ChromeOS General discussions

{  "sessionId": "f4c0d024398047418e572f122a2dc627",  "errors": [    {      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '5926fc8e-304e-4f59-8bed-58ca97cc39a4'(Microsoft Intune portal extension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 6435aa15-7640-4daf-913c-1f49a6b9dd00 Correlation ID: 9d6a315c-ecce-4c9d-927a-9b4b4bc0bcc0 Timestamp: 2026-07-18 20:07:39Z",      "clientId": "5926fc8e-304e-4f59-8bed-58ca97cc39a4",      "scopes": [        "https://o365.servicecommunications.microsoft.com/.default"      ]    }  ]}

Hi Community Team,I am experiencing an issue with wiinpkrgame.com when users try to access it through Google Chrome on Android devices.The website occasionally fails to load, gets stuck on the loading screen, or displays a connection error. The behavior is inconsistent, as the site may work correctly on other browsers or different network connections. We have also noticed that https://wiinpkrgame.com/ is affected only in certain Chrome environments, making it difficult to determine the root cause.Could this be related to recent Google Chrome updates, Android System WebView, HTTPS/SSL configuration, DNS resolution, browser caching, or any security policies that could impact website accessibility?I would appreciate any suggestions on how to troubleshoot this issue and ensure the website loads consistently for all Android Chrome users.Thank you!

Hello,I’m trying to deploy certificates on Chromebooks for wifi connexion.  I’m lost in Google documentations, it’s a big labyrinth.  They seem to have change the manner to do and doc is not up to date.  I already built a environment PKI with Intune NDES/SCEP server and all is working great.  But for Google it’s another thing.  So if anyone have up to date (2026) docs, it would be appreciated.Here are some questions that might help me:Is Google Cloud Certificate Connector act as an application proxy?  Or we have to put our NDES/GCCC server in DMZ?Is Pub/Sub on Google Cloud Project is mandatory?​​​​​​​How to confiugre SCEP for chromebook, options for SCEP Secure are not available anymore.Is all the config for certificates like device id etc is in the config connector file? Thank you   

Environment:- We have a public-facing SCEP server (RFC 8894 compliant)- SCEP server is accessible via HTTPS from the internet- We successfully use this SCEP server for Intune and JAMF device enrollment- We're trying to extend it to ChromeOS devicesOur Approach:Instead of deploying GCCC (Google Cloud Certificate Connector), we want to:1. Configure SCEP CA Connection in Google Admin Console → directly point to our SCEP endpoint2. Create SCEP Profile Configuration in Google Admin Console3. Have ChromeOS devices call our SCEP server directly (similar to how Intune/JAMF devices do)Our Question:Is it possible for ChromeOS devices to enroll certificates via SCEP directly to an external SCEP server WITHOUT using GCCC? Specifically:- Will ChromeOS devices make direct HTTPS calls to a custom SCEP endpoint?- Are there any security policies or platform limitations that prevent this?- If supported, what's the recommended configuration in Google Admin Console?Context:- Our SCEP server is public-faci

اريد اصل لعدم الاجهزه للدخول في خصوصياتي ولا اريد اي مشاركه مع اي اجهزه اخرىوحذف الشروط والحكم للصابق  

I have a batch of chromebooks that an organization donated to my robotics team. The organization is still operating, but they had an enterprise set up for these chromebooks, and they were locked to that enterprise. The enterprise no longer exists (they aren't paying for it). I have complete permission to repurpose these chromebooks, but neither us nor the donor has any idea how to remove the lock on that organization! We can't even log in because it requires a login domain that no longer exists. How can we deprovision these chromebooks? I've tried the "Super Powerwash", including disconnecting the battery and discharging the system. Nothing has worked, it keeps coming up with a requirement to log in with a defunct account. Any pointers to who we might contact at google, I have full cooperation from the actual owners of these devices! Maybe there is a way to temporarily reactivate the enterprise to decommission them?

I’ve been coding and developing my portfolio website and decided to add gifs that loop to a couple of my webpages. When I tested my website using Google Chrome, I got a broken gifs image. But when I tested on other browsers like Safari and DuckDuckGo, the gifs seem to work just fine. I’ve checked the code for errors over and over and have not been able to find any. So I decided to push my website live in hopes that the issue would get resolved. But the issue still persists. I’ve researched and have tried resetting and updating my Google Chrome browser extension and even updated my computer for the latest iOS updates. But none of that has worked, and I’ve come to realize that the gifs don’t work on any of the Google chrome browsers that I’ve used. I’ve used the Google Chrome browser on friends and family desktop computers to see if the gifs work with no success. So I know it’s not my personal Google Chrome browser settings or computer. Can someone please help!?

