Device Detective

Device Detective, a part of the Lightspeed Systems Bundle for Chrome, is our solution for finding lost or stolen devices. Device Detective allows you to track and locate lost and stolen devices. Device Detective utilizes Geolocation to locate lost or stolen devices that have been moved into a “lost/stolen” OU group in Google Admin Console.

Prerequestite: Device Detective will only work with enrolled Chrome devices.

Using Device Detective

You should immediately use Device Detective after a device has been identified as lost or stolen.

1. Log into the Lauch dashboard as a District admin and open Classroom Orchestrator.


2. From the Schools page, click on the Organization Options dropdown menu and select Settings.


3. Scroll down to Device Detective and enable it by toggling the enable switch.


4. Once Device Detective is toggled on, you can to enter a custom message into the Recovery Message field. This will be the message displayed on devices placed in recovery mode. You will also see App Id and App URL fields. You will need these later in the setup process. Remember to click Save.


5. Log into your Google Admin Console. Navigate to Users.


6. On the left-hand menu, click on the dropdown menu to the right of your organization and select Add sub organization.


7. Name the new sub organization Stolen Devices. Click Create Organization. 


8. Navigate back to the Google Admin Console dashboard and click on Device Management.


9. From the left-hand menu, select Chrome Management.


10. Click on App Management.


11. Click on the dropdown Settings menu on the top right and select Add custom app. 


12. On the Add custom app page, you will need to copy the App id and App URL from step 4 (your Classroom Orchestartor Settings page) into the ID and URL fields. Click Add.


13. On the app page, click on User Settings.


14. Click on the Stolen Devices organization you created in step 7. Click the Override command under each setting so that it changes to Inherit in order to enable toggling it on/off. Enable the Allow Installation and Force Installation settings. Click Save.


15. Navigate back to the app and now click on Kiosk Settings.


16. Navigate to your Stolen Devices organization and enable the following settings: Install automatically and Allow app to manage power. (Remember to click Override under each setting to change it to Inherit in order to be able to toggle them.) Click Save.


17. Scroll down on the Kiosk settings page and click on device settings page in order to navigate to Device Settings.


18. On Device Settings page, navigate to the Sign-in Settings section. Select Do not allow guest mode under the Guest Mode category. Select Do not allow any users to Sign-in under the Sign-in Restrictions category.



19. Scroll down to Kiosk Settings. Select Do not allow Public Session Kiosk under Public Session Kiosk and select the app you recently installed under Auto-Launch Kiosk App. 


20. Scroll down to Power & Shotdown. In the field for Scheduled Reboot input the number 1. Click Save.


21. Navigate back to your Google Admin Console and click on Device Management.


22. Click on Chrome devices. Select the lost or stolen device by checking the box to the left of the device information. Click the Move to dropdown menu and select Stolen Devices. Click Move to Organization. 



23. You can now find the device by navigating to Stolen Devices in the left-hand navigation menu. From here, click on the device Serial Number. 


24. Scroll down and click on System Activity and Troubleshooting.


25. Scroll down the Reboot Device and click REBOOT NOW. This will reboot the device and force the logout/login event.


Once the device is rebooted, it will show the following screen.


Clicking on Let us know opens up a field where users can add their e-mails and a custom message that will show up in Device Detective.

26. You will now be able to see the device in Device Detective. Log back into Classroom Orchestrator s a District admin and click on Device Detective. You will see the device you just added to your Google Admin Stolen Devices OU in the list. Click on the device name.

The device will show a “new” icon next to the name if it’s a new lost/stolen device. The device will show an envelop icon next to the name if the user clicked on Let us know on the device and imputed a custom message.


27. The device details page will open up on the right-hand side of the screen. Here you can:

  • a. Edit the device name by clicking the edit icon. We recommend that you edit the device name in order to be able to identify it in future use or to be able to easily distinguish between two or more lost/stolen devices.
  • b. Remove the device from the list by clicking the Remove From List button. This will remove the device from Device Detective. Use this function once you have found a lost/stolen device.
  • c. See the device’s geographic location. You can zoom in on the map in order to pinpoint exactly where the device is.
  • d. View the device’s location and IP address history.

If a user opts to click the Let us know option on the “this device has been reported lost or stolen” block page and writes a message, you will also see that message on this page.


27. Once you have located the device, remove it from your Google Admin Console Stolen Devices OU. Navigate back to Device Management -> Chrome Devices. Locate the device within your Stolen Devices OU, check the box next to the device, click the Move to dropdown menu, and move the device back to the OU where it belongs.


Best Practices

  • a. In the case of more than one lost/stolen devices, perform the above steps individually for each device, one by one. Once a device has been moved to the Stolen Devices OU, has all the correct settings set, and appears in Device Detective, rename the device. Repeat this step with each new device. This will allow you to easily distinguish between devices.
  • b. District Admins are encouraged to work with local law enforcement to retrieve stolen devices and not to attempt to recover them on their own.