Configure user experience in managed guest sessions on ChromeOS devices

This guide outlines how to configure user experience settings for managed guest sessions on ChromeOS devices using Hexnode UEM.

Managed guest sessions allow users to access ChromeOS devices without signing in with a Google account, while still enabling IT administrators to maintain centralized control. These sessions are particularly useful in environments like public kiosks, shared workstations, libraries, and retail locations – anywhere users don’t use personal credentials.

With Hexnode UEM, administrators can fine-tune the user experience in managed guest session environments by customizing a wide range of settings – such as the bookmarks bar, shelf position, spell check, access to developer tools, and more. These configurations help ensure a consistent, secure, and user-friendly environment that aligns with organizational policies. By configuring these settings, IT teams can deliver a well-controlled and optimized experience across all managed ChromeOS devices.

Configure user experience settings

You can personalize the user interface on your ChromeOS devices by setting up the User experience policy in the Hexnode UEM console. Follow these steps:

1. Log in to the Hexnode UEM console.
2. Navigate to the Policies tab.
3. Click New Policy to create a new policy or select an existing one to edit.
4. Enter a suitable name and a description (optional) for the policy.
5. Select ChromeOS, then go to Managed Guest Session > User experience.
6. Click Configure to configure the user experience settings.

User experience settings	Description	Supported OS version
Bookmarks bar	Control the visibility of the bookmarks bar in the Chrome browser by choosing one of the following options: User can choose – Allows the user to decide whether the bookmarks bar is shown or hidden. Enabled – Forces the bookmarks bar to always be visible. Disabled – Hides the bookmarks bar and prevents the user from showing it.	ChromeOS version 12+
Shelf position	Specify the position of the ChromeOS shelf (taskbar) on the screen. Available options are Bottom, Left, and Right. When configured, users are unable to modify or override this setting.	ChromeOS version 79+
Override system shortcuts	Configure shortcut behavior on managed ChromeOS devices. Three options to select: Do not override system shortcuts: All ChromeOS shortcuts will work as expected. Override some system shortcuts: Shortcuts using the Launcher key will not work. Override some system shortcuts while in fullscreen: Shortcuts using the Launcher key will not work while an app is in fullscreen mode.	ChromeOS version 127+
Download location prompt	Controls whether users are prompted to choose a location before downloading a file from Chrome browser. You can choose from the following options: Users can choose: Users can select the download location on their device. Ask the user where to save the file before downloading. Do not ask the user (downloads start immediately).	ChromeOS version 64+
Download bubble	A download bubble appears in the top-right corner of the Chrome browser when a file is being downloaded. Select this option to display the download bubble during file downloads.	ChromeOS version from 102 to 118
Spell check	Allow or block users from using spell check. Users can still enable or disable spell check for individual languages. Three options are available to choose from: Users can choose: Users have the ability to manage spell check settings on their own devices. Enabled: Spell check is turned on. You can specify which languages are allowed and which are blocked – multiple languages can be selected in both categories. Disabled: Spell check is turned off entirely.	ChromeOS version 65+
Spell check web service	When enabled, this setting uses Google’s online service for spell checking. This setting only controls the use of online services. When disabled, spell check uses a locally stored dictionary instead. There are three available options: Users can choose: Allows end users to manage the settings directly on their device. Enabled: Activates the online spell check feature. Users can select which languages to include in spell check and which ones to exclude. Multiple languages can be specified for both. Disabled: Disables the use of the online spell check service.	ChromeOS version 22+
Google translate	Option to control the availability of Google Translate on Chrome browser. Users can select from the following three settings: Users can choose: Users can decide whether to enable translation. Always offer translation: Translation will be automatically offered for supported content. Never offer translation: Translation will be disabled and not offered at any time.	ChromeOS version 12+
