GSP1207

Overview

With managed guest sessions, multiple users can share the same ChromeOS devices without having to sign in to their Google Account. For example, use managed guest sessions to configure ChromeOS devices as loaner devices, shared computers.

With managed guest sessions, your users can have a full browsing experience and access multiple websites in windowed mode, not full-screen.

Kiosk mode turns your ChromeOS device into a single-purpose device that's dedicated to a specific task, like an interactive kiosk application or digital sign, running full screen. As an administrator, you can use the Admin console to customize and deploy kiosk applications. For example, you might want your app to control the version of Chrome that's running on a kiosk. Or, you can automatically launch a kiosk app on a digital sign.

In this lab, you will create OUs, set up managed guest session settings for different OUs, set up a Kiosk app on ChromeOS and install a virtual desktop solution (Citrix workspace).

Objectives

In this lab, you do the following using the Google Admin Console:

• Create an organizational unit (OU) structure
• Set up Managed Guest Session settings for International Hotel Business Center OU
• Disable Audio Output for Retail Demos OU users
• Managed Guest Session Virtualization (Citrix)
• Design Signage and Kiosk

Prerequisites

To get the most from this lab, familiarity with basic Google Admin Console terminology is recommended.

Setup and requirements

Before you click the Start Lab button

Read these instructions. Labs are timed and you cannot pause them. The timer, which starts when you click Start Lab, shows how long Google Cloud resources will be made available to you.

This hands-on lab lets you do the lab activities yourself in a real cloud environment, not in a simulation or demo environment. It does so by giving you new, temporary credentials that you use to sign in and access the Google Admin console for the duration of the lab.

To complete this lab, you need:

• Access to a standard internet browser (Chrome browser recommended).

Note: Use an Incognito or private browser window to run this lab. This prevents any conflicts between your personal account and the Student account, which may cause extra charges incurred to your personal account.

• Time to complete the lab---remember, once you start, you cannot pause a lab.

Note: If you already have your own personal Google Cloud account or project, do not use it for this lab to avoid extra charges to your account.

Start your lab

When you are ready, click Start Lab in the upper left.

Sign in to the Google Workspace Admin Console

To access the Google Workspace Admin Console, you must find your credentials and then sign in.

Find your lab's User Email and Password

To access the resources and console for this lab, locate the User Email and Password in the Lab Details panel. This panel is on the left or at the top, depending on the width of the browser window. Use these credentials to log in to the Google Workspace Admin Console.

If your lab requires other resource identifiers or connection-related information, they appear on this panel as well.

Sign in to the Admin Console

1. Click Open Google Workspace Admin Console.

Tip: Open the tabs in separate windows, side-by-side.

Note: If you see the Verify your account dialog:

• Click Next.
• Click the prefilled user.
• Click Use another account.

2. On the Sign in page, log in using the User Email and Password details provided.

3. When prompted, click I understand and ACCEPT TERMS OF SERVICE to accept all terms and conditions.

After a few seconds, the Admin Console opens.

4. Right-click VERIFY DOMAIN in either the yellow box at the top or the red box in the Domains card, and select Open link in new tab.

   Note: To complete this step in a real-life scenario, you'd need to add an actual DNS record.

5. Click the new tab, called Domain setup, to complete the Google Workspace domain verification steps.

6. On the Let's set up your domain page, click Get Started.

7. Select the My domain uses a different host checkbox and then click Continue.

8. At the bottom of the Add verification code page, select the Come back here and confirm once you have updated the code on your domain host checkbox, and then click Confirm.

9. Wait until it says Your domain is verified! and then close the Domain setup tab.

   Note: Do not click Activate Gmail.

10. Return to the Admin Console tab and refresh the page.

Start Trial for Chrome Enterprise Upgrade

To manage Chrome devices from the admin console you need a Chrome Enterprise or Education Upgrade, follow these steps to start a trial in your test environment.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Devices.

2. In the Terms of Service (TOS) pop-up pop-up, click I Accept.

3. Click Start Trial for Chrome Enterprise Upgrade. It allows you to manage any number of devices.

4. Then, click Next and leave the Trial Plan selected.

5. Click Checkout, then Place Order.

6. Click X to close the Thanks for your purchase pop-up.

Note: To test the application of device policies you set in your Google Admin console, you can enroll ChromeOS devices in your test environment. Alternatively you can install ChromeOS Flex on Windows, Mac, or Linux devices.

Task 1. Create an organizational unit (OU) structure

To apply different settings to some users or devices, place them in a child OU, below the top level. You then customize the inherited settings of the child OU, and therefore the members of the child OU.

In this task, you create OU and child OUs for Managed guest sessions.

Create OUs

1. From the Admin console, from the Navigation menu (), select Directory > Organizational units.

2. Click Create organizational unit to create a new OU.

3. For Name of organizational unit, enter Managed Guest Session.

4. (Optional) For Description, enter the OU description.

