As an administrator, you can see details about computers and Assistant-enabled smart home devices, such as Nest smart displays and speakers, that access your organization's data through managed user accounts. You can get information about devices that are managed by fundamental management as well as devices that use Google Drive for desktop, endpoint verification, or Enhanced desktop security for Windows. To review your Chrome Enterprise devices, open the Chrome devices list.
See all laptop and desktop devices
-
In the Google Admin console, go to Menu
Devices
Overview.Requires having the Shared device settings administrator privilege.
- Click Endpoints.
(Optional) To view details about a device, click the device.
Tip: If your organization has many devices, use the filters or search bar to find a specific device.
Note: A device might be listed more than once if it uses more than one management type or if a device under Fundamental management has more than one user session. Devices under Fundamental management are removed from the list after they're inactive for 180 days.
Filter devices by management type
- At the top of the device listing, click Add a filter.
- Select Management Type the management type that you want
to see. For details about management types, see Monitor your users'
computers.
- (Optional) To see information about a specific device, click the device.
Learn about device details
You don't see a property if it's not supported for a device.
Device security
| Property | Description | Supported devices |
|---|---|---|
| Managed by |
Type of management applied to the device. Values can be:
|
|
| Password status |
Whether the device has a screen lock passcode. Reported for devices managed with endpoint verification, and for devices being accessed by users who are signed in to their Chrome profile while Chrome signals sharing is turned on. Note:
|
|
| Encryption status |
Whether the device is encrypted. Reported for devices managed with endpoint verification, and for devices being accessed by users who are signed in to their Chrome profile while Chrome signals sharing is turned on. Supported third-party encryption providers: |
|
| First sync |
The date and time the device first synced corporate data. |
|
| Last sync |
The most recent date and time the device synced corporate data. If the device is managed by Enhanced desktop security, a separate entry is shown for the last sync time. |
|
| Recent errors | The number of errors that occurred when settings were pushed to Windows devices during the past 48 hours. | Windows |
Device information
| Property | Description | Supported devices |
|---|---|---|
| Device ID |
The ID generated by the Admin console and assigned to the device. The Device ID is not unique. However, you can use it to identify a device along with the device type and user's email address. Sometimes the Device ID matches the Device resource ID. If a device is recorded more than once, more than one ID might be assigned to it. Example: 35407fa833a25163 |
|
| Serial number |
The serial number of the device. Sometimes, you might also see a device's internal serial number. Example: ZX1G428WVV, ce012345cdb67c0b089e |
|
| Ownership |
Whether the device is company-owned or the user's personal device. Possible values: Company owned, User owned |
|
| Type | Device type |
|
| Operating system |
The name of the operating system (OS). |
|
| Model | The name of the device model. Note: For some devices, you only see the device type or OS. |
|
| Host name |
The host name or fully qualified domain name (FQDN) assigned to the device on your network. The value reported depends on how the device is managed:
Host name isn't reported for Windows devices under Fundamental management or with GCPW only. |
|
| Device resource ID |
Unique identifier for the device. Example: x1y23z7a-123a-456b |
|
User information
| Property | Description | Supported devices |
|---|---|---|
| Name | The user's name. An administrator enters this name when they create the account. |
|
| Primary email | The email address of the managed user account on the device. |
|
| Secondary email | An address where the user can be reached outside of your organization. |
|
| Phone number | The user's phone number. |
|
| Employee ID | The unique identifier for the employee. |
|
| Manager's email | The email address of the user's manager. |
|
| Department | The user's department. |
|
| Cost center | The user's cost center. |
|
| GCPW login | Whether the user signed in to their Windows device through Google Credential Provider for Windows. | Windows |
| User account type |
The local administrative permission level the user has on the device:
|
Windows |
Drive for desktop
| Property | Description | Supported devices |
|---|---|---|
| Cache size | The amount of data stored offline on the device. |
|
| Application Version | The version of Drive for desktop installed on the device. |
|
| First sync | The date and time of first sync with Drive for desktop. |
|
| Last sync | The date and time of last sync with Drive for desktop. |
|
Installed apps (Windows devices only)
To report installed apps, the device must have one of the following:
- Enrolled in Windows device management
- Google Credential Provider for Windows (GCPW) version 95.0.4638.50 or later
| Property | Description |
|---|---|
| App name | The app name. |
| Version | The version of the app that's installed on the device. |
| Publisher | The publisher of the app. |
| App type |
The type of app. Possible values:
|
| Install date |
The date and time when the app was first installed, based on the device's time zone. Note: The install date doesn't update when the app updates. Windows app update events aren't available in the Devices audit log. |
Third-party services
These values are reported when you Set up third-party partner integrations.
