📖 2 mins read

Managed Guest Sessions

With managed guest sessions, multiple users can share the same device running Chrome OS without having to sign in to their Google Account. For example, use managed guest sessions to configure Chrome devices as loaner devices, shared computers.

With managed guest sessions, your users can have a full browsing experience and access multiple websites in windowed mode, not full-screen.

GAT Shield on Managed Guest Session

GAT Shield can be set up and enabled for Managed Guest Session 

Prerequisite

Chromebooks must be enrolled and the Managed Guest Session must be enabled for the Device OU. These settings can be found in the Google Workspace admin console

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 1

Deploy GAT Shield on MGS

Within the Google’s Workspace admin console, navigate to Devices → Chrome → Apps and Extensions → Users & browsers

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 2

 

Then click on the Managed Guest Sessions tab.

Select the Organizational Unit and then click on the pulse + button to deploy the GAT Shield extension.

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 3

 

Select the option “Add Chrome app or Extension by ID”. 

Enter the ID and URL of the Open version or Closed version of GAT Shield.

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 4

You can find these values in the GAT Shield console under the setting “Extensions Deployment”

Below is where you can find the Extension ID and URL within the GAT Shield console. 

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 5

When the Extension ID and URL are added click on the “Save” button.

Enable extension on domain

Click on the Extension and a pop-up side menu will be displayed:

  • Set up the “Permissions and URL access” to “Allow all permissions“.
  • Policy for extensions: {“domain”:{“Value”:”your_domain_name.com”}}

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 6

Replace ‘your_domain_name.com’ with your own domain name.

For example, our domain is called gatlabs.com so the policy would look like this:

{“domain”:{“Value”:”gatlabs.com”}}

Make sure to SAVE everything before leaving the section. 

Results 

When Shield is enabled for Managed Guest Session, the users will be displayed in the Shield console as anonymous-ChromeOS serial number

GAT Shield | Extension deployment on (MGS) Managed Guest Sessions 7

Within the GAT Shield console, anonymous users on Managed Guest Sessions will appear without an email address and the text “anonymous-(serial. n)”.

The extensive reporting now available for MGS is described here. We recommend completing the set up before returning to this specific use case.

 

If you would like to run a trial of our products please install GAT+ from the Google Workspace Marketplace and contact us at support@gatlabs.com with any questions you may have.

To request a demo please click here and fill the form, we will get back to you in less than 12 hours during weekdays.

If you trailed GAT in the past and you would like to run a fresh trial again, please enquire through this form.

Thanks for sharing and spreading the word!