School-issued devices: what you control (and don’t)
School-owned Chromebooks and iPads follow school policies, not yours. Here’s what you can change and what to ask for.
What you actually control on a school-issued device
If the device is owned by the school, the school’s IT admin configures policies through an MDM (Mobile Device Management) system. You typically cannot override their settings. You can:
- Apply your home network’s DNS filtering when the device is on your WiFi.
- Ask the school to tighten their MDM policies.
- Monitor usage by asking your child to walk you through recent tabs and apps.
- Set usage rules at home (no school device in the bedroom, for instance).
What you can’t control
- Installing your own parental-control software. Most school MDMs will block it or remove it on next sync.
- Changing the device’s Google / Apple / Microsoft account.
- Deleting the school’s monitoring profile without violating your school use agreement.
What the evidence says about school monitoring software
Roughly half of US K-12 students are now covered by monitoring software from vendors such as GoGuardian, Gaggle and Lightspeed, which scan searches, documents and messages for signals of self-harm, violence or bullying. It is worth knowing what the independent research has found, because schools rarely volunteer it.
- False positives dominate. Analysis of GoGuardian described it as a “red flag machine”, with tens of thousands of students flagged for viewing benign, educational or informative material.
- The errors are not evenly distributed. Flagging has been found to fall disproportionately on disadvantaged, minority and LGBTQ students.
- Effectiveness is unproven. No comprehensive independent study has shown these tools increase student safety, and vendors keep the workings of their AI models confidential, which makes them hard to scrutinise.
- The data itself has leaked. A Seattle Times and Associated Press investigation found sensitive, unredacted student documents stored without password protection, reachable by anyone with the link. Some deployments have also let staff view student webcams without consent.
Questions to ask your school
- What content categories does the school filter? Does it apply off-campus?
- Does the school use activity-monitoring software like Gaggle, GoGuardian, Lightspeed, Bark for Schools? What does it flag?
- Who receives those alerts, and when does the parent get notified?
- Are student search histories logged? For how long?
- Is AI-assisted monitoring (e.g., LLM-based flagging) being used?
- What happens at home — does the filter still apply?
- If I want tighter filtering at home, what’s the approved way?
Printable version
Take our school-device questions sheet to your next parent-teacher night.
Keep home protection at home
Even if the school device is locked down on its own, a home network DNS filter gives an extra layer. See the router guide.
Common questions
Can I install parental controls on my child’s school Chromebook?
Generally no. The school owns the device and configures it through an MDM system, and most school MDMs will block your software or remove it at the next sync. You also cannot change the device’s Google, Apple or Microsoft account.
What can I control on a school device?
More than it first appears. You can apply your home DNS filtering whenever the device is on your WiFi, ask the school to tighten its MDM policies, set house rules such as no school device in the bedroom, and ask your child to walk you through recent tabs and apps.
What should I ask the school?
Which content categories are filtered and whether that applies off-campus; whether monitoring software such as Gaggle, GoGuardian, Lightspeed or Bark for Schools is in use and what it flags; who receives those alerts and when parents are told; whether search histories are logged and for how long; whether AI-assisted flagging is used; and what the approved route is if you want tighter filtering at home.
Is there anything I can do that always works?
Home network DNS filtering. Even a fully locked-down school device gets an extra layer whenever it is on your WiFi, and it requires no cooperation from the school to set up.