| Property | Description | Supported devices |
|---|---|---|
| Service | The name of the BeyondCorp Alliance partner. | All managed devices |
| ID | The ID assigned to the device by the partner. | All managed devices |
| Health | A simple health score (Unspecified, Very Good, Good, Neutral, Poor, or Very Poor) provided by the partner. | All managed devices |
| Managed state | If the device is managed by the partner service. Value can be Managed, Unmanaged, or Unspecified. | All managed devices |
| Compliance state | If the device is compliant with the partner service's requirements. Value can be Compliant, Non-compliant, or Unspecified. | All managed devices |
| Asset tags | Tags assigned to the device by the partner, either automatically or by admin configuration. | All managed devices |
Additional device details
Unless noted, additional attributes and details from a user's signed-in profile are available for the following devices:
- Devices that are enrolled in fundamental management. Requires Chrome signals sharing.
- Devices with endpoint verification.
- Devices with both fundamental management and endpoint verification. Signals are combined from both sources.
Device attributes
| Property | Description |
|---|---|
| Enabled antiviruses | The active antivirus software that's running and protecting the device |
| File or folder information | Specific files or folders that are being monitored or reported on the device |
| Hotfixes | Installed software updates or patches that are applied to the OS to address security vulnerabilities or bugs |
| Installed antiviruses | All antivirus software installed on the device, including inactive and disabled software |
| OS firewall status | Whether the device's firewall is turned on or off |
| Registry or plist information | Configuration settings and data from the device's registry or property list (plist) files |
| Secure boot status | Indicates whether secure boot is on, ensuring the device boots using only trusted firmware and software |
| Windows domain name | Network domain name of the Windows device |
Browser attributes
| Property | Description |
|---|---|
| Browser management state | Whether the user's Chrome browser profile or browser instance is managed by your organization |
| Browser version | The Chrome browser version number running on the device |
| BuiltIn dns client | Indicates whether Chrome browser's built-in asynchronous DNS client is enabled |
| Bulk data entry analysis | Reports on security scans and data-protection policy checks for large amounts of text or data pasted into webpages |
| Chrome remote desktop app | Status and details regarding the availability and usage of the Chrome Remote Desktop app or extension |
| File download analysis | Reports on threat scanning and policy compliance for files downloaded in Chrome browser |
| File upload analysis | Reports on security scans and data loss prevention (DLP) checks for files uploaded in Chrome browser |
| Last sync | Timestamp showing when the signed-in Chrome profile last synchronized data with Google servers |
| Password protection trigger | Details the events or policies that trigger password security warnings, such as reusing enterprise credentials on untrusted sites |
| Profile ID | The unique identifier for the user's signed-in Chrome profile |
| Realtime url check | Indicates whether real-time URL reputation checks are active for Google Safe Browsing |
| Safe browsing protection level | The browser's Google Safe Browsing security level, such as Enhanced Protection, Standard Protection, or Disabled |
| Security event analysis | Information on security log events, threat detections, or rule violations logged by Chrome browser |
| Site isolation | Indicates whether Site Isolation is enabled and running webpages from different sites in separate processes to protect against cross-site attacks |
Certificates
Only for devices with endpoint verification
Certificate details are extracted from the certificate when an admin adds the certificate to a device.
| Property | Description |
|---|---|
| Certificate template | The name of the template |
| Fingerprint | A unique identifier of the certificate, formatted as a SHA-256 hash in unpadded Base64 format |
| Issuer | The fully distinguished name of the Certificate Authority (CA) |
| Not valid after | The date and time when the certificate is no longer valid |
| Not valid before | The date and time when the certificate becomes valid |
| Root CA fingerprint | A unique identifier of the root Certificate Authority (CA) in the certificate chain, formatted as a SHA-256 hash in unpadded Base64 format |
| Serial number | The certificate's serial number |
| Subject | The fully distinguished name of the certificate owner |
| Thumbprint | A unique identifier of the certificate, formatted as a SHA-1 hash in Hex format |
| Validation status | Indicates whether the certificate is valid |
Chrome signals sharing
With Chrome signals sharing, you can gather device signals that provide information about the device, including:
- OS details
- Encryption status
- Screen lock status
Chrome signals sharing is turned on by default. When Chrome signals sharing is
on, Chrome profile sync collects device security signals, which you can find as
Fundamental devices at Devices Mobile & endpoints
Devices.
For details, go to Turn Chrome signals sharing on or off.
Related topics
- Overview: Manage users' computers & smart home devices
- Sign a user out of a managed Google Account
- View mobile device details
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.