5. Click CREATE.

6. Repeat steps 2-5 to create Kiosk OU.

Create child OUs for Managed Guest Session

1. Make sure you’re on the Organizational units page.

2. Hover over the Managed Guest Session organization and click Create new organizational unit icon (+).

3. For Name of the organizational unit, enter the International Hotel Business Center.

4. (Optional) For Description, enter the OU description.

5. Click CREATE.

6. Repeat steps 2-5 and create the Retail Demos OU.

Click Check my progress to verify the objective. Create an organizational unit (OU) structure

Task 2. Set up Managed Guest Session settings for International Hotel Business Center OU

The managed guest session setting is by default set to Do not allow managed guest sessions. To allow managed guest sessions, follow the steps below.

Configure Display name

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Managed guest session settings.

2. Select the International Hotel Business Center OU.

3. In the General settings, click Managed guest session.

4. From the Configuration drop-down, select Allow managed guest sessions to use managed guest sessions on ChromeOS devices.

5. Enter International Hotel Business Center as the session name (the name users will see for the session).

6. Click Save.

7. Repeat steps 2-6 and allow managed guest sessions for Retail Demos OU, having the session name as Retail Demos.

8. Click Cancel to return to the settings page.

Configure Maximum user session length

The Maximum user length setting controls how long user sessions last. The remaining session time is shown on a countdown timer in the user's system tray. After the specified time, users are automatically signed out and the session ends.

In this task, you set up the user session length to be no more than 15 minutes.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Managed guest session settings.

2. Select the International Hotel Business Center OU.

3. In the General setting, click Maximum user session length.

4. Enter 15 minutes for Maximum session length.

5. Click Save.

Configure Device auto-logout idle time

If the scenario is a public device in a business center at a hotel, users might forget to log out and leave their sessions open. The best practice would be to force a logout if the device is idle, so the next user starts a brand new session.

In this task, you set the device to log out after 10 minutes of inactivity.

1. In the Admin console, from Navigation menu (), select Devices > Chrome > Settings > Managed guest session settings.

2. Select the International Hotel Business Center OU.

3. Scroll down to Power and shutdown settings, and click Idle settings.

4. Select Logout from the Action on lid close drop-down menu.

5. Select Logout for AC idle action.

6. Enter 600 for AC idle delay in seconds.

7. Select Logout from the drop-down for Battery idle action.

8. Enter 600 for Battery idle delay in seconds.

9. Click Save.

Enable Google Translate

This feature allows you to configure whether Chrome uses Google Translate, which offers content translation for web pages in languages not specified on a user's ChromeOS device.

In this task, you allow Chrome to always offer translation.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Managed guest session settings.

2. Select the International Hotel Business Center OU.

3. Scroll down to the User experience settings, and click Google Translate.

4. From the Configuration drop-down, select Always offer translation.

5. Click Save.

Click Check my progress to verify the objective. Set up Managed Guest Session settings for International Hotel Business Center OU

Task 3. Disable Audio Output for Retail Demos OU users

This feature controls whether users in your organization can have any audio output on their ChromeOS devices. The policy applies to all audio outputs on ChromeOS devices, including built-in speakers, headphone jacks, and external devices attached to HDMI and USB ports.

If you disable audio, the ChromeOS device still shows its audio controls, but users can't change them. A mute icon is displayed while audio is disabled.

This setting has no effect on the Google Drive Android app on ChromeOS.

Disable Audio Output

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Managed guest session settings.

2. Select the Retail Demos OU.

3. Scroll down to Hardware settings, and click Audio output.

4. From the Configuration drop-down, select Disable audio output.

5. Click Save.

Click Check my progress to verify the objective. Disable Audio Output for Retail Demos OU users

Task 4. Managed Guest Session Virtualization (Citrix)

Citrix Workspace app for ChromeOS is a native Chrome packaged app that allows you to access Citrix-hosted workspace applications and virtual desktops from Chrome devices. It’s available from the Chrome Web Store.

With the Citrix Workspace app for ChromeOS installed, you can access desktops and applications within your web browsers. No additional configuration or deployment options are required on StoreFront.

You can search for resources and click an icon to start a desktop or application in a new window. When you start an extra application, the Citrix Workspace app for ChromeOS checks if the application can be launched in an existing session before creating a session. This capability enables you to access many applications in a single session.

In this task, you configure the features and functionalities of the Citrix Workspace app for ChromeOS using Google Admin Policy.

Force install Citrix Workspace app

In this task, you force-install the Citrix Workspace from the Chrome Web Store for Managed Guest Session OU.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Apps & extensions. The Overview page opens by default.

2. Click Managed guest sessions.

3. Select the Managed guest session OU.

4. Hover over the Add app icon (+) and select Add from Chrome Web Store.

5. In View app by ID field, enter app ID haiffjcadagjlijoggckpgfnoeiflnem of Citrix Workspace.

You can also search for an application by its name through the search bar.

