Unenroll Enterprise-Managed Chromebooks
Chromebook · 2 min read
Understanding Chromebook Management
School-issued Chromebooks are typically enrolled in an enterprise management system that restricts what you can do. This guide explains methods to unenroll these devices.
⚠️ Important Warning
Before proceeding with any of these methods:
- These actions may violate your school's acceptable use policy
- Unenrolling a managed Chromebook could result in disciplinary action
- Your school may be able to detect unenrolled devices
- You might lose access to school resources
- These methods can potentially brick your device if done incorrectly
This guide is provided for educational purposes only. Use at your own risk.
Method 1: Sh1mmer
Sh1mmer is a special exploit that leverages Chrome OS's recovery mode to unenroll devices.
What You'll Need
- A USB drive (4GB or larger)
- Access to a computer where you can download and write images
- Your exact Chromebook board name
Steps to Use Sh1mmer
- Find your Chromebook's board name:
- Press Ctrl+Alt+T to open Crosh (Chrome Shell)
- Type "shell" and press Enter
- Type "cat /etc/lsb-release | grep BOARD" and press Enter
- Note the board name (e.g., "volteer", "hatch", "octopus")
- Visit a Sh1mmer download site:
- Check the official Sh1mmer website
- Or find alternative sources through search
- Download the correct Sh1mmer image for your board
- Use a tool like the Chromebook Recovery Utility to write the image to your USB drive
- On your Chromebook:
- Turn it off completely
- Hold Esc + Refresh (↻) keys, then press Power button
- At recovery screen, insert your USB drive
- Follow on-screen prompts from Sh1mmer
- Select "Remove Enterprise Enrollment" from the menu
Method 2: E-Halcyon
An alternative to Sh1mmer for some specific board types.
Similar to Sh1mmer but works on different firmware versions. Follow the same general steps but with E-Halcyon images instead.
Method 3: ChromeReset
A simpler but less reliable method:
- Power off your Chromebook
- Press and hold Refresh + Power for 10 seconds
- When the device reboots, immediately press Ctrl+Alt+Shift+R
- Select "Powerwash" and follow the prompts
- Attempt to set up as a personal device
Note: This method usually doesn't work on properly managed devices but occasionally works on misconfigured ones.
Alternative: Running Linux from USB
Instead of unenrolling, run a different OS temporarily:
- Enable Developer Mode (if possible)
- Create a Linux bootable USB (Ubuntu, GalliumOS, etc.)
- Boot from USB by pressing Ctrl+U in developer mode
- Use Linux temporarily without affecting Chrome OS
Resources and Additional Help
- Visit r/ChromebookUnenroll on Reddit for community support
- Join Discord servers like Mercury Workshop for specialized help
- Check YouTube guides for visual walkthroughs of these processes
What to Do After Unenrolling
If you successfully unenroll your Chromebook:
- Set up the device as a personal Chromebook
- Install Android apps from the Play Store
- Consider enabling Linux (Beta) for additional applications
- Make regular backups of your important data
- Be prepared to re-enroll if necessary for school resources