Google is rolling out ChromeOS 150 to compatible Chromebooks, introducing new Gemini-based classroom management tools and two enterprise policies for local PIN and password authentication.
According to Google’s official release notes and Chrome Unboxed’s coverage, this update also marks the last release before Chrome apps stop working in kiosk mode.
The update is primarily targeted at managed education and enterprise settings and includes a fixed deprecation plan for older Chrome apps and older Chromebook Flex hardware.
The release notes provide additional details of upcoming changes for ChromeOS 151 and 154 that will affect update eligibility and version numbering.
Gemini in-class tools and new local sign-in policies in ChromeOS 150
The latest major update to ChromeOS 150 introduces Gemini In Class tools, a new set of classroom management features integrated with Google Classroom.
Teachers now have the ability to limit student devices to Gemini’s Guided Learning mode during class, which limits interaction with the assistant to a focused learning experience rather than open-ended questions.
Google states that this integration works across all Google Classroom features. Teachers can lock students’ screens on Gemini Notebooks, formerly known as NotebookLM, for research tasks, restrict device use during test preparation, or prevent students from going beyond Google searches. These controls are accessed through the existing Class Tools interface within Google Classroom.
ChromeOS 150 also adds two new enterprise policies that allow local PIN and password authentication on managed Chromebooks. Administrators can customize the complexity requirements to meet their organization’s security standards. Both policies are configured through the Google Admin Console.
Additionally, Google is automatically migrating a small group of managed enterprise and education users who added accounts and set up local PINs through the end of June 2026.
Affected users will be reverted to standard online password authentication when signing in to ChromeOS 150. Google says these users will see a one-time informational screen upon sign-in, and no local files or profile data will be affected during the migration.
Chrome apps exit kiosk mode and separate web apps arrive
ChromeOS 150 is the last release to support older Chrome apps in kiosk sessions. Starting with ChromeOS 151, Chrome apps will no longer function in kiosk mode at all.
Organizations that rely on kiosk mode should plan to migrate affected workflows to Progressive Web Apps before the rollout of ChromeOS 151. Force-installed Chrome apps in managed guest sessions and standard user sessions will continue to work as before. This exclusion only affects kiosk sessions.
Administrators now have the option to allow users to manually install isolated web apps on managed devices. This feature is controlled by the new IsolatedWebAppUserInstallationEnabled policy, which is managed through the Google Admin Console under Devices, then Chrome, then Apps & Extensions, and finally User App Settings. The policy is disabled by default and needs to be enabled by an administrator before users can install isolated web apps outside the force-install list.
Google has also improved how ChromeOS validates and retrieves stored token handles against user accounts. The update aims to reduce unexpected re-authentication prompts on the login screen.
Administrator Checklist for Deploying ChromeOS 150 in Schools and Enterprises
IT administrators managing ChromeOS fleets in education or enterprise settings should check the following before deploying the update to their devices: Review all kiosk sessions for Chrome apps that should be replaced with Progressive Web Apps before ChromeOS 151 is released.
To decide whether to enable local PIN or password authentication, check the new local authentication policies in the Google Admin Console and set the appropriate complexity requirements:
- Notify managed enterprise and education users who set a local PIN at the end of June 2026 that their authentication method will revert to online password and they will see a one-time informational message on first sign-in.
- Decide whether to enable the IsolatedWebAppUserInstallationEnabled policy, which controls user-initiated installations of Isolated Web Apps.
- Confirm that documentation exists for deploying Managed Guest Sessions and Standard User Sessions Chrome apps, as these workflows are supported but are potential candidates for future deprecation.
Teachers using Class Tools should verify that Gemini Restrictions options appear in Google Classroom after a device update, as their availability depends on the ChromeOS version installed on each student device.
ChromeOS 151/154: Flex hardware limitations and further changes to version numbers
Google’s release notes also mention upcoming features planned for future versions. Accessibility will include an option for an inverted colored mouse cursor that allows users to see content beneath the enlarged pointer. No target version has been specified for this accessibility update in the notes referenced by Chrome Unboxed.
Starting with ChromeOS 151, updates will be blocked on non-certified Chromebook Flex devices that use older graphics hardware. This includes Intel and AMD graphics from 2010 and earlier, as well as Nvidia graphics from 2014 and earlier. Devices affected by this change will remain on their current ChromeOS version and will not receive further updates.
Since ChromeOS 154, the version number will increase by two every four weeks. This change more closely aligns with the Chrome browser update schedule. Administrators should consider this faster version cycle when planning to track compatibility milestones for testing purposes.
Google has not announced specific release dates for ChromeOS 151 and 154. The rollout of ChromeOS 150 is happening slowly, so not all eligible Chromebooks will receive the update immediately.
Thanks for being a Ghax reader. The post ChromeOS 150 adds Gemini to class tools, local PIN authentication, and eliminates Chrome apps in kiosk mode appeared first on gHacks.
