Admin Tips & Tricks

Chrome OS version 125 rolls out with always-on VPN + SAML and zero-touch enrollment updates

See the changes that truly matter, and our guide for admins on all of the latest policies.

Last updated May 29, 2024

First time here? Instinctive offers affordable cybersecurity for schools. Check out the features, schedule a demo, or try it now for free

Get more admin tips & tricks in your inbox

Rollout tracker

X / YYY Chromebook models are on version ZZZ exactly
X / YYY models are already on a later version and X / YYY models are still on a prior version
XX models have already received their final update and are not included

No major updates but a few medium-size ones

The latest Chrome release notes include 65 updates, but there are only a few worth your time to dig into.

Always-on VPN with SAML sign-in - If you use always-on VPN but need your users to log into the VPN via SAML before it connects, you can now specify your SAML URLs in AlwaysOnVpnPreConnectUrlAllowlist.
New zero-touch enrollment features - If you're buying new Chromebooks with zero-touch enrollment from your reseller, the reseller can now provision devices with Kiosk & Signage upgrades, and can set custom fields (asset ID, location, user) ahead of time.
Custom DNS over HTTPS template - You can now add a placeholder within DnsOverHttpsTemplates that will be replaced with the device's local IP address when connecting to managed networks.

You can see the full list of new Chrome OS features here.

New settings & recommended configuration

Isn't it annoying to find and configure each of these new policies one by one in Admin Console? We're building a tool that will instantly audit these policies for you and provide a 1-click button to set all of them at once. Get in touch to try a beta version

Name	Recommended setting
DevToolsGenAiSettings	Disabled
ContextualGoogleIntegrationsEnabled	Enabled
DeviceExtensionsSystemLogEnabled	Enabled
ContextualGoogleIntegrationsConfiguration	-
DeviceDlcPredownloadList	-