ROBERT DEVITO: Hi, my name is Robert DeVito.
I lead the Global Chrome Customer and Partner Sales
Engineering team.
Thank you for joining the second session of the Remote Work How
To Series.
In this session, I'll cover this steps
to helping you get started deploying
Chrome devices quickly.
If you're listening live and have any questions,
please submit them below and we will answer
them live during the session.
In a previous webinar, you heard Mike Daoust
present on how to keep businesses running even
while working from home, and how to empower users with a Chrome
solution.
Now in this webinar, I will take you through step by step
how to get devices deployed to remote workforce.
Given this will be a high level overview,
there is a Remote Worker Toolkit that
is linked to the resource section of Chrome
on Air for additional details.
You can also visit the help center
to download the Quickstart deployment
guide that covers the five steps that we'll
be discussing shortly.
You also have access to the demo videos
and also see Helpful ISV and Partner Information.
Before we dive into specific steps in deploying Chromebooks,
I wanted to mention that we have a number of partners
and resellers to provide white glove services.
White glove services enable a simple out
of box experience, where devices can
be pre-enrolled to your domain of your choice,
as well as pre-configured before the device actually
ships to its destination.
Many enterprises opt for white glove services
as an added benefit to help streamline deployments
on a global scale.
Our partners also have additional advanced services
that include proof of concept, pilots, app migration
and modernization, integration into a system of records,
identity services, and much more.
OK, let's dive in.
There are five steps to a successful Chrome Enterprise
deployment.
This includes making sure you have the right solution
to get started, signing up and verifying your domain,
setting up users and deploying policies in Google Admin
Console, enrolling your devices, and finally,
distributing devices to your employees.
I realize that every use case and environment are different.
Generally these steps will be applicable
to your specific environment and use case.
Before getting started, it's important to ensure
you have the right solution for your employees
and their specific use case.
A Chrome solution is broken out to two main areas, hardware
and the Chrome Enterprise Upgrade.
From a hardware perspective, there
are a variety of form factors from the leading
OEMs, including premium.
And two and one devices are available to enable
you to equip for a variety of use cases,
and give employees the hardware they want.
The second part is to activate and unlock
the business capabilities through the Chrome Enterprise
Upgrade, or also known as CEU.
The Chrome Enterprise Upgrade can
be procured in two different convenient ways.
The first way is if you already have Chrome hardware.
There are two ways to purchase the Chrome Enterprise Upgrade.
If you have under 50 Chromebooks,
you can utilize a self-service portal
in the Google Admin Console.
If you're over 50 Chromebooks, you
can purchase through a reseller as we discussed earlier
in the presentation.
The second way, and the most convenient way,
is to purchase a Chromebook that has the business capabilities
already unlocked or bundled with the device, which is
available for many of the OEMs.
This is often called Chromebook Enterprise or CBE.
After you purchase your devices and upgrade,
the next step is to create an admin account
to activate the Google Admin Console, which
is your Cloud-based device management portal.
Google Admin Console has over 200 security, user,
and device policies, allowing you to manage OS upgrades,
permit apps, and much more.
The first step in creating an admin account
is by visiting the URL displayed in this presentation.
Sign up, and you'll receive an email
on how to log in to gain access to the Google Admin Console.
The next step is verifying your domain, which
ensures you're the owner of the domain for the Google Admin
Console, and the users that you'll be managing.
You'll also be asked to supply some additional information
in order to verify your domain.
Let's take a look at a quick demo of this process.
[MUSIC PLAYING]
SARAH: Domain verification is important to ensure
that your Chrome Enterprise Management Capabilities are
available and unlocked.
In this video, we're going to show you
how to verify your domain.
As you can see, the Chrome devices icon is grayed out.
The next steps will unlock this tile.
After logging in, navigate to the Google Admin Console
homepage.
On the top left, you see Setup Admin Console.
Click here to get started.
Go ahead and select click here.
