As an administrator, you can find details about the ChromeOS devices in your domain in the Google Admin console. To view the device list page, go to Menu Devices Chrome Devices. Click the serial number of any device to view device details. You can also create organizational units to apply settings to different groups of devices.
NLP device search
When you search for information about ChromeOS devices in the Admin console, rather than needing to include specific or complicated device descriptors, you can search using plain English. Google’s AI uses natural language processing (NLP) to interpret these requests into the appropriate filters on your behalf, providing an effective search across device lists in the Admin console. For example, if you want to know which devices were enrolled last month, just type that query in plain terms. Google will interpret the request and provide a list of those devices.
Google can see aggregated metrics across users, such as the total number of searches applied and the total number of times filter chips have been clicked directly after a search. However, Google does not log the text of your queries. Queries are not used to train AI models.
Before you begin
Reporting policiesTo view all the new notifications, dashboards, and device details attributes, turn on all the reporting policies in the Admin console.
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- Go to Menu Devices > Chrome > Settings > Device settings .
Requires having the Mobile Device Management administrator privilege.
- Scroll down to User and device reporting.
- To collect information like device details, notifications, and dashboards, turn on each of the following settings:
- Report device OS information
- Report device hardware information
- Report device telemetry
- Report device user tracking
- Report kiosk session status
Note: If your device-reporting settings remain at the Google defaults, these settings automatically include all the required policies to give you complete device details, notifications, and dashboards.
- For event-based log collection—that is, when an event occurs—Google uploads logs relevant to the specific event type, which makes troubleshooting more efficient. To enable this feature:
- Ensure that the Device system log uploadsetting is set to Enable device system log upload.
- Turn on OS update status reporting—For the Report device OS information setting, select OS update status.
- Turn on device telemetry reporting on crash information—For the Report device telemetry setting, select Crash information.
- Your Device detailspage displays a notification to inform you of failed OS updates or crashes. This notification points you to the uploaded logs associated with the event and also display a button to view all device events.
Role privileges determine what information an admin can access in the Admin console, as well as what tasks they can perform.
To view Chrome reports and manage ChromeOS device settings, assign the desired role privileges.
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- Go to Menu Account > Admin roles .
- Click the role you want to assign. Alternatively, you can create a new role.
- Click Privileges.
- Scroll down to Chrome Management View Reportsand select these checkboxes:
- View Chrome Versions Report
- View Insights Report
- View Extensions List Report
- Scroll down to Manage ChromeOS Devicesand select these checkboxes:
- Read Telemetry API
- Manage ChromeOS Device Settings
ChromeOS device list
The ChromeOS device list page has two tabs:
- Devices—Includes the notifications module and the list of devices.
- Dashboards—Displays aggregated insights into your device fleet through various dashboard.
When you switch between organizational units, the displayed device count and dashboard information dynamically updates to reflect the selected organizational unit. To maximize the use of the dashboards, turn on the reporting policies .
Devices tabNotifications module
The notification module at the top informs you about devices that require your attention, in addition to your ChromeOS device list page. Depending on the number of devices, it might take some time for the notifications to load. The percentage of the device fleet that requires attention is calculated based on the total number of devices in the selected organizational unit.
Devices with policies that could not be applied to a device due to the policy not supporting the OS version of the device.
For example, when a policy has a minimum supported ChromeOS version of 96, but the device is on ChromeOS version 90, you must update the device to version 96 or later before you can apply the policy.
Device list page - Columns
On the ChromeOS device list page, the following columns display for each of your users’ ChromeOS devices. You can click the Manage columnsicon to select which columns display by default.
Indicates whether the device's OS version is in compliance with the OS version specified by your organization's policy. Value is checked and updated every 3 hours. Possible values:
- Compliant:Device version matches version set by your organization's policy.
- Pending update:Device is pending reboot to apply the update.
- Not compliant:Device version does not match version set by your organization's policy.
- Unknown: 'Device State Reporting' policy is not enabled or policy cannot be computed due to transient error.
Date and time of the most recent OS crash on the device.
Exporting a list of devices
You can export a list of your ChromeOS devices as a CSV file. The maximum number of devices that you can export to CSV is 100,000.
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
- To show all devices, on the left, click All devices. Otherwise, select a child organizational unit .
- (Optional) Apply filters to search for specific devices. For details, see Filter by status .
- At the top, click Export.
A link appears in the top right, under Your tasks. - Click Download CSV.
