GSP1263

Overview

The Google Admin console is a cloud-based platform that simplifies managing users, devices, browser policies, and settings from a single location. By purchasing Chrome Enterprise Upgrade or Chrome Education Upgrade, you’ll gain access to the Admin console for end-to-end device management. In this lab, you are given access to the Admin console, enabling you to practice management tasks within a temporary test organization.

Objectives

In this lab, you’ll learn how to use the Google Admin console to perform the following tasks:

• Create an organizational unit.
• Disable guest mode.
• Block a website.
• Set a homepage for OUs.
• Deploy, force install, and pin an app.

Prerequisites

To make the most of this lab, familiarity with basic Google Admin console terminology is recommended.

Setup and requirements

Before you click the Start Lab button

Read these instructions. Labs are timed and you cannot pause them. The timer, which starts when you click Start Lab, shows how long Google Cloud resources will be made available to you.

This hands-on lab lets you do the lab activities yourself in a real cloud environment, not in a simulation or demo environment. It does so by giving you new, temporary credentials that you use to sign in and access the Google Admin console for the duration of the lab.

To complete this lab, you need:

• Access to a standard internet browser (Chrome browser recommended).

• Time to complete the lab---remember, once you start, you cannot pause a lab.

Start your lab

When you are ready, click Start Lab in the upper left.

Sign in to the Google Workspace Admin Console

To access the Google Workspace Admin Console, you must find your credentials and then sign in.

Find your lab's User Email and Password

To access the resources and console for this lab, locate the User Email and Password in the Lab Details panel. This panel is on the left or at the top, depending on the width of the browser window. Use these credentials to log in to the Google Workspace Admin Console.

If your lab requires other resource identifiers or connection-related information, they appear on this panel as well.

Sign in to the Admin Console

1. Click Open Google Workspace Admin Console.

Tip: Open the tabs in separate windows, side-by-side.

2. On the Sign in page, log in using the User Email and Password details provided.

3. When prompted, click I understand and ACCEPT TERMS OF SERVICE to accept all terms and conditions.

After a few seconds, the Admin Console opens.

4. Right-click Verify in the red box at the top or right-click on VERIFY DOMAIN on the red box in the Domains card, and select Open link in new tab.

   Note: To complete this step in a real-life scenario, you'd need to add an actual DNS record.

5. Click the new tab, called Domain setup, to complete the Google Workspace domain verification steps.

6. On the Let's set up your domain page, click Get Started.

7. Select the My domain uses a different host checkbox and then click Continue.

8. At the bottom of the Add verification code page, select the Come back here and confirm once you have updated the code on your domain host checkbox, and then click Confirm.

9. Wait until it says Your domain is verified! and then close the Domain setup tab.

   Note: Do not click Activate Gmail.

10. Return to the Admin Console tab and refresh the page.

Start Trial for Chrome Enterprise Upgrade

To manage Chrome devices from the admin console you need a Chrome Enterprise or Education Upgrade, follow these steps to start a trial in your test environment.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Devices.

2. In the Terms of Service (TOS) pop-up pop-up, click I Accept.

3. Click Start Trial for Chrome Enterprise Upgrade. It allows you to manage any number of devices.

4. Then, click Next and leave the Trial Plan selected.

5. Click Checkout, then Place Order.

6. Click X to close the Thanks for your purchase pop-up.

Task 1. Create an Organizational Unit

An organizational unit refers to a group that an administrator can create in the Google Admin console to apply settings to a specific group of users. By default, all users are placed in the top-level (parent) organizational unit. Child organizational units inherit the settings from the parent, but can be modified to fit the needs of the child organizational unit.

In this task, you create a Customer Service Agent OU.

Create OUs

1. In the Admin console, from the Navigation menu (), select Directory > Organizational units.

2. Click Create organizational unit to create a new OU.

3. For Name of organizational unit, enter Customer Service Agent.

4. (Optional) For Description, enter Customer Service Agent Team.