6. Click Select.

7. Check the Installation policy is set to Force install. If not, select Force install from the drop-down and click Apply.

8. Click Save.

Configure Citrix Workspace for Users

In this task, you configure store settings. To create a store, you identify and configure communications with the servers. You can provide the resources that you want to make available in the store. Then, optionally, you configure remote access to the store through Citrix Gateway.

To push any policy through the Google admin console, follow these steps:

1. Click the Citrix Workspace app icon under Managed guest session.

2. Scroll down to Policy for extensions, and add the following JSON to configure Citrix Workspace for the users:

{ "settings": { "Value": { "settings_version": "1.0", "store_settings": { "beacons": { "external": [ { "url": "http://www.yourcompany.externalwebsite.com" } ], "internal": [ { "url": "http://yourcompany.internalwebsite.net" } ] }, "gateways": [ { "is_default": true, "url": "https://yourcompany.gateway.com" } ], "name": "mystore", "rf_web": { "url": " http://your_RfWebURL_or_persistenturl " } } } } }

3. Click Save.

Note: The JSON configuration given above does not point to a working Citrix environment, it offers only as an example for this lab. You can add gateway URLs in the format https://gateway.domain.com or https://yourcompany.gateway.com and click Add on the utility page.

For more information you can refer to the document Store Settings.

Click Check my progress to verify the objective. Managed Guest Session Virtualization (Citrix)

Task 5. Design Signage and Kiosk

Kiosk mode⁠ is a specialized way of running ChromeOS that focuses on just one application at a time. Set by an administrator, kiosk applications are locked in full screen and run without user login. This differs from the traditional user session or managed guest session modes which allows the user or guest to access multiple apps, as well as the browser.

Kiosk mode can be used for:

• Standardized testing applications deployed in schools
• Digital signage for businesses and enterprises
• Self-service kiosks for retail and hospitality

Kiosk mode provides a locked down, secure environment, and an admin-controlled user experience.

Change OU location

You can change your organizational tree from the Google Admin console by adding, renaming, moving, or deleting devices, users, or organizational units.

1. In the Admin console, from the Navigation menu (), select Directory > Organizational units.

2. Hover over the Retail Demos organization and click Move organizational unit icon.

3. Select the Kiosk organizational unit.

4. Click Continue.

5. Review the information about moving the organizational unit.

6. Click Move.

Configure scheduled reboot

The Google Admin console allows you to schedule reboots of your devices on a daily, weekly, or monthly basis. Scheduled reboots can be used to troubleshoot proactively, and can be scheduled to occur when no one is viewing your digital signage.

Google recommends that you configure apps to shut down at regular intervals to allow the app or device to restart.

In this task, you'll schedule the device to shut down every Monday at 2 AM.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Device settings.

2. Select the Kiosk OU.

3. Scroll down Scheduled reboot settings, and click Enable scheduled reboots.

4. Enter 2:00 (HH:MM) in the Local time of reboot (hh:mm) field.

5. Click Weekly under Frequency of the reboots.

6. Click Monday under Day of the week.

7. Click Save.

Autolaunch app from a URL

Setting a kiosk app to launch automatically turns devices running ChromeOS into single-purpose devices, such as a digital sign or interactive display. You can deploy multiple kiosk apps to devices, but you can only configure one app to automatically launch when devices start.

Follow the instructions below to auto-launch the Spotify app.

Add kiosk app

As an admin, you can add the kiosk app in the Google Admin console.​

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Apps & extensions. The Overview page opens by default.

2. At the top, click Kiosks.

3. Select the Kiosk OU.

4. Hover over the Add app icon (+) and select Add by URL.

5. Enter URL https://open.spotify.com and click Save.

6. Click Agree.

Autolaunch a kiosk app

1. On the Apps & extensions > Kiosks page, from the Auto-launch app drop-down, select the Spotify app.

2. Leave the Installation policy as default and click Save.

Click Check my progress to verify the objective. Design Signage and Kiosk

Congratulations!

In this lab, you configured various managed guest session settings to set up the secure ChromeOS devices for users and set up the Kiosk app. You then installed a virtual desktop solution.

Next steps / Learn more

• Managed Guest Session Devices
• Kiosk app settings
• Citrix Workspace app for ChromeOS

ChromeOS training and certification

...helps you make the most of ChromeOS technologies. Our classes include sale and technical skills to help you get up to speed quickly and continue your learning journey. The Professional ChromeOS Administrator Certification helps you demonstrate your expertise and validate your ability to transform businesses and schools with ChromeOS.

Manual Last Updated October 02, 2024

Lab Last Tested October 02, 2024

Copyright 2025 Google LLC. All rights reserved. Google and the Google logo are trademarks of Google LLC. All other company and product names may be trademarks of the respective companies with which they are associated.