- Use Google Sheets, or your preferred spreadsheet software, to open the CSV file. For details, see Import data sets & spreadsheets .
The following attributes are included in the CSV file when you export the device list:
| Name | Description |
|---|---|
| deviceId | Device ID. |
| serialNumber | Serial number. |
| model | Hardware model. |
| lastPolicySyncMs | Last recorded date (UNIX Epoch time, milliseconds) that device synchronized with policy settings. |
| osVersion | ChromeOS version. |
| orgUnitPath | Organizational unit. |
| provisionStatus | Provisioning status. |
| annotatedAssetId | Custom field: Asset ID. Size limited to 1KB. |
| annotatedUser | Custom field: User. |
| annotatedLocation | Custom field: Location. Size limited to 1KB. |
| annotatedNotes | Custom field: Note. Size limited to 1KB. |
| ethernetMacAddress | Ethernet MAC address. |
| macAddress | Wi-Fi MAC address. |
| autoUpdateExpiration | Date when the device stops receiving automatic updates, determined by the Auto Update policy . |
| meid | Mobile equipment identifier. |
| eid | The eSIM chip’s hardware identifier. You will see the EID column only if devices with eSIM are enrolled. |
| eUICC ID | Embedded universal integrated circuit card identifier, if available. |
| platformVersion | Platform version. |
| firmwareVersion | Firmware version. |
| lastDeprovisionMs | Last recorded date (UNIX Epoch time, milliseconds) that device was deprovisioned. |
| deprovisionReason | Reason why device was deprovisioned. |
| mostRecentActivity | Last recorded date (UNIX Epoch time, milliseconds) of the most recent device activity and duration of session (in seconds). |
| mostRecentUser | The latest user’s user ID. |
| wifiSignalStrength | Wi-Fi signal strength (dBm). |
| volumeLevelPercent | Volume level (as a percentage). |
| cpuUtilizationPercent | CPU in use (as a percentage). |
| memoryUsageByte | Memory in use (bytes). |
| diskSpaceUsageByte | Disk space in use (bytes). |
| kioskApp | Kiosk app ID and version. |
| lanIpAddress | LAN IP address. |
| wanIpAddress | WAN IP address. |
| lastIpAddressUpdateMs | Last recorded date (UNIX Epoch time, milliseconds) that LAN and WAN IP addresses were reported. |
| bootMode | Boot mode. |
| tpmFirmwareVersion | Trusted Platform Module (TPM) firmware version. |
Note:No values are exported for lastReportMsand manufactureMs, even though they appear in the CSV file and spreadsheet.
You can click the charts and select Inspectto filter the device list.
Displays the number of devices and percentage distribution of ChromeOS devices that are:
- Deprovisioned
- Provisioned
- Pre-provisioned
- Disabled
- Suspended
Displays the number of devices and percentage of fleet that has:
- OS version unsupported
- OS version not compliant
- OS update pending
The chart also displays the top 4 OS versions with highest number of devices, and then others. For example:
- M112
- M111
- M110
- M109
- Other
Chrome device OS release channel information :
- Stable
- Extended stable
- Beta
- Dev
- Canary
The number of devices receiving their last automatic update in each month of the selected time frame.
To view devices that can't receive updates anymore in a specific month, click a column in the report.
To see a breakdown by device model, point to a column.
A pie chart displaying online status of kiosk devices in the organizational unit. It only displays if you have Kiosk devices in the selected organizational unit.
- Online
- Offline
- Unreported
The total number of OS crashes in the last 7 days by major OS version.
Click View 28d crash reportto view a chart that shows the daily number of OS crashes by major version over the last 28 days. Below the chart, click View impacted devicesto view the filtered list of devices.
On the Devices page, click the heading of a column to sort by different criteria. You can apply filters to search for specific devices.
Filter by notifications
You can filter a device list by clicking a notification. To view information on resolving a notification, click the information icon in the notification card.
Search for devices
- (Optional) To search all organizational units, on the left, click All devices.
Note:For delegated admins, clicking All deviceslists only the devices from organizational units that the delegated admin has access to. - Click Search or add a filterand select the field to search.
- Enter your search criteria and click Apply.
- (Optional) To search multiple fields, add a filter for each field, enter search criteria, and click Apply.
Alternatively, use the Search bar on any of the Admin console pages to look for ChromeOS devices.
Filter by status
You can filter the devices to see all that are provisioned, deprovisioned, disabled, or suspended.
- On the main listing page, click Status.
