What Enterprise Enrollment Is and Why You Might Want to Remove It
Enterprise enrollment is a management system that lets a school, workplace, or organization control settings on your Chromebook. When your device is enrolled, the organization can enforce password rules, block certain websites, require security updates, and see which apps you install. You cannot change these settings yourself — the organization's administrator controls them.
If you no longer work or study at that organization, or if you bought a used Chromebook that still carries someone else's enrollment, you will want to remove it. An enrolled device will not let you change your own security settings, install the apps you want, or use the device the way you need to. Removing enrollment gives you full control back.
The process depends on whether you know the administrator's password, whether you own the device, and what kind of enrollment it is. Some paths are straightforward; others require contacting the original organization or doing a full factory reset.
Key Takeaways
- Enterprise enrollment locks your Chromebook's settings under an organization's control, and you cannot change them yourself no matter what password you use.
- If you know the administrator's password or email, you can unenroll through Settings without erasing your files.
- If you do not have the administrator's password and you own the device, a factory reset will remove enrollment but will erase all files and accounts on the Chromebook.
- A used Chromebook with unknown enrollment may require you to contact the original owner or organization to release it before you can use it fully.
- Some schools and workplaces will not release enrollment remotely and may require proof of ownership or a formal request in writing.
Check Your Enrollment Status and Who Controls It
Before you try to remove enrollment, find out what kind of enrollment you have and who set it up. Open Settings on your Chromebook and scroll down to the bottom of the left menu. Look for a section called About Chrome OS or Device Information. If you see text that says "This device is managed by" followed by a domain name (like "example.com" or "school.edu"), your Chromebook is enrolled.
The domain name tells you which organization controls it. If it is your workplace or school, you may be able to contact the IT department or help desk directly. If you bought the device used and do not recognize the domain, you will need to find the original owner or try other removal methods.
Also check whether you are signed in with a managed account. A managed account has a domain name in the email address (like "yourname@company.com" rather than a Gmail address). Managed accounts are tied to the enrollment and cannot be removed without unenrolling the device.
Unenroll If You Have the Administrator Password
If the person who enrolled the device gave you the administrator password or email, you can unenroll without erasing anything. Open Settings, go to About Chrome OS, and look for a button that says Unenroll or Remove Management. Click it.
The Chromebook will ask you to enter the administrator's email address and password. Type them in exactly as they were provided. If the password is correct, the device will unenroll when ready. Your files, apps, and accounts will stay on the device. You will then be able to change your own settings, install new apps, and manage your security the way you want.
If you try the password and it does not work, the administrator may have changed it or you may have typed it incorrectly. Ask the administrator to confirm the password, or move on to the next method.
Contact the Organization to Request Unenrollment
If you no longer work or study at the organization that enrolled the device, contact their IT department or help desk and ask them to unenroll it remotely. You will need to provide proof that you are the device owner or that you have permission to use it.
Schools often require a signed letter from a parent or guardian, a receipt showing you bought the device, or confirmation that you no longer attend. Workplaces may ask for your employee ID or a letter from your manager. Some organizations will not unenroll devices remotely at all and will tell you that you must do a factory reset instead.
If you bought the device used and do not know the original owner, try searching for contact information for the organization's domain. Many schools and companies have a main IT helpline listed on their website. Explain that you purchased the device and cannot use it because of the enrollment, and ask what proof they need to release it.
Factory Reset to Remove Enrollment Without the Password
If you own the device, know the administrator will not unenroll it, and do not have the password, a factory reset will remove the enrollment. A factory reset erases everything on the Chromebook — all files, all apps, all accounts, and all settings. You cannot undo it, so back up any files you want to keep before you start.
To factory reset, open Settings, go to About Chrome OS, and look for Powerwash or Reset Settings. Click it. The Chromebook will ask you to confirm. It will then erase the drive and restart. When it boots up again, it will be as if it came from the factory, with no enrollment and no accounts.
After the reset, you will sign in with your own Google account (or a new one if you do not have one). The device will be yours to manage. You will not have any of your old files or apps, so restore them from a backup if you made one.
What to Do If You Cannot Remove Enrollment
Some Chromebooks have a security feature called FRP lock (Factory Reset Protection) that prevents a factory reset unless you sign in with the original Google account. If you try to Powerwash and the device asks for the original account's password, you have hit this lock.
If you own the device and can access the original account, sign in and then try the factory reset again. If you do not have access to that account, you will need to contact Google support or the original owner. Google can sometimes verify ownership and remove the lock, but the process takes time and requires proof that you own the device (like a receipt or proof of purchase).
If the device is a school Chromebook with FRP lock and you no longer attend that school, contact the school's IT department and ask them to remove the lock. They can do this remotely if they have the device's serial number.
Set Up Your Chromebook After Unenrollment
Once enrollment is removed, your Chromebook will work like any other personal device. Sign in with your own Google account. You can now change security settings, install apps from the Chrome Web Store, set your own password rules, and browse without restrictions (unless your internet provider or home network has its own filters).
If you were using a managed account before (an email address with the organization's domain), you will not be able to sign back in with it after unenrollment. Create a new personal Google account or use an existing one. You can still access files you saved to Google Drive with the old account by signing in to that account separately in a browser.
Take a moment to review your security settings now that you control them. Set a strong password, turn on two-factor authentication if you use sensitive accounts, and decide which apps you actually want installed.
Frequently Asked Questions
Will removing enrollment delete my files?
Only if you do a factory reset. If you unenroll using the administrator password, your files stay. If you use Powerwash, everything erases. Back up important files before you reset.
Can I remove enrollment if I do not own the device?
Not without the administrator's help. If you do not own it and do not have the password, the device is locked to its owner or organization. Contact the owner or organization to request unenrollment, or return the device.
What if the organization says they will not unenroll the device?
A factory reset will remove enrollment, but it erases everything. If the device has FRP lock, you may not be able to reset it without the original account password. Contact Google support with proof of ownership if you are stuck.
Can I use the device while it is enrolled?
Yes, but the organization controls what you can do. You cannot change settings, install most apps, or access certain websites. If you need full control, you will need to remove enrollment.
How long does unenrollment take?
If you have the administrator password, it is when ready. If you ask the organization to unenroll it, it usually takes a few days to a week. A factory reset takes about 10 to 15 minutes.