--- title: Automatically Disable a User’s Device for Inactivity with GAT Flow and GAT+ description: "Managing security and user activity is crucial in today's fast-paced digital environment. With [GAT Flow](https://gatlabs.com/knowledge/tech-tips/flow-overview/) and [GAT+](https://gatlabs.com/knowledge/tech-tips/gat-overview/), it's easier than ever to disable a user’s device for inactivity in Google Workspace. Utilizing GAT+ to establish an alert rule and GAT Flow…" url: "https://gatlabs.com/knowledge/tech-tips/automatically-disable-a-users-device-for-inactivity-with-gat-flow-and-gat/" updated: "2024-01-02" category: "Chrome Audit & Management" tags: - GAT Flow - GAT+ --- # Automatically Disable a User’s Device for Inactivity with GAT Flow and GAT+ Managing security and user activity is crucial in today's fast-paced digital environment. With [GAT Flow](https://gatlabs.com/knowledge/tech-tips/flow-overview/) and [GAT+](https://gatlabs.com/knowledge/tech-tips/gat-overview/), it's easier than ever to disable a user’s device for inactivity in Google Workspace. Utilizing GAT+ to establish an alert rule and GAT Flow to take action, this guide demonstrates how to combine these applications to disable a user's Chromebook or managed device after 28 days of inactivity. Let's start by setting up the alert rule. ## Setting up the Alert Rule In **GAT+**, go to the **Alert rules**section and click the '**+**' icon in the top left corner to add a new alert rule. ![GAT+ Create a new alert rule](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/GAT-2023-12-29T142649.280.png) Give it a name, in this example, we'll call it **'Account not used in 4 weeks'.** Upon creation, the system sets it to **'enabled'** by default. ![GAT+ Edit Rule](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/Screenshot-2023-12-29-14.21.31.png)   Select **Users** as the 'Type' of the alert rule, as the alert rule is running against the user's Google Workspace *account*(not their device specifically). ![](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/Screenshot-2023-12-29-15.58.39.png) The 'Scope' will allow you to decide which users this alert rule will run on. In this example we will run it on all users, by selecting the root Organisational Unit (OU), denoted by a forward slash (**/**), and check the box to include all users below the root OU. ![GAT+ Scope](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/GAT-2023-12-29T142015.048.png) In the 'Alert recipients' field, choose the user(s) that you would like to receive the email. This can be any user's email address, several users, or one or more group email addresses. Now select the criteria for the rule's alerts. While multiple options are available, for this example, choose **'Notify when the account is not used for a period of time.'** Then, set the time period to 28 days ![GAT+ Rules](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/Screenshot-2023-12-29-17.40.51.png) When you have finished, click **'Save'.** ![Disable a User’s Device for Inactivity](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/unnamed-65-2.png) ## Automatically Disable a User’s Device for Inactivity after 28 days Now click the **GAT+** logo in the top left corner and navigate to GAT Flow. ![Disable a User’s Device for Inactivity](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/Screenshot-2023-12-29-17.47.34-1.png) Click the **Event workflow** section and then **Create workflow** in the top right corner. ![GAT Flow Workflow](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/GAT-Flow-2023-12-29T175551.610.png) For the type chosen give the workflow a name set the 'Type' to **Modify** and the 'Event' to **GAT+ Alert**. For 'Alert' you can begin typing the name of your alert and it will appear. ![Disable a User’s Device for Inactivity](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/Screenshot-2023-12-29-18.48.56-1.png) By default, the workflow is set to active. Turn on the **Pre-Approval slider**, and the workflow will automatically run each time the alert is triggered. Once you are finished, click **'Next'.**   ![GAT+ Alert ](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/45124873-699d064302fb47ff73af1a6f3c73b4bd.png) On the next page, click the **'+'** icon to bring up the list of actions. Find **'Change chrome os device status'** on the list and select it. On the action itself, click **Disable.** When you disable a device, the user will see a screen displaying a disabled message and your contact information for returning the device upon turning on the Chrome device. No users can sign into this device until an admin re-enables it, a feature commonly known as 'lost mode'. ![Add event workflow](https://gatlabs.com/knowledge/wp-content/uploads/2023/12/45124959-cb5e7dd5845f323da227f0804ae942a9.png) It is possible to add other actions you want to happen at this stage if desired by clicking the '+' icon again and selecting those actions. Lastly, click **'Send approval request'** to submit the workflow to the Security Officer for approval. Once approved, the workflow automatically runs. If any user in your domain fails to sign into their Google Workspace account for 28 days, the system will automatically disable any managed Chrome device assigned to that user. ### Notes If a user is associated with multiple Chrome OS devices, the system will disable all of them. However, personal devices will remain unaffected. The alert rule actively checks whether any user has signed into their **Google Workspace** account, rather than monitoring sign-ins on a specific device. Therefore, if a user hasn't signed into a particular device for more than **28 days** but has logged into their Google Workspace account through another device, the rule will not disable the unused device.