- From the menu, select a status and click Apply.
You can see all devices that have the specified status. You can also view all devices.
Search within a specific field
To search only in a specific field (for example, to search for a specific user), you add a filter for that field and enter search criteria.
Filters for the fields User, Location, Notes, and Modelreturn only strings that contain the exact word you entered in the search criteria. For example, if some devices have the value tasty applepieand you enter applein the filter, no device is returned. If you enter tastyall tasty applepiedevices are returned. Symbols and punctuation marks are treated as spaces. For example, searching for admin@example.comis the same as searching for admin example com.
Filters such as Asset ID, Serial number, and Chrome versionperform a real substring partial matching search when the user enters 2 or more characters. For example, to search for the version number 102.0.5005.20, enter 5005.
Use the following guidelines for each field.
| Filter value | Description |
|---|---|
| Serial Number | Enter the serial number of the device that you’re searching for and click Apply. For example, to search for the 12345abcdefg serial number, enter 12345abcdefg. Partial serial number searches are supported, as long as you enter at least 3 characters in the serial number. |
| Asset ID | Enter the asset ID. For example, to match the partial asset ID 1234, enter 1234. |
| Enrollment time | To view devices that were enrolled with the management server between a specified range of days, enter a start and end date and click Apply. |
| Last policy sync | View devices by when they last synced with Google's device management server. To search a specified date range, enter a start and end date and click Apply. To see the devices that synced on a specific day, enter the same day in both fields. |
| User | Enter a username and click Apply. For example, if you enter Tom Sawyer, the search returns all devices where the username includes Tomor Sawyer. |
| Location | To view all devices at a single location, enter the location and click Apply. For example, to match Seattle, enter seattle. |
| Notes | To search for devices with a specific note assigned to them, enter text that you expect to find in the note. For example, to match loaned from John, enter loaned from john. |
| Model | Enter the model name. For example, to match the partial model name Google Pixelbook Go, enter pixel. |
| Last user activity | To view devices that were last used within a specific timeframe, enter a start and end date and click Apply. |
| OS update status | Displays the OS update status of devices. For example, select Download not startedto view devices that have not started downloading an update. |
| OS version compliance | Displays the OS version compliance of devices. For example, select Not compliantto view devices that have not downloaded the latest OS version. |
| OS policy support status | Displays the OS policy support status of devices. For example, select All policies supportedto view devices that support all of your organization's applied policies. |
| Upgrade type | Displays devices based on the type of upgrade they're enrolled with. You can choose to view Enterprise/EDU Upgrade (standalone), Enterprise/EDU Upgrade (bundled), and Kiosk & Signage Upgrade (standalone). |
| Chrome version | Enter the version number of the device that you’re searching for and click Apply. For example, to search for the version number 102.0.5005.20, enter 5005. Partial version number searches are supported, as long as you enter at least 2 characters in the version number. |
| Auto-update until | Displays devices based on their auto-update until date, as determined by the Auto Update policy . For example, you can search for devices whose automatic updates will stop within the next 3 months by selecting In the next 3 monthsand clicking Apply. |
| Recent user | Enter a user’s email address as the argument. For example, to search for all devices that admin@solarmora.com recently signed in to, enter admin@solarmora.comor admin. |
| WiFi MAC Address | Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for devices with WiFi MAC 6C:29:95:72:4C:50, enter 6c2995724c50. |
| Ethernet MAC Address | Enter the address without spaces or colons. Partial address matching is not supported. If multiple devices report the same address to the Admin console, the search returns all of them. For example, to search for the device(s) with Ethernet MAC E8:EA:6A:15:79:81, enter e8ea6a157981. |
Device details
Click the serial number of any device to see device details. On the left, you can choose to move, disable, deprovision, clear user profiles, or remotely access a device. If the device is an autolaunched kiosk, you can also choose to reboot, capture logs, take a screenshot, set the volume on the device.
View device detailsIf you haven’t turned on the reporting policies, a few of the attributes might be missing. To view all the important device details, turn on the reporting policies.
You can also use the following settings to remotely monitor devices. For details on monitoring kiosks, see Monitor kiosk health .
Make and model of the device.
For example: Google Pixelbook Go.
Specifies whether the device is a ChromeOS device bundled with a Chrome Enterprise upgrade or a standalone ChromeOS device with an upgrade:
- Enterprise upgrade (bundled)—ChromeOS device bundled with Chrome Enterprise Upgrade.