Developer tools availability	When this setting is disabled, the Developer Tools option will no longer appear in the Tools menu. If the ChromeOS device supports Android apps, this setting also manages access to Android Developer Options. There are three configuration options available: Allow use of built-in developer tools except for force-installed extensions and component extensions. Always allow the use of built-in developer tools. Never allow the use of built-in developer tools.	ChromeOS version 68+
Extensions page developer mode	If configured, the configuration for availability of Developer tools does not influence the availability of the developer tools in the extensions page. Three options are available to choose from: Users can choose: Users are allowed to decide whether to enable Developer Tools on the Extensions page from their device. Allow use of developer tools on extensions page. Do not allow use of developer tools on extensions page.	ChromeOS version 128+
Address form autofill	In the Chrome browser, you can configure this setting to manage whether addresses are automatically filled on websites. Two options are available: Users can choose: Allows users to enable or disable autofill. Never autofill: Disables autofill addresses entirely.	ChromeOS version 69+
Credit card from autofill	In the Chrome browser, you can adjust this setting to manage the automatic filling of credit card details on payment gateways. Two options are available:    Users can choose: Allows users to enable or disable autofill.    Never autofill: Disables the autofill feature entirely.	ChromeOS version 63+
Websites can check for available payment methods	In the Chrome browser, you can enable this feature to allow automatic detection of the payment methods supported by a website.	ChromeOS version 80+
Physical keyboard predictive writing	When enabled, users can access predictive writing on their physical keyboard.	ChromeOS version 116+
Physical keyboard autocorrect	When enabled, users can access autocorrect on their physical keyboard.	ChromeOS version 116+
GIF Support in Emoji Picker	Set this option to enable or disable GIF support in the Chrome browser Emoji Picker. Three options are available:    Default: Uses the device’s default settings.    Allow: Enables GIF support in the Emoji Picker.    Do not allow: Disables GIF support in the Emoji Picker.	ChromeOS version 117+
Emoji suggestion when users type	In the Chrome browser, turning this on will provide emoji suggestions as you type.	ChromeOS version 86+
Session locale	Set the preferred order of languages displayed on the sign-in screen. If only one language is chosen, ChromeOS will use it by default when launching a managed guest session. When multiple languages are selected, ChromeOS will apply the most common keyboard layout associated with the first language in the list. Users can modify these language and keyboard settings once the session begins. After the managed guest session ends, the language and keyboard layout will revert to their previous settings.	ChromeOS version 38+
Unified desktop	By enabling this option, a single application window can stretch across all monitors connected to your ChromeOS device, making them function as one continuous, larger display.	ChromeOS version 47+
Allow using Google Assistant on the web	Set Google Assistant behavior for this device. There are three available options:    Users can choose: Users decide whether to enable Google Assistant directly on the device.    Always allow: Google Assistant remains enabled on the device at all times.    Never allow: Google Assistant is completely disabled on the device.	ChromeOS version from 107 to 109
Quick answers	Enabling this option will activate the Quick Answers feature on your device. Quick Answers is a ChromeOS function that provides helpful information about the content you select when you right-click.	ChromeOS version 97+
Quick answers translate	Enabling this option allows Quick Answers to access the selected content and send it to the server to receive translation results.	ChromeOS version 97+
Quick answers definition	Enabling this option allows Quick Answers to access the selected content and send it to the server to receive definition results.	ChromeOS version 97+
Quick answers unit conversion	Enabling this option allows Quick Answers to access the selected content and send it to the server to receive unit conversion results.	ChromeOS version 97+
Disabled app visibility	Enabling this option allows you to show or hide the icons of disabled apps on the device.	ChromeOS version 48+
Disabled system features	Disabled system features allow administrators to selectively disable specific system features on ChromeOS devices. When a feature is disabled via this option, it becomes unusable for users on devices. This option also allows you to control whether these disabled features are visible or hidden on the device. You can select which disabled features to show or hide. The system features available for management include Camera, OS settings, Browser settings, Scanning, Web Store, Canvas, and Crosh (Chromium Shell).	ChromeOS version 84+
Dinosaur game	Enabling this feature lets users access the dinosaur game when their device is not connected to the internet.	ChromeOS version 48+
