# User Restrictions

Last updated: August 14, 2026

This page explains how to configure Chromebook user restrictions in a mobile device management (MDM) environment, particularly useful for shared device scenarios. Unlike device-level policies, user restrictions follow the individual user across any Chromebook they sign in to. Administrators can control settings such as Incognito Mode, Home button visibility, Task Manager usage, printing, screen locking, and external storage device access, ensuring consistent policy enforcement while allowing multiple users to share the same device without conflict.

In certain cases such as a shared device environment, you would want the certain restrictions to be only associated to a user rather than a device. This ensure other users can also utilize the same Chromebook without any hindrance. Associating the restrictions to the user ensures, any Chromebook utilized by this user will automatically have the restrictions applied.

## Profile Description

| Profile Settings | Description |
|---|---|
| Incognito Mode | Allow/Restrict usage of Incognito Mode on Google Chrome browser. |
| Home Button | Allow/Restrict usage of Home button on Chrome OS devices. |
| Terminate process using Task Manager | Allow/Restrict usage of Task Manager to terminate processes. |
| Printing | Allow/Restrict usage of Printers with Chrome OS devices. |
| Allow users to lock device screen | Allow/Restrict users from locking the device screen. |
| Mount external storage device | Allow/Restrict storage device from being connected to the device. |

## Frequently Asked Questions

- **How do Chromebook user restrictions differ from device restrictions in ManageEngine MDM?** User restrictions follow the individual user across any Chromebook they sign in to, while device restrictions apply to all users on a specific device regardless of who is signed in.
- **Are Chromebook user restrictions useful in shared device environments?** Yes, user restrictions are particularly useful in shared Chromebook environments where different users need different access permissions and device capabilities.
- **What behaviors can be restricted using Chromebook user restrictions?** Administrators can restrict access to browser settings, extensions, downloads, printing, incognito mode, and other Chromebook features through the User Restrictions profile in ManageEngine MDM.