Troubleshooting → Device protection
The settings are greyed out — this is a school or work laptop
A device managed by an organisation will not let you change DNS, and that is working as intended. Haven has a real answer here, but it is not the DNS layer.
What is probably going on
Most likely
The organisation's management profile pins the network configuration. On a school Chromebook this is enforced by the school's Google Workspace policy and there is no local override.
Check this firstThe DNS fields are greyed out, or the change reverts immediately with no error.
- Install the Haven extension if the organisation permits extensions — it does not need DNS. Trust cards and page-level blocking work on their own.
- Ask the school what filtering they already apply; most apply a great deal, and the gap is usually evenings and weekends rather than the school day.
- For those evenings, protect the household's own devices and let the school laptop be the school's.
What Haven cannot fix here
Stated plainly, because a product that hides its edges is how you end up trusting a surface nobody is covering.
A school-managed device that also forbids extensions.There is nothing Haven can install and nothing it can set. That surface stays uncovered in your coverage map and it should — the map exists so you know where the edges are rather than assuming they are somewhere else.
Next door to this
Still stuck?
Two doors, and neither of them is a queue you never hear back from.
Report this — it did not work
Have a technician do it with you
Re-run the protection check
My provider is the problem
Last checked 2026-08. Nothing on this page was written by a model — a made-up menu path is worse than no instruction at all, and this is the page somebody reads when they are already stuck.