You're going to find lots of helpful information,
and even a video to get you going
to help you verify your domain.
Go ahead and click Next.
Locate your DNS provider in the drop down menu,
and unique instructions will appear based on your selection.
In this case, the DNS provider was not listed,
and other was selected.
After selecting other, a random string of text
will be generated by the Google Admin Console.
You or your DNS admin must paste this text string
into your DNS provider's console as a new TXT record.
This allows the Google Admin Console to link to the domain.
Propagation could take 30 minutes to a few hours,
depending on your DNS provider.
Once the DNS entry has been propagated, click verify.
And that's it.
You have now successfully verified your domain.
It may take a few minutes or up to a half hour for all systems
to sync.
Navigate back into your Admin Console and click on Devices.
Your Chrome Enterprise Management tile
is now unlocked.
After verifying your domain, you now
have access to Google Support.
You can access support on the home page of the Google Admin
Console by clicking on the question mark in the top right,
or through the support icon on the bottom right.
ROBERT DEVITO: Now that we have verified your domain
and have access to the Google Admin Console,
let's take a look at setting up Users and Policies.
As I mentioned earlier, there are 200 devices and user
policies that are available, and these policies
are figured in the Google Admin Console.
Deploying apps and extension, device settings,
and network configurations are a small list
of examples of these policies.
Next, Sarah will cover the basics
of how to navigate the Google Admin Console,
and setting a few of these policies.
[MUSIC PLAYING]
SARAH: In this demo, you'll learn
about navigating the Chrome Admin Console and features.
Let's get started.
First, select Devices to view the list of devices
that you've enrolled into the domain.
You can see details like when the device was enrolled,
or when the last policy sync occurred.
Now, let's drill down into more device details.
In this view, you can see information such as the version
of Chrome OS that's installed.
You can also see a list of the recent users who
have logged into the device.
At left, you can see a list of actions to take,
like disabling the device.
That's very useful if the device has been lost or stolen.
The de-provision action removes enterprise policies
from the device, which comes in handy if you're retiring
a device from your fleet.
When we go back to devices, we see
there's a dropdown menu you can use
to quickly switch between different sections of the Admin
Console.
The Apps and Extensions page lets
administrators select apps that can be installed or blocked.
The Admin Console supports many apps,
including Chrome Apps, Extensions, Android Apps,
and Progressive Web Apps.
To add an app, hover over the plus symbol
and choose one of the available options.
You have the option of adding apps from the Chrome Web
Store, Google Play, or Chrome App,
or you can add them by extension ID or URL.
Let's go ahead and choose the Chrome Web Store.
Search for Slack, then choose the application.
Here you see that you have the option
to set an installation policy.
This is commonly used to force install
an app without requiring user interaction.
If you navigate to Device Settings,
you can see that the first option enforces re-enrollment
if a device has been power-washed or reset.
This way, you can make sure that the device will
be re-enrolled into your domain and that all policies will
be enforced.
Let's use the search option to find the Update Settings.
Updates are automatically applied with Chrome OS.
You have flexibility in how updates
are deployed and applied.
For example, you can pan a specific version,
or schedule a rollout plan.
Let's navigate to the User and Browser Setting.
Use the search option to quickly navigate to SSO settings.
You can configure Chrome OS to leverage a third party identity
provider.
This lets you set up single sign on and user provisioning.
If we navigate to the Network Settings,
you see that administrators can configure network settings
such as Wi-Fi and VPN.
In addition, administrators can configure these settings
to auto-connect to specific networks,
and also restrict which networks are allowed.
ROBERT DEVITO: Now there are multiple ways
to deploy Chrome OS, and recommended approach
is to add your users either manually or through a CSV file.
As a Cloud-native device with Cloud profiles,
policies you assigned to users from devices
are automatically downloaded and configured at the first log
in and synced across their devices.
Chrome Enterprise also allows for other modes
like manage guest sessions and kiosk mode.
