Documentation
Setup by Device
Chromebook
School Devices

How to deploy WhitelistVideo on school-managed Chromebooks

This guide is for IT administrators who want to deploy WhitelistVideo across school-managed Chromebooks using Google Admin Console. This provides the strongest protection level with force-installed extensions that students cannot remove.

For parents: If your child uses a school-issued Chromebook, share this guide with your school's IT department. You cannot deploy enterprise extensions yourself—only the school's Google Workspace admin can do this.

What is enterprise deployment?

Enterprise deployment uses Google Admin Console to:

  • Force-install the WhitelistVideo extension on all managed Chromebooks
  • Prevent students from removing or disabling the extension
  • Block developer tools and other bypass methods
  • Apply consistent filtering policies across your organization
Personal ChromebookSchool-Managed Chromebook (Enterprise)
Extension removable by studentExtension force-installed, cannot be removed
Developer tools availableCan be blocked by admin policy
Guest mode availableCan be blocked by admin policy
Requires Family Link for protectionManaged by Google Admin Console

Recommended for schools: Enterprise deployment provides the strongest protection. Students cannot remove the extension, access guest mode, or bypass filtering through developer tools when properly configured.

What do I need for enterprise deployment?

  • Google Workspace for Education (or Google Workspace Enterprise)
  • Google Admin Console access with super admin or device admin privileges
  • WhitelistVideo extension ID: lknmjhcajhfbbglglccadlfdjbaiifig
  • Chrome Web Store URL: https://chromewebstore.google.com/detail/whitelistvideo/lknmjhcajhfbbglglccadlfdjbaiifig
  • About 10-15 minutes for initial setup

How to deploy WhitelistVideo via Google Admin Console

Step 1: Access Google Admin Console

  1. Go to admin.google.com (opens in a new tab)

  2. Sign in with your Google Workspace admin account

  3. Navigate to DevicesChromeApps & Extensions

Step 2: Select target organizational units

  1. On the left sidebar, you'll see your organizational structure

  2. Select the organizational unit (OU) that contains student Chromebooks

    • Example: "Students" or "Grade 5 Students"
    • You can deploy to the entire domain or specific OUs
  3. Click on the OU to select it

Best practice: Create separate OUs for different grade levels or classes. This lets you apply different policies and makes management easier.

Step 3: Add the WhitelistVideo extension

  1. With your target OU selected, click Add Chrome app or extension (yellow button)

  2. A search dialog appears

  3. Paste the WhitelistVideo extension ID: lknmjhcajhfbbglglccadlfdjbaiifig

  4. Click Select

  5. WhitelistVideo appears in your apps list

Step 4: Configure force install policy

  1. Click on the WhitelistVideo row in your apps list

  2. Under Installation policy, select Force install

  3. This ensures the extension:

    • Installs automatically on all Chromebooks in the OU
    • Cannot be removed by students
    • Reinstalls automatically if somehow removed
    • Appears as "Managed by your organization"
  4. Click Save

⚠️

Force install vs. Force install + pin: Use "Force install" to require the extension. Optionally choose "Force install + pin" to also pin the extension icon to the toolbar, making it easily visible.

Step 5: Configure extension permissions (optional)

  1. In the WhitelistVideo settings, scroll to Permissions

  2. Recommended settings:

    • Allow in incognito: OFF (unless you want filtering in incognito mode)
    • Allow execution on all sites: ON (required for YouTube filtering)
  3. Click Save

Step 6: Set up device policies for maximum protection

For strongest security, configure additional Chrome policies:

  1. In Google Admin Console, go to DevicesChromeSettingsUsers & browsers

  2. Select your student OU

  3. Configure these recommended settings:

PolicyRecommended SettingPurpose
Guest browsingDisabledPrevents guest mode bypass
Incognito modeDisabledPrevents incognito bypass (optional)
Developer toolsDisabledBlocks dev tools access
Allow user to remove supervised usersDisabledPrevents profile removal
Restrict sign-in to patternYour domain onlyPrevents sign-in with personal accounts
Force install extensionsWhitelistVideo IDAlready configured in Step 4
  1. Click Save

Policy sync time: Changes may take minutes to hours to sync to devices. Students may need to restart Chrome or sign out and back in for policies to apply immediately.

Step 7: Verify deployment

After policies sync (wait 15-30 minutes):

  1. Sign into a student Chromebook with a student account in the target OU

  2. Open Chrome

  3. Type chrome://extensions in the address bar

  4. Verify WhitelistVideo shows:

    • "Installed by enterprise policy" or "Managed by your organization"
    • Remove button is disabled or missing
    • Toggle switch is grayed out
  5. Try to access developer tools (F12 or Ctrl+Shift+I)

    • Nothing should happen if blocked via policy
  6. Click the three-dot menu in Chrome

    • Should show "Managed by your organization" text

Success! The extension is now force-installed and students cannot remove it. Filtering will activate once students enter their PAC codes.

How students activate the extension

After the extension is force-installed, each student must activate it with their family's PAC code:

  1. Student clicks the WhitelistVideo extension icon in Chrome

  2. Student enters their 6-digit PAC code provided by their parent

  3. Student clicks Activate

  4. Extension connects to the family's WhitelistVideo account

Parent communication: Inform parents that they need to provide their child with the PAC code from their WhitelistVideo Parents' App. Each family manages their own whitelist and account.

