Force wiped ChromeOS devices to re-enroll

For administrators who manage ChromeOS and ChromeOS Flex devices for a business or school.

By default, wiped ChromeOS devices automatically re-enroll into your account without users having to enter their username and password. Re-enrollment ensures that the ChromeOS devices remain managed and policies you set are enforced on the ChromeOS device. Otherwise, users can't sign in, browse in guest mode, or see the consumer sign-in screen.

Starting in ChromeOS version 131, ChromeOS Flex devices support forced re-enrollment. These devices are always re-enrolled with user username or password after wiping regardless of the forced re-enrollment option you selected.

Considerations

• Don’t force ChromeOS devices that are used in developer mode to re-enroll. Instead, put them in a different organizational unit and turn off forced re-enrollment for that organization. ChromeOS Flex devices do not have access to developer mode.
• If a ChromeOS device is no longer going to be managed by your account, you should deprovision the device.

Turn forced re-enrollment on or off

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettingsDevice settings.

    
3. To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
4. Go to Enrollment and access.
5. Configure the Forced re-enrollment setting:
   • Force device to automatically re-enroll after wiping—Wiped ChromeOS devices automatically re-enroll into your account without users having to enter their username and password. This option does not apply to ChromeOS Flex devices.
   • Force device to re-enroll with user credentials after wiping—Users must manually re-enroll ChromeOS or ChromeOS Flex devices into your account.
   • Do not force device to re-enroll after wiping—Users can use the ChromeOS or ChromeOS Flex devices without re-enrolling it into your account.
6. Click Save.

Settings typically take effect within minutes, but it might take up to an hour to propagate through your organization.

Sometimes, ChromeOS devices might not be able to automatically re-enroll themselves. If an error occurs during automatic re-enrollment, users are notified. They can click Enroll manually to proceed with manual re-enrollment. ChromeOS devices that don’t support automatic re-enrollment and ChromeOS Flex devices show a screen that prompts users to manually re-enroll them.

Configure security settings to manage theft

For more information, watch this how to demo video

Configuring security settings to manage theft