Overview: Manage users' computers & smart home devices

As an administrator, you can control which laptops, desktops, and other endpoints can access your organization's data and get details about those devices. You can also see when a user signs in to their managed account and some details about the device.

Endpoint management options

Fundamental management	For: Windows, Mac, Linux, ChromeOS, smart home devices Setup: Automatically applied; no user set up required Management options: Chrome signals sharing Sign out users remotely
Endpoint verification	For: ChromeOS, Chrome browser Setup: Turn endpoint verification on or off; Chrome browser extension required on users' devices Management options: Fundamental management options Use Context-Aware Access Find and email users without endpoint verification Approve, block, unblock, or delete a device
Google Drive for desktop*	For: Windows, Mac Setup: Deploy Google Drive for desktop Management options: Fundamental management options Allow only company-owned devices to run Drive for desktop Approve, block, unblock, or delete a device
Enhanced desktop security for Windows	For: Windows 10 (company-owned) Setup: Enable enhanced desktop security for Windows or install Google Credential Provider for Windows Management options: Fundamental management options Google Credential Provider for Windows (GCPW) Apply Windows settings Remove work data from Windows computers Approve, block, unblock, or delete a device Unenroll a device from Windows device management

^*Google Workspace only

Get information about endpoints that access data

You can get device details such as the operating system, user account, and management type. To get more information about the device's security configuration, such as if the device is password-protected, turn on endpoint verification or Chrome signals sharing.

View endpoint details

Chrome signals sharing

With Chrome signals sharing, you can gather device signals that provide information about the device, including:

• OS details
• Encryption status
• Screen lock status

Chrome signals sharing is turned on by default. When Chrome signals sharing is on, Chrome profile sync collects device security signals, which you can find as Fundamental devices at DevicesMobile & endpointsDevices.

For details, go to Turn Chrome signals sharing on or off.

If you switch management type

If an endpoint managed by fundamental management starts to use another management type, such as endpoint verification, the device listing is archived and a new listing is created for the new management type.

Notes:

• You can see archived devices in your Admin console for 180 days.
• A device might be listed more than once if it uses more than one management type.
• You can’t perform any actions on archived device listings, such as signing a user out. Instead, find the new device listing and perform the action from there.