My kids' school district provides district-managed chromebooks. I stuck them on their own walled-off VLAN. Out of sight, out of mind. Any time my kids come to me with an issue on their chromebooks, I point them back to the school's IT guy. Trying to instill the "this thing belongs to the school, therefore any issues with it are the school's problem" mindset. I'm not rude about it, just very frank.