Manage public session devices

This article has general information about setting up public sessions on Chrome devices. To find out how to use a Chromebook for student assessments, see Use Chromebooks for student assessments.

Chromebook icon updated Dec 2013

With public session kiosks (also called public sessions), multiple users can share the same Chrome device without the need to sign in. For example, use public sessions to configure Chrome devices for use as kiosks, loaner devices, shared computers, or for any other work or school-related purpose for which users don't need to sign in.

With public sessions, your users can have a full browsing experience and access multiple websites in a windowed mode (not fullscreen). Single App Kiosk mode is focused around a single application and offers the option for a full screen experience.
 

Before you start

  • Enroll the device you want to use as a public session kiosk in your domain. Once successfully enrolled, the device displays in the Admin console at Device management > Chrome devices.
  • Make sure that Always show user names and photos is enabled in the Admin console under Device management > Chrome management > Device settings > Sign-in Screen.

Set up public sessions for your Chrome devices

  1. Sign in to your Admin console.
  2. Go to Device managementChrome management > Public session settings.
  3. Select the organizational unit for which you want the settings to apply.
  4. Configure the settings on the page and include a Session Display Name that you would like to appear on the device’s home screen, such as the name of your organization.
  5. Click Save changes.
  6. Go to Device management Chrome management > Device settings.
  7. Select the organizational unit you want to configure and under Kiosk Settings > Public Session Kiosk, select Allow Public Session Kiosk. This attaches the public session settings to the devices in the organizational unit you select.
  8. Click Save changes. Settings typically take effect within minutes, but they might take up to an hour to propagate to the devices.
  9. Move the desired Chrome devices into the organizational unit that that has the public session settings applied. Note that the Chrome devices must be enrolled in the domain for management before they appear under Chrome devices in the Admin console.

If you set Auto-Launch Public Session to Yes and enter 0 into the field Number of seconds before delaying auto-login, the device will be a Public Session Kiosk after you logout and go to the sign-in screen. If you want to launch a Chrome device with a single Chrome app full-screen, see how to set up a Single App Kiosk.

Notes:
  • Public session pods are prioritized over user pods on the login screen.
  • You can only associate settings from one organizational unit per device for setting up public session kiosks.
  • Public session settings only apply to the Chrome devices you specify.
  • Public session settings are not available for devices enrolled with a Single App Chrome Device Management License.

Public session user experience

On the login screen, the user sees the Session Display Name that you can set in the Admin console.

  1. When the user clicks a public session pod, it expands to show the domain name of the organization that manages the session.
  2. When the user clicks Enter, their session begins and they can start browsing the web.
    If you uploaded a Terms of Service agreement in the Admin console, it will appear after the user clicks Enter, and they will need to click Accept to start the session.

The session is valid until a user signs out, or is idle for a period of time you specify and is automatically signed out. When the user ends the public session, all local user data is wiped from the device.

Public session settings

Settings unique to public sessions are listed in this table. Other settings are described in Set Chrome policies for users.

To quickly find a setting in the Admin console, use the Search settings box at the top of the screen.
Setting Description
Session Display Name Enter the name you want your users to see for the session. For example, "Fremont High School Library" or "Solarmora shared computer".
Maximum User Session Length You can specify the device to sign the user out of his session after 1 to 1440 minutes. Leave empty for unlimited sessions.
Logout on Idle after You can specify the device to sign the user out of his session if the device is idle for 1 to 1440 minutes. Leave empty to never logout. User input is needed to start idle timeout countdown.
Terms of Service agreement You can upload a custom Terms of Service agreement that you would like users of your device to accept. This file needs to be a .txt or .text file.
Custom Avatar You can upload a custom avatar that will accompany a public session. This file needs to be a JPEG (.jpg and .jpeg) and no larger than 512 KB.
Custom Wallpaper Replaces the default wallpaper with your own customer wallpaper. This file needs to be a JPEG (.jpg and .jpeg) and no larger than 16 MB.
Policy Refresh Rate You can specify between 30 to 1440 minutes as the interval for the Chrome device(s) to sync new policies from the Admin console.
Session Locale

Specify the order of recommended languages on the Chromebook's login screen. More details:

  • If you do not specify any recommended languages - Chrome will keep the current language when starting a public session by default. The user can change this default during login.
  • If you specify only one language - Chrome will use this language when starting a public session by default. The user can change this default during login.
  • If you specify more than one language - Chrome will ask the user to choose a language during login. The languages you choose will be presented at the top of the language list, in the order you choose. By default, Chrome will use the most popular keyboard layout for the chosen language. The user can change this during login or afterwards, during the session.

The language and keyboard layout will go back to their previous values when the public session ends.


Common public session configurations

Assessments

You can set the length of time for the exam for one hour, two hours, or however long you want to give students to take the test. You can lock down Internet access to prevent students from looking up answers online, and prevent them from taking screenshots. Learn more about Using Chromebooks for Student Assessments.

Library use

You can specify the period of use for the device from 30 minutes or 3 hours, or whatever length of time you want to specify. You can also configure the device to print with Cloud Print.

Business center/cyber cafe

Similar to library mode, you can set up the length of time for the user session, and you can also set up device-based policies on the device.

Retail store

Unlike for library use, you can configure the device so that it doesn’t have a session timer. People can browse on the device at a kiosk or sales floor for an unlimited amount of time. For more on setting up the devices as a kiosk, see Single App Kiosk.

Common settings to configure with public sessions

In addition to the public session settings above, you can also configure any of the user and device settings offered by Chrome management with public sessions. Learn more about managing user settings and managing device settings. Popular settings include the following:

  • Set up a home page
  • Define a proxy
  • Cloud Print
  • Configure SafeSearch to filter objectionable content
  • Custom wallpaper to personalize the desktop background
  • Blacklist or whitelist access to different sites
  • Pre-install specific apps to the device
  • Configure a user’s length of session
  • Allow Incognito Mode, Screenshots, Access to External storage, Allow Audio I/O and Video Input, among others.

Public session kiosk apps

All hosted Chrome apps and some packaged apps are supported as kiosk apps. Here are some popular public session kiosk apps:

Chrome app App ID
Chrome RDP cbkkbcmdlboombapidmoeolnmdacpkch
User Agent Switcher for Chrome djflhoibgkdhkhhcedjiklpkjnoahfmg
VNC Viewer for Google Chrome™ iabmpiboiopbgfabjmgeedhcmjenhbla

FAQs


How do I print from a Chrome device with public sessions?

You can set up printing with public sessions via the Cloud Print setting in the Admin console under Chrome Management > Device Settings.

How are public sessions different from guest mode?

Guest browsing is useful for quickly browsing the web. However, with guest browsing, you can’t preconfigure apps, limit the session length, enforce a variety of security policies, or manage sessions in a way most businesses and schools require. public session browsing allows you to enforce many user policies without requiring each user to sign in.

On what Chrome devices can I run public sessions?

Public sessions can be set up on any Chrome device that has the management console. If you’re having difficulties, please update the device to the latest version of Chrome OS. Learn more about managed Chrome devices, and contact our sales team if you’re interested in purchasing devices or management licenses.

What security features are built into public sessions?

public sessions are built with all of the security settings that you get with Chrome, including sandboxing, privacy settings, and the ability for an admin to customize the security policies. What’s unique about using public sessions on Chrome devices is that all local user data is removed from the device when the user signs out.

How do I create a Chrome kiosk app that runs full-screen on the Chrome device?

See Tutorial: Create a Chrome kiosk app.

Was this article helpful?