.
When you switch between organizational units, the displayed device count and dashboard information dynamically updates to reflect the selected organizational unit. To maximize the use of the dashboards, turn on the reporting policies.
Devices tabNotifications module
The notification module at the top informs you about devices that require your attention, in addition to your ChromeOS device list page. Depending on the number of devices, it might take some time for the notifications to load. The percentage of the device fleet that requires attention is calculated based on the total number of devices in the selected organizational unit.
Device notification | Description | |
---|---|---|
Category | Title | |
OS | OS version isn't compliant | Devices' OS version isn’t compliant with the OS version specified by organization's policy. |
Developer boot mode turned on | The device's developer hardware switch is turned on. When booted, the device has a command line shell. | |
OS version update pending | Devices where the OS has not started downloading, the download is in progress, or the device needs a reboot to finish the upload. | |
Auto updates support ends 6 months | Device will no longer receive updates from ChromeOS. | |
Eligible for extended support 28d | Devices that are eligible for extended support and require opting into the policy. | |
Status | Kiosks offline | Kiosk devices that haven't had a heartbeat signal for an amount of time. The kiosk heartbeat is checked every 2 minutes. If a device goes offline, it can take up to 12 minutes for the online status of the device to be updated. |
Policies | Policies ineligible to be applied |
Devices with policies that could not be applied to a device due to the policy not supporting the OS version of the device. For example, when a policy has a minimum supported ChromeOS version of 96, but the device is on ChromeOS version 90, you must update the device to version 96 or later before you can apply the policy. |
Device list page - Columns
On the ChromeOS device list page, the following columns display for each of your users’ ChromeOS devices. You can click the Manage columns icon to select which columns display by default.
Field | Description |
---|---|
Serial number | Device serial number. Click Serial Number to see general information about the device. To see the serial number before signing in to the device, press Alt+V. |
Status | Displays whether or not the device is in use, for example Provisioned or Deprovisioned. |
Asset ID | The administrator-annotated asset identifier. To see the ID and the ChromeOS version number, press Alt+V before signing in to an enrolled device. You can also see the ID on the chrome://policy page. You can update this field manually in the Custom fields section or during enrollment with the Asset identifier during enrollment feature. |
Online Status | A green circle means that the device is online and working correctly. Learn more about device states. This field only applies to organizational units that are set up to contain auto-launched kiosk devices. |
Enrollment time | Date and time the device was registered with your domain. |
Last policy sync | Date and time the device was last synchronized with the policy settings in the Admin console. |
User | Initially populated with the user who first enrolled the device. You can edit the field after auto population. |
Location | Address or location of the device. You can edit this field. |
Notes | Used for special information about a device. You can use this field to customize searches. |
OS version policy compliance |
Indicates whether the device's OS version is in compliance with the OS version specified by your organization's policy. Value is checked and updated every 3 hours. Possible values:
|
Exporting a list of devices
You can export a list of your ChromeOS devices as a CSV file. The maximum number of devices that you can export to CSV is 100,000.
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
From the Admin console Home page, go to Menu DevicesChromeDevices.
- To show all devices, on the left, click All devices. Otherwise, select a child organizational unit.
- (Optional) Apply filters to search for specific devices. For details, see Filter by status.
- At the top, click Export.
A link appears in the top right, under Your tasks. - Click Download CSV.
- Use Google Sheets, or your preferred spreadsheet software, to open the CSV file. For details, see Import data sets & spreadsheets.