Borealis	Enabling this option allows you to run Steam games on Chromebooks.	ChromeOS version 91+
App recommendations	When checked, recommends the apps that have been previously installed by the user (Google workspace user account) on other devices when the search box is empty.	ChromeOS version from 75 to 99
Suggested content	When enabled, Chrome browser will offer suggestions such as webpage URLs and apps as users begin typing in the search bar.	ChromeOS version 85+
Display URLs in the address bar	Configure the URL behavior in the Chrome browser address bar with three available options: Users can choose: Allows users to select their preferred URL display setting on their device. Display the full URL: Always display the complete URL in the address bar. Display the default URL: Displays the default URL in the address bar	ChromeOS version 86+
Fullscreen mode	If enabled, users, apps, and extensions with the necessary permissions are allowed to enter Fullscreen mode.	ChromeOS version 31+
Forced fullscreen after unlock	If enabled, the specified URLs will stay in fullscreen mode without displaying a notification after the device is unlocked. Turning on this option allows you to specify which URLs are affected.	ChromeOS version 99+
Maximize window on first run	Enable this option to allow Chrome browser to open the first window in maximized mode during its initial launch.	ChromeOS version 43+
Allow user feedback	Google Chrome’s built-in surveys gather user feedback about the browser. Turning on this feature allows users to submit feedback to Google.	ChromeOS version 77+
Persist display settings	If selected, the device will keep the display settings set by users during a managed guest session even after the session is finished. By default, all display settings are reset as soon as sessions end.	ChromeOS version 90+
Google lens region search	Enabling this feature lets users see and utilize the Google Lens area to search for menu items within the context of the menu itself.	ChromeOS version 94+
Allow google lens integration with gallery app	Enable this option to make the availability of the Google lens in the device gallery app.	ChromeOS version 128+
Allow user override	Enabling this option permits users to override default settings. A user override occurs when a user is able to change the pre-configured site settings on their device. For instance, if a Chrome browser bookmark bar setting includes an “Allow user override” option, it means that users can modify the bookmark settings on their own device.	ChromeOS version 128+
Allow sending text to Google servers for enhanced Select-to-speak	Enable this option to use advanced network-based text-to-speech voices in the Select-to-Speak accessibility feature. These voices send text to Google’s servers to generate more natural and lifelike speech.	ChromeOS version 94+
Recommended UI theme	Select your preferred UI theme from the options: Light, Auto, or Dark.	ChromeOS version 124+
Automatic fullscreen allowlist	Allows you to set a list of sites URL patterns that specify sites which will automatically grant the window management permission. This will extend the ability of sites to see information about the device’s screens and use that information to open and place windows or request fullscreen on specific screens.	ChromeOS version 124+
Automatic fullscreen blocklist	This option lets you define a list of website URL patterns that will automatically be granted window management permission. As a result, these sites can access information about the device screens, allowing them to open, position windows, or request fullscreen mode on particular screens.	ChromeOS version 124+
Keyboard focusable scrollers	This provides a temporary option to disable the new keyboard behavior for focusable scrollers. Focusable scrolling means being able to move through scrollable content using the keyboard – like with the Tab and arrow keys – without needing a mouse.	ChromeOS version from 127 to 138

Associate the policy with target entities

1. Navigate to Policy Targets > Domains/OUs.
2. Click on +Add Domain/OUs. From the list, select the Google Workspace account integrated with Hexnode.
3. The parent OU will be listed and indicated with a briefcase icon to differentiate it from other domains.
4. Click on the dropdown next to the parent OU to view its child’s OUs. Select the required Organizational Units and click OK.
5. Associate the policies to the OUs to which the target devices are assigned.
6. Click Save to associate the policy with the selected Organization Units.
Notes:

• Policies cannot be associated with ChromeOS devices directly; they can only be applied via Organizational Units (OUs).
• Policy assigned to a parent OU will automatically apply to all its child OUs.

What happens at the device end?

Once the User Experience policy is applied, the enforced settings will be reflected in the ChromeOS interface during managed guest sessions, with certain UI elements pre-configured or restricted.