Block logging in to consumer accounts
Block adding consumer gmail accounts after logging on. Controlling the chat function can be done within the domain is easy to regulate, but when users are able to add an account after login they are able to use the consumer chat and hangouts during school time.
Thanks for providing feedback on new feature suggestions. While we don’t have it as a specific feature, you can accomplish this by adding the following sites to your custom blacklist:
Please keep in mind that if you have Google.com added to your Whitelist this workaround will not work.
Hope this helps!
Ben Houseward commented
Good news! Chrome version 65 added the following feature:
"Enterprise policy for keeping account sign-in consistent between browser and device"
There is a new policy in chrome://policy named "SecondaryGoogleAccountSigninAllowed" that is unset.
As soon as the Admin console is updated to include a setting that will allow admins to set this policy to False, we can ensure that the only Google account allowed in the browser is the same one used to sign into the Chromebook.
In January that setting was supposed to be ready "within the next few weeks", so hopefully we'll see it soon...
Ben Houseward commented
Simply adding the 3 URLs that Cody mentioned does NOT work. While it will prevent multiple sign in, students can still successfully sign out of their G Suite account and sign in with a consumer account.
As far as I can tell, the method mentioned by Aaron Maricic in the comments is the only way to do this. I don't know if it's possible for GoGuardian to act as a proxy as laid out in the Google Help doc, but I think that would have to be the way to do this.
Travis' suggestion might be a usable workaround. Chrome Extensions have the ability to modify webpages, so this could theoretically be done if GoGuardian could allow each domain to configure the username form field to end in the @domain.com for the customer domain. It would have to update on each keypress, but I guess it could work.
At any rate, if GoGuardian could do this, I would love to see it happen.
Travis Warner commented
Maybe even accomplish this by force filling the email field when logging in?
Aaron Maricic commented
We are accomplishing this with our primary in-house web filter using the below method. I wonder if GoGuardian would be capable of modifying the headers like this?
Jeffrey Thweatt commented
You can block consumer gmail accounts by adding the switch accounts page to your blocked pages in the admin console without using GoGuardian at all.