The following attributes are included in the CSV file when you export the device list:
Name | Description |
---|---|
deviceId | Device ID. |
serialNumber | Serial number. |
model | Hardware model. |
lastPolicySyncMs | Last recorded date (UNIX Epoch time, milliseconds) that device synchronized with policy settings. |
osVersion | ChromeOS version. |
orgUnitPath | Organizational unit. |
provisionStatus | Provisioning status. |
annotatedAssetId |
Custom field: Asset ID. Size limited to 1KB. |
annotatedUser | Custom field: User. |
annotatedLocation |
Custom field: Location. Size limited to 1KB. |
annotatedNotes |
Custom field: Note. Size limited to 1KB. |
ethernetMacAddress | Ethernet MAC address. |
macAddress | Wi-Fi MAC address. |
autoUpdateExpiration | Date when the device stops receiving automatic updates, determined by the Auto Update policy. |
meid | Mobile equipment identifier. |
eid | The eSIM chip’s hardware identifier. You will see the EID column only if devices with eSIM are enrolled. |
eUICC ID | Embedded universal integrated circuit card identifier, if available. |
platformVersion | Platform version. |
firmwareVersion | Firmware version. |
lastDeprovisionMs | Last recorded date (UNIX Epoch time, milliseconds) that device was deprovisioned. |
deprovisionReason | Reason why device was deprovisioned. |
mostRecentActivity | Last recorded date (UNIX Epoch time, milliseconds) of the most recent device activity and duration of session (in seconds). |
mostRecentUser | The latest user’s user ID. |
wifiSignalStrength | Wi-Fi signal strength (dBm). |
volumeLevelPercent | Volume level (as a percentage). |
cpuUtilizationPercent | CPU in use (as a percentage). |
memoryUsageByte | Memory in use (bytes). |
diskSpaceUsageByte | Disk space in use (bytes). |
kioskApp | Kiosk app ID and version. |
lanIpAddress | LAN IP address. |
wanIpAddress | WAN IP address. |
lastIpAddressUpdateMs | Last recorded date (UNIX Epoch time, milliseconds) that LAN and WAN IP addresses were reported. |
bootMode | Boot mode. |
tpmFirmwareVersion | Trusted Platform Module (TPM) firmware version. |
Note: No values are exported for lastReportMs and manufactureMs, even though they appear in the CSV file and spreadsheet.
You can click the charts and select Inspect to filter the device list.
Device dashboard | Description |
---|---|
Device models | Displays the number of devices and percentage distribution of a given model. |
Devices - Provisioning status |
Displays the number of devices and percentage distribution of ChromeOS devices that are:
|
Operating Systems - Versions |
Displays the number of devices and percentage of fleet that has:
The chart also displays the top 4 OS versions with highest number of devices, and then others. For example:
|
Operating Systems - Release channels |
Chrome device OS release channel information:
|
Automatic updates until |
The number of devices receiving their last automatic update in each month of the selected time frame. To view devices that can't receive updates anymore in a specific month, click a column in the report. To see a breakdown by device model, point to a column. |
Kiosks |
A pie chart displaying online status of kiosk devices in the organizational unit. It only displays if you have Kiosk devices in the selected organizational unit.
|
On the Devices page, click the heading of a column to sort by different criteria. You can apply filters to search for specific devices.
Filter by notifications
You can filter a device list by clicking a notification. To view information on resolving a notification, click the information icon in the notification card.
Search for devices
- (Optional) To search all organizational units, on the left, click All devices.
Note: For delegated admins, clicking All devices lists only the devices from organizational units that the delegated admin has access to. - Click Search or add a filter and select the field to search.
- Enter your search criteria and click Apply.
- (Optional) To search multiple fields, add a filter for each field, enter search criteria, and click Apply.
Filter by status
You can filter the devices to see all that are provisioned, deprovisioned, disabled, or suspended.
- On the main listing page, click Status.
- From the menu, select a status and click Apply.
You can see all devices that have the specified status. You can also view all devices.
Search within a specific field
To search only in a specific field (for example, to search for a specific user), you add a filter for that field and enter search criteria.
Filters for the fields User, Location, Notes, and Model return only strings that contain the exact word you entered in the search criteria. For example, if some devices have the value tasty applepie and you enter apple in the filter, no device is returned. If you enter tasty all tasty applepie devices are returned. Symbols and punctuation marks are treated as spaces. For example, searching for [email protected] is the same as searching for admin example com.
