The Complete Guide on Monitoring and Parental Control on a Chromebook and Disabling Incognito Mode - Part 1

[This is a 5-part series. Here are links to Part 1, Part 2, Part 3, Part 4, and Part 5.]

My teenage daughter uses a Chromebook for her school work and assignments. Chromebook is a lightweight laptop computer running Chrome OS. Here lightweight is both in terms of the computing power and the actual weight. The biggest benefits of a Chromebook is that: 1. It is very cheap!! (Such as the one below for only $139.91 on Amazon.) 2. It has long battery life (11+ hours). 3. It is very light (Solid State Drive) and also durable (Solid State Drive).

As a responsible parent, I want to make sure that when my teenage daughter uses the laptop, she is not wasting time watching online videos, online window shopping, access inappropriate contents, or wasting time on social media. So in this post I'll share my findings on the many ways of monitoring and parental control on a Chromebook.

Problem Statement:

Know what web sites my daughter wastes time on when she is at home with a school managed Google Suite account (because her school has monitoring of their own) without me spending too much time or spend any money on new hardware devices.

Option 1: Control at the router and network level

1.1 Use DNS Servers

DNS stands for Domain Name Server. The server is responsible for translating easy to memorize domain names (such as lannyland.com) to an IP address (such as 67.222.38.97), so your app or browser can find the actual web server hosting the service. Without a DNS server, your device would have no idea where to go when you put in a web address. All your phones and computers are configured to use a DNS server so they can function correctly. In most cases, the DNS server is managed by your Internet Service Provider or a big tech company that offers free ones (e.g., Google).

Since a DNS server is the translator in between, it can do two things:
1. Log what translation queries it received, and
2. Decide if a translation should be made.

For parents, this means:
1. You can see what web sites and web pages were visited in logs.
2. Use a filter service on the DNS server to deny translation requests for bad web sites by their names (URLs).

If you are an expert in managing computer networks, you can run your own DNS server at home. It has been a long time since I ran full suite of networking services at home, and I don't want to spend the time to set all these up at home. So not a solution for me.

Another option is to use free services like OpenDNS (they have paid services too). You will need to sign up an account with them and then configure your system(s) to use their DNS servers.

Pros:

• Even the free version lets you see stats and logs of domains visited (only for 14 days).
• With the free version you can also block individual domains or user existing filters to block websites by category (e.g., Social Media Sites).

Cons:

• You need to know your router's IPV4 address at your ISP in order to create the network in OpenDNS dashboard. It's actually really easy to find it. Simply type "what is my ip address" in your Google search box while connected to your home network and Google will tell you. Your IPV4 address is most likely a dynamic IP address (vs. a static IP address), which means it can change from time to time (luckily, not very often). OpenVPN's solution is to install a client on your computer that will automatically update OpenVPN when the IP address changes. But you will have to install that on a different computer, because there is no client available for Chromebook. Or, just update the IP address in OpenDNS settings when it changes.
• If you set your router to use OpenDNS's DNS servers, you can't tell who visited the web sites (e.g., both my wife and my daughter visit shopping web sites). So instead, you should set up custom DNS just for the computer you want to monitor. This also means it works best when you only need to monitor one kid.
• This only works if the device you want to monitor connects to your home network.
• Stats are logs are only made available to you once each hour with a big delay (hours). If you don't need to know very quickly what your kids are browsing, this might be a solution for you.
• Stats and logs are actually not very informative:
• There's no timestamp on when a domain is visited and how much time is spent there. 
• The smallest range is a day, so you can't pin point domains visited by hour.
• Logging is also at domain/subdomain level, so there's no info on what web pages were visited.
• All the domains visited by scripts in web pages (such as auto ads, tracking, etc.) are also tracked, creating a long list of entries. For example, during the 6 hours I tracked, my daughter visited 724 unique domains, and during the peak hour, she visited over 500 unique domains (see screen captures below). This makes finding what websites she really visited a very time consuming task.

Example of useless domains tracked. Note the number of entries.

Example graph for unique domains visited during a 6-hour period.

