Google Admin Console Best Practices for Student Filtering and Visibility

This article outlines recommended Google Admin Console settings to help ensure that:

  • Students cannot bypass Deledao web filtering (extension-based) 
  • Student screens remain fully visible in ActiveInstruct 


⚠️ Important: These are recommended best practices. Each district should review and adjust these settings based on their specific environment, policies, and instructional needs. 



Where to Configure These Settings

Navigate to:

admin.google.com > Devices > Chrome > Settings > Users and Browsers > Select Student OU



  1. Incognito Mode

    • Value: Disallow incognito mode 
    • Why it matters: Prevents students from using private browsing sessions where extensions like Deledao and ActiveInstruct may not function.

  2. Safe Browsing Protection

    • Value: Use one of the options: Safe Browsing is active in the standard mode, or Safe Browsing is active in the enhanced mode.
    • Why it matters: Adds protection against unsafe or malicious websites, reinforcing overall security alongside Deledao.

  3. Screenshot

    • Value: Allow user to take screenshots and video recordings 
    • Why it matters: Enables ActiveInstruct to capture and display student screens in real time.

  4. Browser Guest Mode
    • Value: Prevent guest browser logins 
    • Why it matters: Ensures students cannot bypass managed profiles and policies.

  5. Force Chrome Sign-In

    • Location: Device Settings > Sign-in Settings
    • Values:
      • Force users to sign in to use the browser 
      • Restrict sign-in to your school domain 
    • Why it matters: Ensures only managed school accounts are used, so policies are always applied.

  6. Secondary Account Sign-In

    • Value: Block users from signing in to or out of secondary Google Accounts  
    • Why it matters: Prevents switching to unmanaged accounts to bypass controls.

  7. Multiple Sign-In Access

    • Value: Block multiple sign-in access for users in this organization  
    • Why it matters: Eliminates the ability to use multiple profiles to evade restrictions.

  8. Task Manager

    • Value: Block users from ending processes with task manager 
    • Why it matters: Prevents students from stopping filtering or monitoring processes.

  9. Developer Tools

    • Values: 
      • Never allow use of built-in developer tools
      • Do not allow use of developer tools on extensions page 
    • Why it matters: Prevents tampering with or disabling extensions like Deledao.

  10. Bookmark Controls

    • Values: 
      • Bookmark bar: Disable
      • Bookmark editing: Disable
    • Why it matters: Stops students from saving shortcuts to unapproved content while allowing admins to provide approved links via Managed Bookmarks. 

  11. URL Blocking

    • Values: 
      • Block sensitive internal Chrome URLs 
      • Add the following Blocked URLs: 
        • javascript://* 
          chrome://hang 
          chrome://kill 
          data://* 
          devtools://* 
    • Why it matters: Prevents access to system pages or tools that could disable protections. 

  12. Idle Settings

    • Value: Logout (on idle and lid close) 
    • Why it matters: Ensures devices sign out when not in use and helps apply Chrome updates upon re-login so protections remain current. 

  13. User Management of Installed CA Certificates

    • Value: Disallow users from managing certificates 
    • Why it matters: Prevents installation of untrusted certificates that could bypass filtering.

  14. Side Panel Search History

    • Value: Disable showing recent Google Search results in a browser side panel 
    • Why it matters: Limits quick access to potentially unfiltered or inappropriate prior searches.

  15. Google Lens

    • Values: 
      • Disable Google Lens overlay 
      • Add lens.google.com to blocked URLs
    • Why it matters: Prevents use of visual search tools to bypass filtering. 

  16. Network Prediction

    • Value: Do not predict network actions 
    • Why it matters: Stops Chrome from preloading content that could bypass filtering visibility.

  17. Gemini Integrations

    • Value: Do not allow Gemini integrations  
    • Why it matters: Prevents access to AI tools that could generate or retrieve unfiltered content. 


Summary

By applying these recommended configurations, districts can:

  • Strengthen enforcement of Deledao web filtering 
  • Maintain full student visibility in ActiveInstruct 
  • Reduce common methods students use to bypass controls 

Always validate these settings against your district’s instructional goals, compliance requirements, and user needs before deployment.