- Enterprise upgrade (standalone)—Standalone ChromeOS device with standalone Chrome Enterprise Upgrade.
- Education upgrade (bundled)—ChromeOS device bundled with Chrome Education Upgrade.
- Education upgrade (standalone)—Standalone ChromeOS device with standalone Chrome Education Upgrade.
- Kiosk & Signage upgrade (standalone)—Standalone ChromeOS device with standalone Kiosk & Signage Upgrade.
Enrollment type of the device.
For example: Enterprise enrollment.
Physical specifications of the device’s components.
For example: Clamshell.
Custom fields (editable fields in the Admin console)
Shows activity on the device, when it was last usedand for how long, in the last 30 days. The times and dates shown are based on the device’s timezone.
To see recent activity info, you need to turn on device state reporting. For details, see User and device reporting .
Lists the last users of the device. Kiosk and guest sessions are not reported. Email addresses for unmanaged users are not displayed. Instead, they display as User not managed by your organization.
To see recent users info, you need to turn on tracking recent device users. For details, see User and device reporting .
Only keeps the 100 most recent users.
Provides a prefiltered list of device events captured in Chrome log events.
You can change the selection of events by modifying the filter. For more information on available events,
see Chrome log events
.
Shows automatically captured logs from devices (captured and uploaded every 12 hours).
To view admin-generated logs, click Export Logs.For detailed steps, see Remote log collection for ChromeOS devices .
To view and download logs, turn on Device system log upload in the Admin console (Devices > Chrome > Settings > Device settings > User and device reporting).
Note:Logs are stored for a maximum of 60 days. Only the latest 100 logs are available to download.
Current OS version on the device.
Next to the OS version, there is an icon that display version compliance.
- Compliant—Device OS version is the same or newer than the required version set by organization policy.
- Pending update—Device is pending reboot to apply the update.
- Not compliant—Device OS version is earlier than the required version set by organization policy.
- Unknown—The Device state reporting setting is turned off or policy cannot be computed due to transient error.
Current update status. Possible values include:
- Up to date—Device is up to date.
- Download not started—OS has not started downloading.
- Download in progress—OS has started downloading on the device.
- Pending reboot—Device needs reboot to finish the upload.
- Pending update—OS has not started downloading, the download is in progress, or the device needs a reboot to finish the upload.
reporting. For details, see User and device reporting .
The timestamp of last shutdown and reason for shutdown.
- SHUTDOWN_REASON_UNSPECIFIED— Shutdown reason is not specified.
- USER_REQUEST —User initiated.
- SYSTEM_UPDATE—System update initiated.
- LOW_BATTERY—Shutdown due to low battery.
- OTHER—Shutdown due to other reasons.
Percentage of storage used.
Total storage used and available.
Type of the disk.
For example: eMMC/NVMe/ATA/SCSI.
Percentage of memory used.
Total memory in use and available.
The state of memory encryption on the device.
MEMORY_ENCRYPTION_STATE_UNSPECIFIED—Memory encryption state is not set.
MEMORY_ENCRYPTION_STATE_UNKNOWN—Memory encryption state is unknown.
MEMORY_ENCRYPTION_STATE_DISABLED—Memory encryption on the device is disabled.
MEMORY_ENCRYPTION_STATE_TME—Memory encryption on the device uses total memory encryption.
MEMORY_ENCRYPTION_STATE_MKTME—Memory encryption on the device uses multi-key total memory encryption.
Memory encryption algorithm.
MEMORY_ENCRYPTION_ALGORITHM_UNSPECIFIED—Memory encryption algorithm is not set.
MEMORY_ENCRYPTION_ALGORITHM_UNKNOWN—Memory encryption algorithm being used is unknown.
MEMORY_ENCRYPTION_ALGORITHM_AES_XTS_128—Memory encryption algorithm is using the AES_XTS encryption algorithm with a 128 bit block cypher.
MEMORY_ENCRYPTION_ALGORITHM_AES_XTS_256
Average temperature.
Temperature of each CPU core, in Celsius.
Frequency of report sampling.
Duration in seconds, with up to nine fractional digits, ending with 's'. Example: 3.5s
Total number of displays connected.
Table to view display info.
Total number of touchscreens connected.
Table to view touchscreen info:
- Name
- #Touch points supported
- Stylus supported (Y/N)
Audio output name.
- Volume
- Is muted (boolean)
Audio input name.
- Volume
- Is muted (boolean)
Number of USB peripherals connected.
Table to view connected peripherals info. Includes both internal and external USB connections.