Hi everyone, We are excited to announce an opportunity to join a new Trusted Tester (TT) program for a high-priority recovery feature: Locate Disabled ChromeOS Devices. Managing a fleet of devices is simple until one goes missing. This first-party solution provides IT administrators with a built-in way to track lost or stolen hardware without relying on third-party extensions. What is the Feature?Currently, finding the physical location of a lost Chromebook requires complex workarounds. This new feature allows administrators to capture the approximate geolocation (via Wi-Fi/Cellular signals) of a managed device only after it has been disabled.This pilot allows you to:Trigger Remote Location: Use a native "Locate" command directly from the device details page in the Admin Console. Maintain Privacy: Tracking is strictly tied to "Disabled" mode—admins cannot track active users, and a lock screen notification informs users when location is being accessed. Automate Recovery Alerts: Configur

HiWondering if anyone can suggest a decent text file editor for ChromeOS.  Was using TEXT, but looks like it's been withdrawn from the play store.  Tried Notepad Next under Crostini but it keeps crashing on me.  I just need to be able to create/edit txt and json files.Thanks

With regards to the LTS channel for ChromeOS and the most recent major update 144 - does it patch cve-2026-5281 (most recent zero day exploit)

Hi everyone, In a distributed workforce, any data sitting on a local hard drive is a liability you can't always see. While ChromeOS is built with industry-leading encryption, moving toward a "non-data-bearing" model takes your security posture to the next level by ensuring the local disk remains nothing more than a temporary, encrypted pass-through.By redirecting downloads, screenshots, and documents directly to the cloud, you can centralize control and apply consistent Data Loss Prevention (DLP) and retention rules across your entire fleet.Why go non-data-bearing?Centralized Control: Move local files under the umbrella of Google Drive or OneDrive management. Seamless UX: Users get a familiar "Downloads" experience, but with the peace of mind that their work is instantly backed up and accessible from any device. Reduced Risk: Minimize the impact of lost or stolen hardware by ensuring no sensitive data lives on the physical machine.We’ve just published a comprehensive resource in our Ge

All our other devices can connect fine but some chromebooks, just won't let you get on to the Wi-Fi unless you try login using the guest account. We use smoothwall at our school with unifi aps but I don't think this is the problem.

Hi All,I have asked Gemini already so have the recommended 3 options but,If hypothetically we had an Analyst transfer a leavers data to an incorrect internal person within our Workspace, is the only realistic option to transfer the data back to the correct person to use the investigation tool and then transfer the data in bulks of 300 at a time over to them?Gemini did say GAM can be used ‘or’ transfer all data using the tools within Admin but it looks like both of these options would move all of the data from the person it was transferred to not just the incorrectly transferred files?

Hi all,After the recent success of the Cameyo webinar series here in the community (not to mention all the super useful content that it yielded), we thought that we should ask you about which themes are you looking forward the most to be the focus of our next webinars in 2026. Our goal is for them to be aligned with your organization’s deployment goals so that we bring the right experts to the table.We’ve identified six key areas of focus based on recent trends we observed here on the community. Please pick the topic you would find most valuable for upcoming sessions below. If you’d like to see more than one of the themes below being discussed, or have any other suggestions for future topics, feel free to drop a comment with them and we will certainly take them into account for the subsequent events.

I have been upgrading older laptops to Chrome OS Flex for people who’s laptops software is now considered obsolete. I have been doing this for about 3 years now and I would like to get in touch with someone at Google to run a program at the community library or something like that to more/less get their blessing on it.  Since they have a BYOD program where back market gets users to pay for a USB key, I am hoping they would like this idea.

We are experiencing an issue where the ImportSavedPasswords Chrome policy set to FALSE with POLICY_MODE_MANDATORY is not disabling the "Import passwords" option in the Chrome Password Manager UI.Steps to Reproduce:1.In Google Admin Console, navigate to Devices > Chrome > Settings > Users & browsers2.Select the Backend OU under Bigfix_MCM_OU > MCM > DEV3.Set Import Saved Passwords → Disable imports of saved passwords4.Set User override → Do not allow users to override this setting5.Save the policy6.On a Chrome browser signed in with an account belonging to the Backend OU, navigate to chrome://policy and click Reload policies7.Navigate to chrome://password-manager/settings Observed Behavior:1.The "Import passwords" row remains fully visible and functional under chrome://password-manager/settings2.The "Select file" button is clickable and opens a file picker dialog3.Passwords can still be imported via CSV despite the policy being set to FALSE with MANDATORY enforcement 

Hi all,As teams continue to modernise their environments, app delivery often sits right at the centre of the conversation.For some organisations, traditional VDI is still the right fit — especially where full desktop access, strict isolation or legacy workflows are required. But for others, there’s a growing shift towards web-first and native app approaches, where most day-to-day work happens directly in the browser or via PWAs on ChromeOS.More recently, we’ve also seen increased interest in Virtual App Delivery, where specific legacy or Windows apps are delivered to users without streaming an entire desktop. Solutions like Cameyo by Google are designed to support that middle ground — keeping access to critical apps whilst reducing the overhead and complexity often associated with full VDI environments.None of these approaches are inherently “right” or “wrong”, and many teams end up using a mix depending on user needs, security requirements, and scale.Which approach (or combination of