Filters such as Asset ID, Serial number, and Chrome version perform a real substring partial matching search when the user enters 2 or more characters. For example, to search for the version number 102.0.5005.20, enter 5005.
Use the following guidelines for each field.
Filter value | Description |
---|---|
Serial Number |
Enter the serial number of the device that you’re searching for and click Apply. For example, to search for the 12345abcdefg serial number, enter 12345abcdefg. Partial serial number searches are supported, as long as you enter at least 3 characters in the serial number. |
Asset ID |
Enter the asset ID. For example, to match the partial asset ID 1234, enter 1234. |
Enrollment time |
To view devices that were enrolled with the management server between a specified range of days, enter a start and end date and click Apply. |
Last policy sync |
View devices by when they last synced with Google's device management server. To search a specified date range, enter a start and end date and click Apply. To see the devices that synced on a specific day, enter the same day in both fields. |
User | Enter a username and click Apply. For example, if you enter Tom Sawyer, the search returns all devices where the username includes Tom or Sawyer. |
Location |
To view all devices at a single location, enter the location and click Apply. For example, to match Seattle, enter seattle. |
Notes | To search for devices with a specific note assigned to them, enter text that you expect to find in the note. For example, to match loaned from John, enter loaned from john. |
Model | Enter the model name. For example, to match the partial model name Google Pixelbook Go, enter pixel. |
Last user activity | To view devices that were last used within a specific timeframe, enter a start and end date and click Apply. |
OS update status | Displays the OS update status of devices. For example, select Download not started to view devices that have not started downloading an update. |
OS version compliance | Displays the OS version compliance of devices. For example, select Not compliant to view devices that have not downloaded the latest OS version. |
OS policy support status | Displays the OS policy support status of devices. For example, select All policies supported to view devices that support all of your organization's applied policies. |
Upgrade type | Displays devices based on the type of upgrade they're enrolled with. You can choose to view Enterprise/EDU Upgrade (standalone), Enterprise/EDU Upgrade (bundled), and Kiosk & Signage Upgrade (standalone). |
Chrome version |
Enter the version number of the device that you’re searching for and click Apply. For example, to search for the version number 102.0.5005.20, enter 5005. Partial version number searches are supported, as long as you enter at least 2 characters in the version number. |
Auto-update until | Displays devices based on their auto-update until date, as determined by the Auto Update policy. For example, you can search for devices whose automatic updates will stop within the next 3 months by selecting In the next 3 months and clicking Apply. |
Recent user | Enter a user’s email address as the argument. For example, to search for all devices that [email protected] recently signed in to, enter [email protected] or admin. |
WiFi MAC Address | Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for devices with WiFi MAC 6C:29:95:72:4C:50, enter 6c2995724c50. |
Ethernet MAC Address | Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for the device(s) with Ethernet MAC E8:EA:6A:15:79:81, enter e8ea6a157981. |
Device details
Click the serial number of any device to see device details. On the left, you can choose to move, disable, deprovision, clear user profiles, or remotely access a device. If the device is an autolaunched kiosk, you can also choose to reboot, capture logs, take a screenshot, set the volume on the device.
View device detailsIf you haven’t turned on the reporting policies, a few of the attributes might be missing. To view all the important device details, turn on the reporting policies.
You can also use the following settings to remotely monitor devices. For details on monitoring kiosks, see Monitor kiosk health.
