I have a kid who needs to have Internet usage restricted heavily & frequently. If the school is using a Google account for the students, you can do this: 1. Powerwash the Chromebook. (You will have to find a way to login once to do this. The school IT people should definitely be able to access his password if it is a school-issued email account. 2. Create a personal Google account for your son, supervised by your Google account. 3. Login to the Chromebook with the personal account, and use Family Link (the Google parental supervision tool) to: Restrict profile creation. Restrict guest browsing. Restrict websites and apps. You can also lock & unlock devices from Family Link. For all of these steps, it is pretty easy to find instructions on the internet. It takes a little time to set up, but it is worth it for me to be able to have a completely school-focused device that I can shut off at anytime. Hope this helps, good luck!