How to deploy WhitelistVideo on school-managed Chromebooks
This guide is for IT administrators who want to deploy WhitelistVideo across school-managed Chromebooks using Google Admin Console. This provides the strongest protection level with force-installed extensions that students cannot remove.
For parents: If your child uses a school-issued Chromebook, share this guide with your school's IT department. You cannot deploy enterprise extensions yourself—only the school's Google Workspace admin can do this.
What is enterprise deployment?
Enterprise deployment uses Google Admin Console to:
- Force-install the WhitelistVideo extension on all managed Chromebooks
- Prevent students from removing or disabling the extension
- Block developer tools and other bypass methods
- Apply consistent filtering policies across your organization
| Personal Chromebook | School-Managed Chromebook (Enterprise) |
|---|---|
| Extension removable by student | Extension force-installed, cannot be removed |
| Developer tools available | Can be blocked by admin policy |
| Guest mode available | Can be blocked by admin policy |
| Requires Family Link for protection | Managed by Google Admin Console |
Recommended for schools: Enterprise deployment provides the strongest protection. Students cannot remove the extension, access guest mode, or bypass filtering through developer tools when properly configured.
What do I need for enterprise deployment?
- Google Workspace for Education (or Google Workspace Enterprise)
- Google Admin Console access with super admin or device admin privileges
- WhitelistVideo extension ID:
lknmjhcajhfbbglglccadlfdjbaiifig - Chrome Web Store URL:
https://chromewebstore.google.com/detail/whitelistvideo/lknmjhcajhfbbglglccadlfdjbaiifig - About 10-15 minutes for initial setup
How to deploy WhitelistVideo via Google Admin Console
Step 1: Access Google Admin Console
-
Sign in with your Google Workspace admin account
-
Navigate to Devices → Chrome → Apps & Extensions
Step 2: Select target organizational units
-
On the left sidebar, you'll see your organizational structure
-
Select the organizational unit (OU) that contains student Chromebooks
- Example: "Students" or "Grade 5 Students"
- You can deploy to the entire domain or specific OUs
-
Click on the OU to select it
Best practice: Create separate OUs for different grade levels or classes. This lets you apply different policies and makes management easier.
Step 3: Add the WhitelistVideo extension
-
With your target OU selected, click Add Chrome app or extension (yellow button)
-
A search dialog appears
-
Paste the WhitelistVideo extension ID:
lknmjhcajhfbbglglccadlfdjbaiifig -
Click Select
-
WhitelistVideo appears in your apps list
Step 4: Configure force install policy
-
Click on the WhitelistVideo row in your apps list
-
Under Installation policy, select Force install
-
This ensures the extension:
- Installs automatically on all Chromebooks in the OU
- Cannot be removed by students
- Reinstalls automatically if somehow removed
- Appears as "Managed by your organization"
-
Click Save
Force install vs. Force install + pin: Use "Force install" to require the extension. Optionally choose "Force install + pin" to also pin the extension icon to the toolbar, making it easily visible.
Step 5: Configure extension permissions (optional)
-
In the WhitelistVideo settings, scroll to Permissions
-
Recommended settings:
- Allow in incognito: OFF (unless you want filtering in incognito mode)
- Allow execution on all sites: ON (required for YouTube filtering)
-
Click Save
Step 6: Set up device policies for maximum protection
For strongest security, configure additional Chrome policies:
-
In Google Admin Console, go to Devices → Chrome → Settings → Users & browsers
-
Select your student OU
-
Configure these recommended settings:
| Policy | Recommended Setting | Purpose |
|---|---|---|
| Guest browsing | Disabled | Prevents guest mode bypass |
| Incognito mode | Disabled | Prevents incognito bypass (optional) |
| Developer tools | Disabled | Blocks dev tools access |
| Allow user to remove supervised users | Disabled | Prevents profile removal |
| Restrict sign-in to pattern | Your domain only | Prevents sign-in with personal accounts |
| Force install extensions | WhitelistVideo ID | Already configured in Step 4 |
- Click Save
Policy sync time: Changes may take minutes to hours to sync to devices. Students may need to restart Chrome or sign out and back in for policies to apply immediately.
Step 7: Verify deployment
After policies sync (wait 15-30 minutes):
-
Sign into a student Chromebook with a student account in the target OU
-
Open Chrome
-
Type chrome://extensions in the address bar
-
Verify WhitelistVideo shows:
- "Installed by enterprise policy" or "Managed by your organization"
- Remove button is disabled or missing
- Toggle switch is grayed out
-
Try to access developer tools (F12 or Ctrl+Shift+I)
- Nothing should happen if blocked via policy
-
Click the three-dot menu in Chrome
- Should show "Managed by your organization" text
Success! The extension is now force-installed and students cannot remove it. Filtering will activate once students enter their PAC codes.
How students activate the extension
After the extension is force-installed, each student must activate it with their family's PAC code:
-
Student clicks the WhitelistVideo extension icon in Chrome
-
Student enters their 6-digit PAC code provided by their parent
-
Student clicks Activate
-
Extension connects to the family's WhitelistVideo account
Parent communication: Inform parents that they need to provide their child with the PAC code from their WhitelistVideo Parents' App. Each family manages their own whitelist and account.