Possible values:
- Network connection type unspecified
- Cellular network connection
- Ethernet network connection
- Tether network connection
- VPN network connection
- Wifi network connection
Wifi link quality.
Value ranges from 0 to 70. 0 indicates no signal and 70 indicates a strong signal.
Duration in seconds
Latency problem:
- HTTPS_LATENCY_PROBLEM_UNSPECIFIEDHTTPS—Latency problem not specified.
- FAILED_DNS_RESOLUTIONS —One or more DNS resolutions resulted in a failure.
- FAILED_HTTPS_REQUESTS —One or more HTTPS requests resulted in a failure.
- HIGH_LATENCY—HTTPS request latency is high, which is potentially problematic.
- VERY_HIGH_LATENCY—HTTPS request latency is very high, which is problematic.
Possible values:
- Network device type not specified
- Cellular device
- Ethernet device
- Wi-Fi device
A list of users whose app usage you can view.
View users’ app usage for the last 28 days. All Usersdisplays by default. If a user is managed, they display in the list and you can select them to view their app usage.
Move
When you enroll devices, they automatically go in the top-level organizational unit. Click Moveand choose the organization that you want to move the device to.
Remotely deletes data from devices. You can remove all user profiles and data from the selected device but keep the device's enrollment state and device data, such as network profiles. Or, you can completely wipe it, removing all data including user profiles, device policies, and enrollment data. Devices are restored to factory state. If forced re-enrollment is turned off, users can use the device without re-enrolling it into your account. For details, see Reassign a device to a different user .
The clear user profiles command stays valid for up to 180 days, and the factory reset command stays valid for up to 5 years. This helps to ensure that the commands complete, even if devices are temporarily offline or unavailable. If there is already an existing pending command, subsequent commands are queued for the device. Queued commands might include reboot, set volume, take screenshot, upload logs, and so on. If a command remains stuck in pending for too long, connect the affected devices to the internet and reboot them. If you continue to have issues with a stuck command, contact support .
Permanently removes all eSIM profiles from devices. Users see a message letting them know that eSIM profiles have been cleared from the device. eSIM profiles are no longer listed on the mobile data settings page on their devices.
Check with your carrier for expected behavior before you reset your eSIM. In many cases, devices do not automatically get a new eSIM profile using the same policy configured SMDP+URL.
Note: Reset ESIMis the only way to remotely remove an eSIM profile. If you remove cellular configurations, deprovision or disable devices, or move devices from one organizational unit to another, eSIM profiles remain on devices.
For devices that have enabled device system log upload
Triggers a new upload of device attributes and logs for devices. Logs are stored in System logs, under System activity and troubleshooting. You’ll see a message when the device attributes are successfully uploaded.
Displayed instead of Capture logs when all requirements are met.
Requirements
- ChromeOS version
- 114 or above for Kiosk only devices
- 122 or above for all other devices
- Device system log uploadsetting is turned on
- Export Logs Actionadmin privilege
You can troubleshoot ChromeOS devices by capturing additional logs and exporting them from the Admin console.
Starts a remote session to a device. For details, see Access ChromeOS devices remotely .
Reboot
RequirementsChromeOS version 113 or above for all devices
Reboots the ChromeOS device when the remote reboot command has been received by the device.
Only available on kiosk devices
Takes a screenshot of the device's screen and stores it in Screenshots, under System activity and troubleshooting. .
If a screenshot fails, you’ll see a message with one of the following error codes:
- 0—Generic failure.
- 1—Screenshot failed because user input was detected.
- 2—Failed to get screenshots. For example, there is no screen connected to the device.
- 3, 4—Failed due to server error.
- 5—Failed due to client error.
- 6—Failed because the upload URL is invalid.
Note:Devices that are in kiosk mode and have had user input (for example, mouse or keyboard movements within a kiosk session) are not eligible for screenshots until the device is restarted. Then, the device must autolaunch into a kiosk app for screenshots to work.
Set volume
Only available on kiosk devices
Remotely sets the volume level for managed devices in kiosk mode.
Use the slider to select the volume level and click Set volume. In the top right, under Your tasks, you’ll see a notification when the volume is successfully set on the device.
To use bulk actions on the Devices page, check the box next to the devices you want to select. Then choose a bulk action:
- Move selected items
- Disable selected items
- Deprovision selected items
- Reboot selected items
- Reset selected items
- Reset eSIM (Available only if all selected devices are eSIM capable devices)
