GAT has now greatly extended support for reporting on Managed Guest Sessions and reporting by serial number. This update highlights the changes made to Shield to allow for this extra functionality.
Managed Guest Sessions is a feature of Chrome deployment that allows Chrome devices to be placed in public places, like lobbies and libraries, to be used by the public. In these cases, the users are all anonymous. The problem is the domain Admin has no way of monitoring the user’s activity and preserving their anonymity.
GAT Shield now allows for the monitoring of the usage and activity on these devices. To configure Shield to start monitoring these devices follow the Shield Guide configuration instructions here.
Stolen or missing Chrome devices may also be put into Managed Guest Session mode. This will allow us to track their whereabouts if they are not being used by a user on a school account. Alerts may also be triggered on their use.
This feature is of particular interest to Schools. Once configured, devices and anonymous users may be tracked in the ‘User/Device Geo Reporting’ area.
All anonymous users are given a username anonymous-ChromeDevSerialNumber@your_domain.com for example
To find an anonymous user on a specific device use a filter with the above formula and the device serial number. To find a list of all anonymous devices, use the filter ‘begins with’ anonymous as shown in the screenshot above.
The next area we enhanced was the ‘Browsing’ report area. Under the ‘Data Explorer’ tab, we added a feature to allow an Admin or delegated auditor note 3 to search for an anonymous user on a specific device or for the activity of all Anonymous users.
All the results can be exported to a spreadsheet. In addition, browsing is reported by both sites and tags. If you are not familiar with Shield tagging, you can read about it here.
In short, a tag can be deployed to many sites or to a part of a site. So, for example, you can create a tag called ‘News’ and apply it to sites from Reuters, the New York Times, the BBC, and so on. You can then filter for this tag to find the amount of time your users spend on these news sites as collective browsing experience. (In education, imagine a list of history, math, or science sites.)
You can also get more specific by tagging subpages of a single site. In the case of a business where all users are just using the one banking site application, you can tag each subpage and determine how long each user is spending in their current account, loan forms, credit card page, etc. Visits for both Sites and Tags are measured by both time and visit counts (total time spent and a total number of separate visits).
The importance of this feature will become apparent in the other areas where we have enhanced reporting.
We added additional reporting tabs. Under the ‘User/Chrome Device Activity’ tab, you can now report both by User (email) and Chrome Device (serial number). In addition, if a user is using two devices simultaneously we now report on both activity threads.
All browsing details can be broken down to report by site or tag, showing a detailed path of how the user moves through sites or tagged pages during their sessions.
All graphs can be zoomed in/out and up/down and individually exported.
You can also report everything with the same detail by Chrome Device serial number.
The User Summary tab has been changed and enhanced to report on users by both Time and Views (number of visits to that page or tag)
And the detail has been enhanced to show the cumulative totals either by Site or by Tag
Finally, we added a tab ‘Chrome Device Summary’ to report by Chrome device serial number only.
This report is of particular interest for Guest Mode (or Anonymous User) reporting. Filtering can be by device organization unit, specific device serial number, device ID or even Device annotated location. This last allows Admins to report on the usage of devices in a particular building or floor over a particular period of time.
Again reporting can be by both time and views.
It can also be expanded to show the detail for each individual device showing for either time or view (unique visits) activity grouped wither by site or by tag
All Chrome devices must be Google Enrolled. This is a requirement for the ability to gather the serial numbers.
GAT+ allows Admins to bulk manage their Chrome Devices. This includes allocating a Device annotated location which can be used for filtering by location. See this video on how to bulk manage your enrolled Chrome devices.
Delegated Auditors can be assigned by Admins. These auditors can run the reports over all or part of the estate. To enable delegated auditors to follow the instructions here.