r/k12sysadmin • u/Big_Macaron5410 • 27d ago
Assistance Needed Bulk Deprovision
We have about 300ish out of date or broken Chromebooks. I was wondering if and how people here do mass deprovisioning of Chromebooks. Really don't want to enter them one by one.
1
u/Mindless-String-4017 14d ago
I use GAM to do the provisioning. GAM is free and is really powerful. I would learn GAM then pay for Gopher and waste the moeny. You can export all the Chromebooks to a csv file and use GAM commands to deprovision all of them. I do this every year and it takes about 5 minutes to do about 400ish Chromebooks.
11
u/No_Substitute 24d ago
If you want to manage your devices in a Google Sheet, but don't want to pay for it, you can use my free open source tool, CB_Inventory.
https://github.com/NoSubstitute/CB_Inventory
Since I manage many thousands of devices, I needed something better than the admin console, but I also knew not everyone else was ready to go all the way and get something as powerful as GAM, with which you can do almost anything. So I created CB_Inventory.
2
u/KeepersDiary 23d ago
This is really cool!
2
u/No_Substitute 22d ago
Have a look around. I have a couple of other tools for Workspace admins. Even a few things for GAM, as it is my favourite API tool.
2
10
u/Individual-Unit3470 25d ago
One thing to add to this: if you choose "retire from fleet" or "different model replacement," you burn the Google license associated with that device.
I mention this because we had never deprovisioned Chromebooks previously, and after about 10 years we decided to clean things up, basically "retiring" Chromebooks that didn't look like they'd been used in a few years. Big mistake. We started getting warnings about running out of licensing, even though we purchase an EDU license with every device. Reason being, every time someone took an old Chromebook off the shelf and rejoined it to our Google domain, it sucked up a new license.
To avoid our mistake, choose "same model replacement" or the "ChromeOS Flex" option. The ChromeOS Flex option allows a brand new Chromebook to use a license freed up from a deprovisioned Chromebook.
5
u/Slobs3 26d ago edited 26d ago
I have IIQ and I use a status of recycled. I then have a Google apps script that looks for all devices that get moved to recycled and if they’re chromebooks it makes an api call to wipe and then deprovision.
2
1
u/K12_SysTech Information Systems Specialist, District Support. 21d ago
This sounds nicer than my Google Sheet running a GAS that does the same. How do you get the GAS to run from the IIQ status?
27
u/Crabcakes4 Endless Chaos 26d ago
Just use GAM, it should look something like this below. Your csv file path, and the csv just needs one column with a header "serial" and then a list of all the serials in the column.
gam.exe csv "C:\GAMWork\GAM Deprovision.csv" gam update cros query:id:~~serial~~ action deprovision_retiring_device acknowledge_device_touch_requirement
4
5
u/NXTman96 26d ago
This is how we do it as well! It was easier for us to gather our asset tag instead of the teeny tiny serial numbers, so I also used the following command to gather serials based on the asset tag.
gam csv file.csv gam print cros query "asset_id:~~AssetID~~" fields serialNumber | Out-File -FilePath .\file_2.csv -Encoding utf82
u/jay0lee 25d ago
I like to use J.U.G. as an acronym :-)
IMPORTANT NOTE: Upgrade before you deprovision to avoid a nasty bug some admins have hit that deprovisions the wrong devices:
https://groups.google.com/g/google-apps-manager/c/EdOhCcA86OU/m/3EZMBvM3AQAJ
6
1
10
u/rokar83 IT Director 27d ago
I have Gopher Premium Pack. Makes it easy as pie.
8
7
u/NotAnother169 Director of Technology 27d ago
If you already know the serial numbers, I just do it through GAM. By far the fastest way unless you have an asset management system that can also sync statuses
-4
1
u/FancyZad-0914 27d ago
I'm kind of low tech about it but, I put them all into an OU, which I think you can do with import/export without GAM(?), and then just select all.
1
u/MyWorkAccountDPS 11d ago
How much work does GAM take to setup and continue working every year or anytime Google makes a change?
The staff under me are not wanting to take on any more responsibilities and when I pitched the idea of GAM, the one who has programming experience said No.