Because of the sharable nature of Chrome OS,
one Chromebook can be setup with multiple modes in parallel,
while ensuring security and privacy for all.
Having the right policies in place
will ensure a productive end user
while securing access to important company data.
For your users, configure network settings
allowing proper network level access,
either remotely or at the corporate office.
For certain use cases, consider using Chrome Remote Desktop,
which enables users to access their desktop from anywhere,
and it's a tool that is often used
for providing support by IT.
Most importantly, make sure remote workers have access
to the apps they need by force-installing and pinning
icons to make the most of their productivity.
Chrome Enterprise combines the end user
benefits of the Chromebooks with the business capabilities
of Chrome OS for IT to power the Cloud workforce,
allowing users to work securely and effectively from anywhere.
From a business and security perspective,
some important areas to consider are default idle settings,
which enable admins to set timers for screen-locking.
Enforcing Google Safe Browsing as a default policy,
which takes advantage of Google Services
that check pages against potential threats.
Enforcing restrictions around data exploitation,
so that USB multiple drives can only
be read and not written to.
These key areas are vital to protecting your business data,
and Chrome Enterprise enables admins to enforce
these policies within minutes.
Now that we've procured devices, we have accessed the Google
Admin Console, we created the necessary users and device
policies, now it's time to enroll your devices.
Enterprise Enrollment ensures that your Chrome devices
are managed.
Again, many enterprise leverage white glove services
through our resellers and our partners,
which allow the distribution of devices on a global scale.
Sarah will cover very quickly how Enterprise Enrollment works
for Chrome devices.
[MUSIC PLAYING]
SARAH: You can enroll devices quickly.
Let's walk through the steps to enroll your Chrome devices.
Since Chrome OS is a Cloud-native operating system,
all you need is an internet connection to Enterprise Enroll
your device.
Simply connect to a wireless network and off you go.
Once you're connected, Chrome OS will check and apply
the latest security patches and operating system
updates in the background.
When the Enterprise updates are completed,
start the sign in process.
To Enterprise Enroll your device,
select more options at the sign in screen
and choose Enterprise Enrollment.
You can also press ctrl-alt-e to get to the enrollment screen.
Log in with your admin account or user account
with enrollment permissions.
And in a matter of seconds, your device
is now Enterprise Enrolled, unlocking Chrome Enterprise
Policies and Management Capabilities.
You now have a managed device.
The user is ready to sign in.
You're all set.
If you want to double check that your Chrome device was
enrolled, you should see the count increase
in our Chrome devices tile.
ROBERT DEVITO: Once your Chrome devices
are Enterprise Enrolled, you'll have control and visibility
into these devices.
You can simply now distribute these devices to your users.
As we start to wind down this brief presentation,
I realize that there may be other platforms
in your environment other than Chrome OS.
A browser in a lot of ways is a new desktop for employees.
Users everywhere are spending increased amount
of time in their browser, accessing apps and systems
that are primary for their function.
And now that you're familiar with the Google Admin
Console and the User Policies, you
can manage the Chrome Browser through the same console
across other platforms in your organization.
Chrome Browser Cloud Management, also known as CBCM,
is a free offering that provides extension management, user
policies, and Enterprise-grade security for your Chrome
Browsers.
After following these easy five steps,
you have enabled your Cloud workforce
to stay secure and productive from any location.
For more information on Chrome Enterprise and getting started
deploying your devices, you should check out
the Remote Worker Toolkit that is linked to the resource
section of this webinar.
It contains everything that was presented today,
has a Quickstart deployment guide,
and links to our full deployment guide
if you want to get into more technical details.
It also includes information on partners like Citrix, VMware,
and Cameo, with directions how to get started.
Information is also available on a solution from Neverware,
which was previously discussed in Mike's session, where you
can convert an old PC or a Mac device
into a managed Chromium environment.
If you need to get connected with a reseller team,
you can contact our sales team.
Thank you for joining the Remote Work How To Series.
Have a great day.