FAQ for Windows device management

Expand all  |  Collapse all

What happens if I change a user's license to one that doesn't support Windows device management?

If the user’s device was enrolled in Windows device management, the device remains enrolled and any existing policies pushed to the device aren’t affected. However, the device won’t receive any policy updates or new policies. You can always remove policies from the device by unenrolling the device.

What happens if a subset of users doesn't have an Enterprise, Education Plus, or Cloud Identity Premium license?

Google Credential Provider for Windows (GCPW)

  • Users with any type of Google Workspace or Cloud Identity license can still use GCPW to receive the sign-in benefits of their Google Account.
  • You can use the Google Admin console to remotely sign a user out from their Google Account.

Windows device management

  • Users devices won't be enrolled into Windows management.
  • Users devices won't receive any Windows settings and updates you push to devices.
  • You can't use remote actions on the device, such as wiping data on a device (except remote sign-out).
Why aren't the settings I pushed updating on enrolled Windows devices?

In most cases, it takes a few minutes after you save your settings to push them to internet-connected Windows devices. However, it can take up to 6 hours. Devices that aren't connected to the internet get the updated settings the next time they connect.

Users can sync their devices with new settings at any time, as follows:

  1. From the Windows Start menu, go to Settings > Accounts.
  2. On the left, click Access work or school.
  3. Click the item that says "Connected to your network."
  4. Click Info.
  5. Under Device sync status, click Sync.
How many users can enroll in Windows device management per device?
Microsoft Windows 10 and 11 allow only one user per device to be enrolled in a Windows management provider, such as Windows device management. If you have many people using the same device, only one user is enrolled. In the Admin console Devices list, only that user is listed as the user on the device. Their device-level settings, such as admin privileges, BitLocker encryption, and Windows updates, apply to all users of the device. 
Can I enforce 2-Step Verification with Windows device management?
Yes, but Windows device management does not support USB security keys. Windows device management supports other 2-Step Verification methods, such as Google prompt, Google Authenticator, and backup codes.

More help


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
3832169708437821358
true
Search Help Center
true
true
true
false
false