Confirm Theft Recovery Setup
Before troubleshooting an individual device, confirm the following:- A dedicated Theft Recovery organizational unit (OU) exists in Google Admin Console.
- The Theft Recovery extension is installed only on that OU.
- GoGuardian Admin is authorized to access Google Admin Console.
- Managed Chromebooks are synced to GoGuardian Admin.
Find a Missing Device or Organizational Unit
If a device or its Theft Recovery OU does not appear when you click Find Devices, GoGuardian Admin has not yet synced the current state of that device or OU from Google Admin Console.- In Google Admin Console, confirm the device and its OU exist and are named the way you expect.
- In GoGuardian Admin, go to Theft Recovery.
- In the three-dot menu, select Sync Devices.
- Click Sync Google Admin Console.
- Click Find Devices and search for the device again by serial number or asset ID.
- Verify the result: The device and its current OU appear in the Find Devices selector.
If your organization recently moved grade levels, schools, or OUs, sync before you start or end Theft Recovery on a device. Stale OU data is the most common reason an expected destination OU does not appear.
Resolve an Undetected Device
An Undetected device has not reported activity through the Theft Recovery extension since it moved to the Theft Recovery OU.- Confirm the Chromebook is in the dedicated Theft Recovery OU in Google Admin Console.
- Confirm the Chromebook is enabled in Google Admin Console.
[TODO: verify — whether a disabled Chromebook can still launch the managed guest session Theft Recovery depends on. Traced the full path in goguardian/Development, not just one search: the Theft Recovery extension's entry logic checks only for a valid Chrome enterprise device ID with no enabled/disabled check anywhere in the extension, and the backend stores the device's Google-assigned status purely as metadata that no Theft Recovery UI component reads or acts on. GoGuardian's own code never gates on device-enabled state, so this is a ChromeOS/Google Admin Console device-management behavior with no GoGuardian code in the path. Confirm with the product team or Google's own device-management documentation.] - Restart the Chromebook after moving it to the Theft Recovery OU. A device only launches the Theft Recovery extension after it reboots in the OU.
- Connect the Chromebook to the internet and let it sit in the managed guest session.
- Refresh Theft Recovery and open the device record.
- Verify the result: The status changes from Undetected to Detected, and the Device Details report becomes available.
Fix an Unknown or Unmatched Device Record
Some records in the Theft Recovery device list no longer match a real Chromebook in Google Admin Console. When this happens, GoGuardian Admin cannot open the device’s details, and the row’s View action is disabled with the message “Try syncing device information or mark as Recovered/Unrecoverable.”- In GoGuardian Admin, go to Theft Recovery and click the three-dot menu.
- Select Sync Devices, then click Sync Google Admin Console.
- Refresh the device list and check whether the record now shows a serial number and asset ID.
- Verify the result: The record resolves to a real device, or it does not.
Stop a Device From Returning to Theft Recovery
If a device you already marked recovered shows back up in Theft Recovery, something moved it back into the Theft Recovery OU in Google Admin Console.- Confirm the destination OU exists in Google Admin Console.
- Sync Google Admin Console so GoGuardian Admin sees the destination OU.
- In Theft Recovery, select the three-dot menu on the device and click Mark Recovered.
- Choose the destination OU and confirm the move.
- In Google Admin Console, confirm the Chromebook moved out of the Theft Recovery OU.
- Restart the Chromebook so it picks up the policies assigned to the destination OU.
- Verify the result: The device appears as Recovered in the Archived section and does not return to the Active section.
A Google Admin Console OU rule that reassigns devices independent of GoGuardian Admin would be Google’s own device-management automation, outside GoGuardian’s systems, and cannot be confirmed or ruled out from here.
Mark a Device Unrecoverable
Use Mark Unrecoverable for a device you have given up on finding, such as one confirmed stolen and not expected to return. This is different from Mark Recovered, which is reserved for a device that is back in your possession.- In Theft Recovery, locate the device in the Active section.
- Select the three-dot menu on the device and click Mark Unrecoverable.
- Confirm the action.
- Verify the result: The device moves to the Archived section with a status of Unrecoverable.
A device already marked Recovered cannot also be marked Unrecoverable, and the reverse is also true. If you marked a device Unrecoverable by mistake and it is later found, contact GoGuardian Support to help you get the record corrected.
Interpret Device Status and the Last Updated Column
Theft Recovery uses 4 statuses:- Detected: The Theft Recovery extension is reporting activity, and the Device Details report is available. Listed in the Active section.
- Undetected: The Chromebook has not reported activity since entering the Theft Recovery OU. Listed in the Active section.
- Recovered: An administrator marked the device recovered. Listed in the Archived section.
- Unrecoverable: An administrator marked the device as not expected to be found. Listed in the Archived section.
Assign Theft Recovery Access Without Full Admin Access
GoGuardian Admin’s Full Access and Filter & Monitor tiers both include Theft Recovery access. Monitor Only does not. If a staff member only needs Theft Recovery, build a custom role scoped to just that permission instead of assigning one of the broader tiers:- In GoGuardian Org Management, create a new role using the general Role-Based Access Control steps in User Roles and Permissions.
- Select the Admin tab in Manage Roles.
- Under Devices, set Theft Recovery to View or View and Edit, and leave every other permission at No Access.
- Save the role, then assign it to the staff member.
The Admin tab in Manage Roles depends on custom role management being enabled for GoGuardian Admin on your organization. If you do not see it, contact GoGuardian Support to ask about enabling it.
Contact Support After Theft Recovery Troubleshooting
Contact GoGuardian Support when:- A device stays Undetected after you confirm setup, sync, restart, and internet connectivity.
- A device record does not resolve to a real Chromebook after a sync, and you cannot tell whether to mark it Recovered or Unrecoverable.
- A recovered device repeatedly returns to Theft Recovery.
- The correct Google Admin Console OU does not appear after a sync.
- A device was marked Recovered or Unrecoverable by mistake.