5. Click CREATE.

Click Check my progress to verify the objective. Create an Organizational Unit

Task 2. Disable Guest mode

The Disable Guest mode setting controls the option to allow guest browsing on managed ChromeOS devices. Enabling the Guest mode provides a guest sign-in option on the main screen. However, if you disable the Guest mode, users will be required to sign in using either a Google account, or a Google Workspace account. It is important to note that when a user signs in as a guest, the organization's policies will not be applied.

Now that you know more about the Guest mode setting, go ahead and disable it.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Device Settings.

2. Select the Customer Service Agent OU from the Settings pane.

3. Scroll to the Sign-in Settings category, and select Guest mode.

4. From the Configuration drop-down menu, select Disable Guest mode.

5. Click Save.

This change in settings will prevent users from signing into Chrome as guests, adding an extra layer of security.

Click Check my progress to verify the objective. Disable Guest Mode

Task 3. Block a specific website

As an administrator, you can limit the websites users can access by either blocking or allowing specific URLs. This measure can boost productivity and safeguard your organization from potentially harmful content and viruses found on certain websites.

Setting the URLBlocklist policy stops web pages with prohibited URLs from loading. Administrators have the option to specify the list of URL patterns to be blocked.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Users & browser settings.

2. Select the Customer Service Agent OU from the Settings pane.

3. Scroll to the Content section and select URL blocking.

4. Enter the https://www.facebook.com URL to the Blocked URLs text box.

5. Click Save.

Click Check my progress to verify the objective. Block a specific website

Task 4. Set Homepage

The main objective of the homepage is to create a sense of welcome for the visitor, followed by presenting details and guidance about the site's content. Typically, a homepage acts as a starting point for visitors, giving them a summary of all the website's content and assisting them in moving to various pages. In this context, the homepage setting specifies what pages to load when users start their ChromeOS devices.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Settings > Users & browser settings.

2. Select the Customer Service Agent OU from the Settings pane.

3. Scroll to the Startup section and select Pages to load on startup.

4. For the Configuration, select Open a list of URLs in the Startup actions drop-down menu.

5. Enter the https://www.google.com URL in the Startup pages.

6. Click Save.

After saving your settings, designated websites will automatically open for the user the next time they sign into their Chrome in the selected OU.

Click Check my progress to verify the objective. Set Homepage

Task 5. Deploy an app, force install + pin

As a Chrome Enterprise admin, you can use your Admin console to set policies for a specific web app, Chrome app or extension, or supported Android app. For example, you might force-install an app and pin it to users' Chrome taskbar. Users then see these apps and extensions when using Chrome on managed devices or accounts.

1. In the Admin console, from the Navigation menu (), select Devices > Chrome > Apps & extensions. The Overview page opens by default.

2. Click Users & browsers tabbed page.

3. Select the Customer Service Agent OU.

4. Hover over the Add app icon (+) and select Add from Google Play.

5. Search for the VLC for Android app, then select the VLC for Android app from the tiled results.

6. Click Select and then Accept if asked.

7. In the panel that opens on the right (if the panel is not open, click the app you just added), under Installation policy, choose Force install + pin to ChromeOS taskbar.

8. Click Ok.

9. Click Save.

Click Check my progress to verify the objective. Deploy an app, force install & pin

Congratulations!

You have gained experience as a ChromeOS Administrator through using the tools to set up an organizational unit. You also learned how to configure device, user, and browser management settings, as well as add apps and extensions for new users.

Next steps / Learn more

• Manage policies for ChromeOS devices
• Cloud-managed Chrome Browser

ChromeOS training and certification

...helps you make the most of ChromeOS technologies. Our classes include sale and technical skills to help you get up to speed quickly and continue your learning journey. The Professional ChromeOS Administrator Certification helps you demonstrate your expertise and validate your ability to transform businesses and schools with ChromeOS.

Manual Last Updated February 12, 2026

Lab Last Tested February 12, 2026

Copyright 2026 Google LLC. All rights reserved. Google and the Google logo are trademarks of Google LLC. All other company and product names may be trademarks of the respective companies with which they are associated.