Advanced configurations
Block all other extensions except WhitelistVideo
-
In Google Admin Console, go to Devices → Chrome → Apps & Extensions
-
Select your student OU
-
Click Add Chrome app or extension
-
Enter the wildcard character:
* -
Set installation policy to Block
-
Click Save
-
Go back to WhitelistVideo and verify it's still set to Force install
Result: Students cannot install any extensions except WhitelistVideo.
Disable Linux (Crostini) to prevent bypass
-
Go to Devices → Chrome → Settings → Users & browsers
-
Select student OU
-
Find Linux development environment
-
Set to Do not allow Linux development environment
-
Click Save
Result: Students cannot use Linux terminal to access unfiltered internet.
Block Android apps from Play Store
-
Go to Devices → Chrome → Settings → Users & browsers
-
Select student OU
-
Find Google Play Store
-
Set to Do not allow Google Play on Chrome devices
-
Click Save
Result: Students cannot install Android apps that might provide unfiltered YouTube access.
Disable powerwash (factory reset)
-
Go to Devices → Chrome → Settings → Device
-
Select student OU
-
Find Powerwash
-
Set to Disable powerwash
-
Click Save
Result: Students cannot factory reset the device to remove enterprise enrollment.
Balance security and usability: Blocking too many features may impact legitimate educational use. Consult with teachers about which restrictions are appropriate for your environment.
How to manage extension updates
WhitelistVideo extensions update automatically through the Chrome Web Store:
-
Google pushes extension updates to the Chrome Web Store
-
Chrome checks for updates automatically
-
Force-installed extensions update without admin action
-
Students see the latest version within 24-48 hours
No admin action required for updates.
How to uninstall or remove the extension
To remove WhitelistVideo from managed Chromebooks:
-
Go to Devices → Chrome → Apps & Extensions
-
Select the OU where WhitelistVideo is deployed
-
Find WhitelistVideo in the list
-
Change installation policy from Force install to Allow or Block
-
Click Save
-
Policies sync to devices within minutes to hours
-
Students can now remove the extension (if set to Allow) or it's automatically removed (if set to Block)
Enterprise deployment troubleshooting
Extension doesn't appear on student Chromebooks
- Check that the Chromebook is enrolled in your Google Workspace domain
- Verify the Chromebook is in the correct OU where the extension is deployed
- Wait 15-30 minutes for policies to sync
- Have student sign out and back in, or restart Chrome
- Run chrome://policy on the student device to verify policies loaded
Extension appears but isn't force-installed
- Check installation policy is set to Force install (not just "Allow")
- Verify the correct extension ID is used:
lknmjhcajhfbbglglccadlfdjbaiifig - Check for conflicting policies at higher OU levels
- Refresh policies: chrome://policy → Reload policies
Students can still remove the extension
- Verify installation policy is Force install
- Check that student Chromebooks are enterprise-enrolled
- Personal Chromebooks cannot be force-installed via Admin Console
- Students must use accounts in the managed domain
Developer tools still available
- Check that Developer tools policy is set to Disabled
- Policy applies to users & browsers, not just devices
- Verify student is signed into a managed account
- Policy may take time to sync—wait and try again
Guest mode still available
- Check Guest browsing policy is set to Disabled
- Apply policy to both device and user settings
- Restart the Chromebook
- Verify policy loaded via chrome://policy
Extension shows "Managed by your organization" but doesn't filter
- Extension is installed but not activated
- Student must enter their family's PAC code to activate
- Check that YouTube.com is accessible (not blocked by other policies)
- Verify student account is connected to a valid WhitelistVideo parent account
Policies aren't syncing to devices
- Check that Chromebooks are online and connected to internet
- Verify Chromebooks are enterprise-enrolled (check chrome://policy)
- Force a policy refresh: chrome://policy → Reload policies
- Wait up to 24 hours for policies to fully propagate
- Check Admin Console audit logs for policy errors
Support for IT administrators
Technical specifications
- Extension ID:
lknmjhcajhfbbglglccadlfdjbaiifig - Update URL:
https://clients2.google.com/service/update2/crx - Minimum Chrome version: Chrome 90+
- Minimum ChromeOS version: ChromeOS 90+
- Required permissions: Webstore API, YouTube API access
- Network requirements: Access to whitelist.video API endpoints
Network firewall rules
Ensure these domains are whitelisted in your network firewall:
*.whitelist.videoapi.whitelist.videoapp.whitelist.videochromewebstore.google.com*.youtube.com(required for video playback)
Enterprise support
For enterprise deployment assistance:
- Email: support@whitelist.video
- Subject line: "Enterprise Chromebook Deployment"
- Include: School name, approximate number of devices, Google Workspace domain
We can provide:
- Custom deployment guides
- Bulk activation codes
- Admin dashboard for school-wide management (coming soon)
- Priority technical support