Creating a Restricted Access Group in the Google Admin Console

Let me start with this . . . I think the best thing that we can do for children in regards to the dangerous, disruptive and distorted content on the internet is to teach them to identify and avoid it.  However, some students have difficulties with this and during intermediary times while helping them to develop better/safer online habits, an alternative support may be necessary.

One option is to use a separate Google Admin Organizational Unit (OU) that is has restricted internet access.  In it, you can block all online content except for content that that you and your educators have identified as being a part of students’ learning experience.  (The last thing that you would want to do is limit or prohibit their learning)

To do this:

  1. Login to the Google Admin Console
  2. Go to Device Management > Chrome Management > User Settings
  3. Select the appropriate OU (Organizational Unit)
  4. Scroll down to the URL Blocking Section
  5. In the URL Blacklist section enter only a *.  This blocks ALL internet content.
  6. In the URL Blacklist Exception section, list every site that you do want your students to have access to.  Keep in mind that an address like khanacademy.org will unblock anything starting with khanacademy.org, including things like khanacademy.org/math.

A few tips:

  • When placing students into this group, you may need to move them in Active Directory in order for them to stay in the Google Admin Organizational Unit.  It all depends on your setup.
  • Maintain a Google Doc that teachers can access to see what sites are unblocked.  That way, they can double-check their sites that they intend to use . . . and send you additions.
  • Consider using an instructional piece about appropriate internet use to help students learn to make better choices so that they can be moved out of this group after an appropriate amount of time.

Again, this is not a perfect solution, but different students need different supports and scaffolds as we prepare them for their futures in our technology-obsessed society.

Note: These limitations will only be apply 1) in Chrome, 2) with the student logged into Chrome.