Advanced configurations

Block all other extensions except WhitelistVideo

  1. In Google Admin Console, go to DevicesChromeApps & Extensions

  2. Select your student OU

  3. Click Add Chrome app or extension

  4. Enter the wildcard character: *

  5. Set installation policy to Block

  6. Click Save

  7. Go back to WhitelistVideo and verify it's still set to Force install

Result: Students cannot install any extensions except WhitelistVideo.

Disable Linux (Crostini) to prevent bypass

  1. Go to DevicesChromeSettingsUsers & browsers

  2. Select student OU

  3. Find Linux development environment

  4. Set to Do not allow Linux development environment

  5. Click Save

Result: Students cannot use Linux terminal to access unfiltered internet.

Block Android apps from Play Store

  1. Go to DevicesChromeSettingsUsers & browsers

  2. Select student OU

  3. Find Google Play Store

  4. Set to Do not allow Google Play on Chrome devices

  5. Click Save

Result: Students cannot install Android apps that might provide unfiltered YouTube access.

Disable powerwash (factory reset)

  1. Go to DevicesChromeSettingsDevice

  2. Select student OU

  3. Find Powerwash

  4. Set to Disable powerwash

  5. Click Save

Result: Students cannot factory reset the device to remove enterprise enrollment.

⚠️

Balance security and usability: Blocking too many features may impact legitimate educational use. Consult with teachers about which restrictions are appropriate for your environment.

How to manage extension updates

WhitelistVideo extensions update automatically through the Chrome Web Store:

  1. Google pushes extension updates to the Chrome Web Store

  2. Chrome checks for updates automatically

  3. Force-installed extensions update without admin action

  4. Students see the latest version within 24-48 hours

No admin action required for updates.

How to uninstall or remove the extension

To remove WhitelistVideo from managed Chromebooks:

  1. Go to DevicesChromeApps & Extensions

  2. Select the OU where WhitelistVideo is deployed

  3. Find WhitelistVideo in the list

  4. Change installation policy from Force install to Allow or Block

  5. Click Save

  6. Policies sync to devices within minutes to hours

  7. Students can now remove the extension (if set to Allow) or it's automatically removed (if set to Block)

Enterprise deployment troubleshooting

Extension doesn't appear on student Chromebooks

  • Check that the Chromebook is enrolled in your Google Workspace domain
  • Verify the Chromebook is in the correct OU where the extension is deployed
  • Wait 15-30 minutes for policies to sync
  • Have student sign out and back in, or restart Chrome
  • Run chrome://policy on the student device to verify policies loaded

Extension appears but isn't force-installed

  • Check installation policy is set to Force install (not just "Allow")
  • Verify the correct extension ID is used: lknmjhcajhfbbglglccadlfdjbaiifig
  • Check for conflicting policies at higher OU levels
  • Refresh policies: chrome://policy → Reload policies

Students can still remove the extension

  • Verify installation policy is Force install
  • Check that student Chromebooks are enterprise-enrolled
  • Personal Chromebooks cannot be force-installed via Admin Console
  • Students must use accounts in the managed domain

Developer tools still available

  • Check that Developer tools policy is set to Disabled
  • Policy applies to users & browsers, not just devices
  • Verify student is signed into a managed account
  • Policy may take time to sync—wait and try again

Guest mode still available

  • Check Guest browsing policy is set to Disabled
  • Apply policy to both device and user settings
  • Restart the Chromebook
  • Verify policy loaded via chrome://policy

Extension shows "Managed by your organization" but doesn't filter

  • Extension is installed but not activated
  • Student must enter their family's PAC code to activate
  • Check that YouTube.com is accessible (not blocked by other policies)
  • Verify student account is connected to a valid WhitelistVideo parent account

Policies aren't syncing to devices

  • Check that Chromebooks are online and connected to internet
  • Verify Chromebooks are enterprise-enrolled (check chrome://policy)
  • Force a policy refresh: chrome://policy → Reload policies
  • Wait up to 24 hours for policies to fully propagate
  • Check Admin Console audit logs for policy errors

Support for IT administrators

Technical specifications

  • Extension ID: lknmjhcajhfbbglglccadlfdjbaiifig
  • Update URL: https://clients2.google.com/service/update2/crx
  • Minimum Chrome version: Chrome 90+
  • Minimum ChromeOS version: ChromeOS 90+
  • Required permissions: Webstore API, YouTube API access
  • Network requirements: Access to whitelist.video API endpoints

Network firewall rules

Ensure these domains are whitelisted in your network firewall:

  • *.whitelist.video
  • api.whitelist.video
  • app.whitelist.video
  • chromewebstore.google.com
  • *.youtube.com (required for video playback)

Enterprise support

For enterprise deployment assistance:

  • Email: support@whitelist.video
  • Subject line: "Enterprise Chromebook Deployment"
  • Include: School name, approximate number of devices, Google Workspace domain

We can provide:

  • Custom deployment guides
  • Bulk activation codes
  • Admin dashboard for school-wide management (coming soon)
  • Priority technical support

Next steps

Additional resources

Summarize with