SkieCan students change the Chrome search engine on a managed device?
No. Skie locks Chrome's default search engine to Google, where SafeSearch is forced on, so students cannot swap in a search site that ignores the filter. The setting is greyed out or hidden and is on by default for managed Chrome.
Search is where most filtering gets tested. If a user can add or select another search engine, SafeSearch on Google no longer helps, because they would simply not use Google.
Skie sets Chrome's default search provider by policy and disables changing it. Google is the chosen engine because SafeSearch can be forced on it and because it is available in any country where the device has Google Play services. The address bar, new tab page and search widget all use it.
This rule pairs with others. SafeSearch is forced on, the safe-sites filter is on, and the filtering DNS blocks adult domains whether the student searches or types a URL. Other browsers with their own search settings are never allowed on the device, so there is no second search box to configure.
One thing to explain to staff: the lock does not stop a student typing a different search site's address. That is a web filter question. The filtering DNS decides which domains open. An alternative search domain in an unsafe category is blocked at that layer.
Admins do not need to configure anything beyond having the Chrome rules in the group's policy. The effective policy view for the group shows the search engine as locked, and compliance read-back confirms it on the device.