---
title: Deploy GAT Shield for Managed Guest Sessions
description: "## Managed Guest Sessions With managed guest sessions, multiple users can share the same device running Chrome OS without having to sign in to their Google Account. For example: **Use managed guest sessions to configure Chrome devices as loaner devices,…"
url: "https://gatlabs.com/knowledge/tech-tips/managed-guest-sessions/"
updated: "2025-07-14"
category: "Chrome Audit & Management"
tags:
  - GAT Shield
---

# Deploy GAT Shield for Managed Guest Sessions

## Managed Guest Sessions

With managed guest sessions, multiple users can share the same device running Chrome OS without having to sign in to their Google Account.

For example:

**Use managed guest sessions to configure Chrome devices as loaner devices, or shared computers.**

With managed guest sessions, your users can have a full browsing experience and access multiple websites in windowed mode, not full-screen.

# GAT Shield on Managed Guest Session

**GAT Shield** can be set up and enabled for **Managed Guest Session **

### **Prerequisite**

Chromebooks**must be enrolled,** and the **Managed Guest Session must be enabled** for the chosen Device Org. Unit.

These settings can be found in the [Google Workspace admin console](https://support.google.com/chrome/a/answer/3017014#ConfigureChromedevices&zippy=%2Cstep-configure-your-chrome-devices). 

Go to Menu ![""](https://storage.googleapis.com/support-kms-prod/JxKYG9DqcsormHflJJ8Z8bHuyVI5YheC0lAp)![and then](https://storage.googleapis.com/support-kms-prod/Th2Tx0uwPMOhsMPn7nRXMUo3vs6J0pto2DTn) Devices > Chrome > Settings > Managed guest sessions settings

From the **General** tab > **Managed guest session**

![](https://gatlabs.com/knowledge/wp-content/uploads/2022/04/2023-08-01-14_34_33-Chrome-Managed-Guest-Settings-–-Admin-Console.png)

In **Configuration** > select **Allow managed guest sessions **and **enter the session name**.

Session name to display on login screen*

![](https://gatlabs.com/knowledge/wp-content/uploads/2022/04/2023-08-01-14_36_41-Guest-settings-details-–-Admin-console.png)

## Deploy GAT Shield on Managed Guest Session (MGS)

Within Google’s Workspace admin console, navigate to **Devices → Chrome → Apps and Extensions → Users & browsers **

Select the OU where you want to deploy the **Managed Guest Session**

![](https://gatlabs.com/knowledge/wp-content/uploads/2022/04/2023-08-01-15_41_52-App-Management_-Admin-Console.png)

Select the Organizational Unit and then click on the **plus + button.**

### Enter ID and URL

From the options shown, select **Add the Chrome app or extension by ID**

**NOTE:** A pop-up window will be displayed, select the **From a custom URL**option.

To access and view the Extension ID and URL, navigate to **GAT Shield > Configuration > Extension deployment.**

![](https://gatlabs.com/knowledge/wp-content/uploads/2022/04/2023-08-01-15_50_19-App-Management_-Admin-Console.png)

### Find the ID and URL

To access and view the Extension ID and URL, navigate to **GAT Shield > Configuration > Extension deployment.**

Select the domain and view the ID, URL, and Policy for the extension

![Open Configuration > Extension deployment - then select the domain and copy and use the ID and URL and Policy of extension to deploy the Shield extension](https://gatlabs.com/knowledge/wp-content/uploads/2024/03/2025-06-11-16_07_20-Window.png)

When the **Extension ID and URL** are **added,** click on the "**Save**" button.

### Enable extension on the domain

The **Shield Extension is now installed.**

### Click on the newly installed extension > a pop-up window will be displayed on the side > in the “**Installation policy**,” click and select “**Force install**“

![](https://gatlabs.com/knowledge/wp-content/uploads/2024/03/2024-03-08-15_22_13-App-Management_-Admin-Console.png)

Scroll down on the same window to the bottom of the page to find the **Policy for extensions **

![](https://gatlabs.com/knowledge/wp-content/uploads/2024/03/2024-03-08-15_26_01-App-Management_-Admin-Console.png)

Enter the Secret key, taken from  **Shield** under **Help – Extensions deployment**

Under the “**Permissions and URL access**” field, click on and select “**Allow all permissions”.**

![](https://gatlabs.com/knowledge/wp-content/uploads/2024/03/2024-03-08-15_32_34-App-Management_-Admin-Console.png)

When all the changes are done, click on the **Save** button on the top right

## Results 

When Shield is enabled for Managed Guest Session, the users will be displayed in the Shield console as **"****anonymous-ChromeOS serial number@domain.com"**

Within the GAT Shield console, anonymous users on Managed Guest Sessions will appear without an email address and the text "**anonymous-(serial. n)".**

The extensive reporting now available for MGS is described [here](https://docs.google.com/document/d/1DHwalm3m0NMxk0XPLdflMwfC9Im8htV6WG1vSAcpD1M/edit?usp=sharing).

We recommend completing the setup before returning to this specific use case.