メインコンテンツにスキップ

This Chromebook is one of the many popular laptops given to students by schools. It charges via USB C and has 2 USB ports.

3回答 すべてを表示

How to delete all wipe clean all administration lock from drive

Delete all administration hardware from Dell Chromebook 3100 2/1

この質問に回答する 同じ問題があります

この質問は役に立ちましたか?

スコア 4
2 件のコメント

idk i just want this off

さんによる

me too it does get really boring tbh fr

さんによる

コメントを追加

4件の回答

最も参考になった回答

If your cromebook is a part of a school district this is a bad idea, you could get in a lot of trouble, plus those rules are there for a reason.

このアンサーは役に立ちましたか?

スコア 4

3 件のコメント:

no, so you don't play games and stuff

さんによる

"That reason is to make sure these devices can never be reused."

@guardian10 No, it isn't. It's there to secure the asset as a school owned device if it's lost or stolen (the filtering is a bonus, and basically required by law, see CIPA :/), but they often forget to remove it. It's like BIOS passwords on Dell surplus; I know how to deal with it, but it's fixable. Not on HP or Lenovo. I don't discuss how to break BIOS passwords, so don't ask.

Same issue w/ Computrace -- lazy admins forget. But Absolute will remove it if it's very clearly an old hobbyist purchase, like my Quadro 160M E6400. If I know ahead of time, I know I need to call Absolute, then setup the laptop, then let it sit.

I got my kicks in against school IT in middle and high school and got my chops early; then went straight for certs and work. The stunts I got away with make me beyond qualified to debunk this.

さんによる

This was a very good post, I was about to delete my administrator but then I read this.

Thank you!

さんによる

コメントを追加

Author's note: I was the kid in high school who openly made deals with the right people to work around the web filter. I know how to deal with local management like MS AD and Apple Remote Desktop and have seen how remote management has evolved. I'm not new to this realm. Once I've written off something as unbreakable, it's not practical.

The MDM is tied to Google using the device S/N and is enforced with a local firmware lock. Unless you reflash the firmware from scratch (which is nearly impossible without a dump, as Google does not publicly release the reference BIOS files used by all of the Chromebook OEMs), find out how to reflash it (each OEM does this differently and this is also confidential beyond Google's public-facing info) and change the serial number (EEPROM programmer required with Chromebooks newer then the "CR-48" generation; Google fixed the CLI exploit and added an option to block the developer mode on the newer models even with the WP screw removed) there's no way to remove it without a new motherboard. It's effectively the same as MDM like Apple Business Manager and Jamf, which are tied to a provisioning ID unique to the machine and S/N it is associated with.

Suppose there was a way to do this without losing the Chromebook BIOS and make it like new without custom hacking like flashing a standard PC BIOS (and losing Chrome OS). Do you not think I'd break into a few of the reasonably new ones to mock people who think these are secure as a "trophy" and laugh at how much of it is security theater, given my history of making deals in high school and forcing sysadmins on power trips to take an L? And I laughed at the security of Chromebooks with one of the teachers I know who would expect me to do it? I did this in high school for sport to play Halo CE at school LAN party style on WinXP to work around the district WAN port blocking while making the web filter look like the joke it is. The only way this gets removed is by the ORIGINAL OWNER unless you change the motherboard. School surplus is usually more trouble than it is worth; they're either EOL or abused in many ways. Looking at it wrong could break it unexpectedly, and you now need to rebuild a dirt-cheap surplus laptop at the same price as a replacement unit.

If anyone is qualified to debunk this, it's someone who knows what they're doing, has done a few of the dirty jobs, and has hands-on time getting it done. Simply put, Anything anyone pushes as a "fix" to remove the Chromebook MDM is either referring to a "CR-48," which is CLI exploit-friendly (as long as developer mode and terminal aren't pre-blocked), AND ALL MODELS USING IT ARE EOL NOW, or selling you a lie. The solution is a new motherboard, the end.

このアンサーは役に立ちましたか?

スコア 2
コメントを追加

Did you buy the computer?

Update (11/20/23)

If not and you still are in school and the computer is still on the property of the district, you could get into a lot of trouble for this type of action.

このアンサーは役に立ちましたか?

スコア 0
コメントを追加

reset the cromebook

このアンサーは役に立ちましたか?

スコア 0

1件のコメント:

what if they dont know that doing this could get you into a lot of trouble for reseting the computer?

さんによる

コメントを追加

回答を追加する

Paul bell さん、ありがとうございました!
統計データ:

過去 24時間: 3

過去 7 日: 18

過去 30 日: 80

今までの合計 1,546