Device detail | Attribute description | ||
---|---|---|---|
Tab | Card | Attribute | |
General | Basic info | Hardware model |
Make and model of the device. For example: Google Pixelbook Go. |
Serial number | Device serial number. | ||
Upgrade type |
Specifies whether the device is a ChromeOS device bundled with a Chrome Enterprise upgrade or a standalone ChromeOS device with an upgrade:
|
||
Management mode |
Enrollment type of the device. For example: Enterprise enrollment. |
||
Directory API ID | Unique Directory API ID of the device. | ||
TPM firmware version | Version of the device Trusted Platform Module (TPM) firmware. | ||
Form factor |
Physical specifications of the device’s components. For example: Clamshell. |
||
ChromeOS type | Device is either ChromeOS or ChromeOS Flex. | ||
Custom fields (editable fields in the Admin console) |
Asset ID | Unique ID of the device. | |
User | Username that first enrolled the device to the domain (automatically populated). | ||
Location | Address or location of the device. | ||
Notes | Used for special information related to a device. You can use the information later when searching for devices. | ||
Systems and activity | Recent users and activity |
Shows activity on the device, when it was last used To see recent activity info, you need to turn on device state reporting. For details, see User and device reporting. Lists the last users of the device. Kiosk and guest sessions are not reported. Email addresses for unmanaged users are not displayed. Instead, they display as User not managed by your organization. To see recent users info, you need to turn on tracking recent device users. For details, see User and device reporting. Only keeps the 100 most recent users. |
|
Recent device events in the last 28 days |
Provides a prefiltered list of device events captured in Chrome log events. You can change the selection of events by modifying the filter. For more information on available events, |
||
Recent system logs |
Shows automatically captured logs from devices (captured and uploaded every 12 hours). To view admin-generated logs, click Export Logs. To view and download logs, turn on Device system log upload in the Admin console (Devices > Chrome > Settings > Device settings > User and device reporting). Note: Logs are stored for a maximum of 60 days. Only the latest 100 logs are available to download. |
||
Last enrolled | Date and time the device was last enrolled. | ||
First enrolled | Date and time of the first time the device was enrolled. | ||
Groups | Direct group memberships | Table to view the group memberships of a specific device. | |
OS | Operating systems info | OS version |
Current OS version on the device. Next to the OS version, there is an icon that display version compliance.
|
Last OS update | Timestamp of the last successful update. | ||
OS update status |
Current update status. Possible values include:
reporting. For details, see User and device reporting. |
||
Boot mode | Specifies whether the device is in developer mode or secure mode. | ||
Channel version | OS version of the target device set by your organization’s policy. | ||
Firmware version | Version of the device firmware. | ||
Platform version | ChromeOS version of the device. | ||
Automatic updates | Automatic updates until | Indicates when extended automatic updates stop, as determined by the Auto Update policy. | |
Extended support | ChromeOS devices receive OS updates for 10 years after a device platform is first released. Most devices update automatically, but for a subset of older devices, an administrator must opt in to extended updates to receive the full 10 years of support. For details, see Extended updates support. | ||
Boot performance | Last boot-up duration (in seconds) | Total time to boot-up. | |
Last boot-up | The timestamp when power came on last. | ||
Last shutdown |
The timestamp of last shutdown and reason for shutdown.
|
||
Hardware | Storage | Storage usage |
Percentage of storage used. Total storage used and available. |
Disk serial number | Serial number of the storage disk on the device. | ||
Disk model | Model name of the storage disk on the device. | ||
Disk type |
Type of the disk. For example: eMMC/NVMe/ATA/SCSI. |
||
Disk volume ID | Name given to an optical volume when disk is created or initialized. | ||
Memory | Memory usage |
Percentage of memory used. Total memory in use and available. |
|
Encryption state |
The state of memory encryption on the device. MEMORY_ENCRYPTION_STATE_UNSPECIFIED—Memory encryption state is not set. MEMORY_ENCRYPTION_STATE_UNKNOWN—Memory encryption state is unknown. MEMORY_ENCRYPTION_STATE_DISABLED— MEMORY_ENCRYPTION_STATE_TME—Memory encryption on the device uses total memory encryption. MEMORY_ENCRYPTION_STATE_MKTME—Memory encryption on the device uses multi-key total memory encryption. |
