Deployment

Device enrollment

A high-level look at how devices connect to your organization and become manageable in the portal.

How enrollment works

Deployment profiles

A deployment profile is the reusable template that defines how devices in a group enroll. It carries the organization settings that a deployment package applies to each device.

Enrollment keys

An enrollment key ties a device to your organization during setup. The deployment package carries it so the device can register against the correct organization without a person signing in on the device.

Device registration

Installing the managed profile/policy force-installs the InputGuard extension (production), and running the enrollment script establishes a stable device identity and registers the device with InputGuard. Registration is what links the extension to your organization — the user does not install the extension manually.

Organization deployment

InputGuard deployment packages install the extension and enroll devices for you. Users do not need to visit the Chrome Web Store or install the extension manually.

How devices appear in the portal

Registered devices show up in the portal’s Devices page, where administrators can see each device and its enrollment state. This is the confirmation that deployment succeeded.

Policy assignment basics

Once a device is enrolled, you can assign managed policy to it. Policy controls which AI sites are protected, which detection categories are active, and what action each data rule takes.