School-issued devices: what you control (and don’t)
School-owned Chromebooks and iPads follow school policies, not yours. Here’s what you can change and what to ask for.
What you actually control on a school-issued device
If the device is owned by the school, the school’s IT admin configures policies through an MDM (Mobile Device Management) system. You typically cannot override their settings. You can:
- Apply your home network’s DNS filtering when the device is on your WiFi.
- Ask the school to tighten their MDM policies.
- Monitor usage by asking your child to walk you through recent tabs and apps.
- Set usage rules at home (no school device in the bedroom, for instance).
What you can’t control
- Installing your own parental-control software. Most school MDMs will block it or remove it on next sync.
- Changing the device’s Google / Apple / Microsoft account.
- Deleting the school’s monitoring profile without violating your school use agreement.
What the evidence says about school monitoring software
Monitoring software from vendors such as GoGuardian, Gaggle and Lightspeed scans searches, documents and messages for signals of self-harm, violence or bullying, and it is close to universal: the Electronic Frontier Foundation reports that “nearly 88% of schools report that their district uses some form of student activity monitoring software”. It is worth knowing what the independent research has found, because schools rarely volunteer it. Most of what follows comes from EFF’s Red Flag Machine report, built from records obtained from school districts under state freedom-of-information laws — which means it is something you can cite at a school board meeting.
- False positives dominate. EFF found districts using GoGuardian “each receive thousands upon thousands of alerts every month based on keyword triggers”, and that larger districts, on the company’s own figure, may see as many as 50,000 warnings a day. The examples show why: a Texas student was flagged for opening the state’s own Driver Handbook, because it warns about cocaine, and another for reading Genesis on Bible.com, because Adam and Eve are naked in it.
- The errors are not evenly distributed. EFF devotes a section of the same report to the effect on LGBTQ content and content about historically oppressed people — so the material most likely to be blocked from a student is often the material about people like them.
- Effectiveness is unproven. No comprehensive independent study has shown these tools increase student safety, and vendors keep the workings of their AI models confidential, which makes them hard to scrutinise.
- The data itself has leaked. A Seattle Times and Associated Press investigation found sensitive, unredacted student documents stored without password protection, reachable by anyone with the link. Some deployments have also let staff view student webcams without consent.
Questions to ask your school
- What content categories does the school filter? Does it apply off-campus?
- Does the school use activity-monitoring software like Gaggle, GoGuardian, Lightspeed, Bark for Schools? What does it flag?
- Who receives those alerts, and when does the parent get notified?
- Are student search histories logged? For how long?
- Is AI-assisted monitoring (e.g., LLM-based flagging) being used?
- What happens at home — does the filter still apply?
- If I want tighter filtering at home, what’s the approved way?
Printable version
Take our school-device questions sheet to your next parent-teacher night.
Keep home protection at home
Even if the school device is locked down on its own, a home network DNS filter gives an extra layer. See the router guide.
Common questions
Can I install parental controls on my child’s school Chromebook?
Generally no. The school owns the device and configures it through an MDM system, and most school MDMs will block your software or remove it at the next sync. You also cannot change the device’s Google, Apple or Microsoft account.
What can I control on a school device?
More than it first appears. You can apply your home DNS filtering whenever the device is on your WiFi, ask the school to tighten its MDM policies, set house rules such as no school device in the bedroom, and ask your child to walk you through recent tabs and apps.
What should I ask the school?
Which content categories are filtered and whether that applies off-campus; whether monitoring software such as Gaggle, GoGuardian, Lightspeed or Bark for Schools is in use and what it flags; who receives those alerts and when parents are told; whether search histories are logged and for how long; whether AI-assisted flagging is used; and what the approved route is if you want tighter filtering at home.
Is there anything I can do that always works?
Home network DNS filtering. Even a fully locked-down school device gets an extra layer whenever it is on your WiFi, and it requires no cooperation from the school to set up.
When parental controls change
The controls behind this change more often than the advice does. Roughly monthly we send new guides, changes to controls like these, and scams worth knowing about.
Free. No ads, no affiliate links, and we never sell or share your address.
What was checked, and when. Monitoring findings against EFF verified against the vendor’s own documentation on 2026-09-08. Not reached in that pass: district policies.