||
Encryption algorithm |
Memory encryption algorithm. MEMORY_ENCRYPTION_ALGORITHM_UNSPECIFIED—Memory encryption algorithm is not set. MEMORY_ENCRYPTION_ALGORITHM_UNKNOWN—Memory encryption algorithm being used is unknown. MEMORY_ENCRYPTION_ALGORITHM_AES_XTS_128—Memory encryption algorithm is using the AES_XTS encryption algorithm with a 128 bit block cypher. MEMORY_ENCRYPTION_ALGORITHM_AES_XTS_256 |
||
Number of page faults | Number of page faults when the latest memory status report was sampled. | ||
Max encryption keys | Maximum number of keys that can be used for encryption. | ||
Encryption key length | Length of the encryption keys. | ||
CPU | CPU utilization | How much CPU (%) the device is using. | |
CPU model | CPU model name. For example: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz. | ||
CPU temperature |
Average temperature. Temperature of each CPU core, in Celsius. |
||
Architecture | CPU architecture. | ||
Max clock speed | Max CPU clock speed in kHz. | ||
CPU sample frequency |
Frequency of report sampling. Duration in seconds, with up to nine fractional digits, ending with 's'. Example: 3.5s |
||
Key locker supported | Specifies whether Key Locker is supported. | ||
Key locker configured | Specifies whether Key Locker is configured. | ||
Battery | Battery charge | Percentage of the battery charge. | |
Battery manufacturer | Manufacturer of the battery. | ||
Battery serial number | Serial number of the battery. | ||
Battery health | Percentage calculated by full charge capacity/design capacity. | ||
Cycle count | Number of times a battery can be depleted and recharged before its full capacity begins to degrade. This number varies depending on the type of battery and how it's used. | ||
Discharge rate | Battery discharge rate measured in mW. Positive if the battery is being discharged, negative if it's being charged. | ||
Battery temperature | Temperature in Celsius degrees. | ||
Current | Battery current (mA). | ||
Status | Battery status read from sysfs. Example: Discharging. | ||
Voltage | Battery voltage (millivolt). | ||
Manufacture date | Date of battery manufacture. | ||
Technology | Technology of the battery. Example: Li-ion | ||
Minimum output voltage | Minimum output voltage (mV) designed. | ||
Design capacity | Design capacity (mAmpere-hours). | ||
Full charge capacity | Full charge capacity (mAmpere-hours). | ||
Displays | Displays connected |
Total number of displays connected. Table to view display info. |
|
Touchscreens connected |
Total number of touchscreens connected. Table to view touchscreen info:
|
||
Graphics adapter | Adapter name. Example: Mesa DRI Intel(R) UHD Graphics 620 (Kabylake GT2). | ||
ePrivacy status | Specifies whether the ePrivacy screen is supported or not (True/False). | ||
GPU driver version | Version of the GPU driver. | ||
Graphics card device ID | Specifies the graphics card device id. | ||
Audio |
Audio output |
Audio output name.
|
|
Audio input |
Audio input name.
|
||
Volume level | Volume level of the devices. | ||
Peripherals | Peripherals connected |
Number of USB peripherals connected. Table to view connected peripherals info. Includes both internal and external USB connections. |
|
Thunderbolt ports | Table that lists the security level of the thunderbolts. | ||
Network | Network status | Network connection type |
Possible values:
|
LAN IP address | LAN (Local Area Network) IP address is a set of numbers that helps to identify a device identify on a network. | ||
Gateway IP address | A gateway IP is a unique numerical label assigned to a device within a network. | ||
Signal strength | Signal strength for wireless networks measured in decibels. | ||
Wi-Fi link quality |
Wifi link quality. Value ranges from 0 to 70. 0 indicates no signal and 70 indicates a strong signal. |
||
Transmission bit rate | Transmission power measured in decibels. | ||
Receiving bit rate | Receiving bit rate measured in Megabits per second. | ||
Transmission power | Transmission power measured in decibels. | ||
Encryption status | Specifies whether the wifi encryption key is turned off. | ||
Wi-Fi power management | Specifies whether Wi-Fi power management is turned on. | ||
Network connection GUID | A unique identifier that Windows assigns to each network adapter. | ||
Network diagnostics | Latency duration |
Duration in seconds Latency problem:
|
|
Network info | Network device type |
Possible values:
|
|
MAC address | MAC address (if applicable) of the corresponding network device. | ||