If you think this meet your parental control needs, go to the links below to get more information. But it is clearly not a satisfactory solution for me.

Differences Between the Free and Paid Service Plans
How to Use OpenDNS on Your Router, PC, Tablet, or Smartphone
How to Change the DNS Server on a Chromebook


That's it for today's post. Make sure to read:

Part 2 of the Complete Guide

BTW: The easiest way to remember my blog address is http://lanny.lannyland.com

Daily Battles: Make Google Mesh WiFi and Google Home (Mini) Work Together

Google Mesh WiFi is a great solution for homes that have bad or spotty WiFi signals. You can get as many nodes as you want and then put them in different parts of your home. They mesh together and provide good quality WiFi coverage throughout your home.

You can also use the Google WiFi app (only available on your smart phones) to manage WiFi connections to all your devices and schedule when they can have WiFi access or filter unsafe, inappropriate contents for your children.

It supports typical router functionalities such as port forwarding, static IP, prioritized streaming, and more. However, it doesn't log what websites your WiFi devices are visiting.

Google Home series of devices (Google Home, Google Home Max, Google Home Mini, Google Hub) are voice assistant devices similar to Amazon Echo series. You can ask them to look up information such as knowledge facts, weather, traffic, news, or control smart home devices with your voice (by the way, Vivint products such as thermostat, locks, lights, etc., are all compatible with Google Home). But most people use them mainly for music and alarm/timer. My kids like to use them to check their homework.

Since I have both Amazon and Google voice assistants, I only have 3 Google Home devices.

Both Google products are useful. But when I got my Google Mesh WiFi and tried to get my Google Home devices connected to my Google Mesh WiFi, it became a disaster.

Google Mesh WiFi supports both 2.4GHz and 5GHz WiFi signals. One "nice" feature of Google Mesh WiFi is that for both frequencies, the WiFi network you create will only have one name. This eliminates the confusion when you try to add devices to your home WiFi network because there is only one network to connect to. However, this also created big problem when connecting Google Home devices, because there was no way to specify if you want to connect a device to the 2.4GHz network or the 5GHz network. After I successfully connected my main Google Home to my Google Mesh WiFi, installing Google Home mini turned disastrous. Following the app flow to install mini would get stuck and no error message is given on why it would get stuck.

The funniest part was that when I called Google Home support line, the support staff actually told me that Google Home devices are not compatible with Google Mesh WiFi! Come on Google, you can't even make your own products work together?

Of course, that customer service representative just didn't know what he was talking about, and the knowledge base he used to search for solutions didn't return a viable solution. There is actually a way to get them working together!

The core problem with the set up is really that all the Google Home devices need to be on the same WiFi frequency. Of course, I wish Google would have either:

1. enabled Google Mesh WiFi to take care of this, or

2. allowed me to specify which WiFi frequency to use when connecting Google Home mini to my WiFi network, or

3. at least returned informative error messages on the limitation.

After hours spent troubleshooting to identify this problem, I finally found the solution: you can force all your Google Home devices to connect only to the 2.4GHz WiFi network.

The benefit of 5GHz WiFi is that you can get higher throughput, meaning you can transfer data much faster. However, the benefit of 2.4GHz WiFi is that the WiFi signal can travel much further. Typical range for 2.4GHz WiFi signal is 150 feet (46m) indoor and 300 feet (92m) outdoor. The range for 5GHz is only one third of that. So in order to make sure you only connect to the 2.4GHz WiFi network, you just have to make sure you are far away from your router (or your Google Mesh WiFi nodes).

So there I was, outside my home a long distance away from my router with a long extension cord on a code rainy night way past midnight, using my smart phone to make sure I could only connect to my 2.4GHz WiFi and not my 5GHz WiFi, and then one after another, installing my Google Home series devices. But at least I proved the Google Home CSR was wrong! Google Mesh WiFi and Google Home devices DO WORK TOGETHER!

Well, once I got them working, they worked pretty well since, and I never had to reconfigure them again. So if you were also struggling to get them working together, now you know how.

Best luck with all your daily battles!

BTW: The easiest way to remember my blog address is http://lanny.lannyland.com