MEID | Mobile Equipment IDentifier (MEID) of the corresponding network device, as applicable. | ||
IMEI | International Mobile Equipment Identity (IMEI) of the corresponding network device, as applicable. | ||
Device SIM ICCID | The integrated circuit card ID associated with the device's SIM card. | ||
Device SIM MDN | The mobile directory number associated with the device's SIM card. | ||
Policies | Device policies | Device policies unable to be applied. | Table of policies that couldn’t be applied to the device because of OS version mismatch. |
Action | Description |
---|---|
Move |
When you enroll devices, they automatically go in the top-level organizational unit. Click Move and choose the organization that you want to move the device to. |
Reset |
Remotely deletes data from devices. You can remove all user profiles and data from the selected device but keep the device's enrollment state and device data, such as network profiles. Or, you can completely wipe it, removing all data including user profiles, device policies, and enrollment data. Devices are restored to factory state. If forced re-enrollment is turned off, users can use the device without re-enrolling it into your account. For details, see Reassign a device to a different user. The clear user profiles command stays valid for up to 180 days, and the factory reset command stays valid for up to 5 years. This helps to ensure that the commands complete, even if devices are temporarily offline or unavailable. If there is already an existing pending command, subsequent commands are queued for the device. Queued commands might include reboot, set volume, take screenshot, upload logs, and so on. If a command remains stuck in pending for too long, connect the affected devices to the internet and reboot them. If you continue to have issues with a stuck command, contact support. |
Reset ESIM |
Permanently removes all eSIM profiles from devices. Users see a message letting them know that eSIM profiles have been cleared from the device. eSIM profiles are no longer listed on the mobile data settings page on their devices. Check with your carrier for expected behavior before you reset your eSIM. In many cases, devices do not automatically get a new eSIM profile using the same policy configured SMDP+URL. Note: Reset ESIM is the only way to remotely remove an eSIM profile. If you remove cellular configurations, deprovision or disable devices, or move devices from one organizational unit to another, eSIM profiles remain on devices. |
Disable | Disable a device so no one can use it. For example, if it's lost or stolen. For details, see Repair, repurpose or retire ChromeOS devices. |
Deprovision | Deprovision devices that are no longer being used in your organization, so that you’re no longer managing them. For details, see Repair, repurpose or retire ChromeOS devices. |
Capture logs |
For devices that have enabled device system log upload Triggers a new upload of device attributes and logs for devices. Logs are stored in System logs, under System activity and troubleshooting. You’ll see a message when the device attributes are successfully uploaded. |
Export logs |
Displayed instead of Capture logs when all requirements are met. Requirements
You can troubleshoot ChromeOS devices by capturing additional logs and exporting them from the Admin console. |
Remote desktop |
Starts a remote session to a device. For details, see Access ChromeOS devices remotely. |
Reboot |
Requirements Reboots the ChromeOS device when the remote reboot command has been received by the device. |
Take a screenshot |
Only available on kiosk devices Takes a screenshot of the device's screen and stores it in Screenshots, under System activity and troubleshooting. . If a screenshot fails, you’ll see a message with one of the following error codes:
Note: Devices that are in kiosk mode and have had user input (for example, mouse or keyboard movements within a kiosk session) are not eligible for screenshots until the device is restarted. Then, the device must autolaunch into a kiosk app for screenshots to work. |
Set volume |
Only available on kiosk devices Remotely sets the volume level for managed devices in kiosk mode. Use the slider to select the volume level and click Set volume. In the top right, under Your tasks, you’ll see a notification when the volume is successfully set on the device. |
To use bulk actions on the Devices page, check the box next to the devices you want to select. Then choose a bulk action:
- Move selected items
- Disable selected items
- Deprovision selected items
- Reboot selected items
- Reset selected items
- Reset eSIM (Available only if all selected devices are eSIM capable devices)