While the university is routing both domains, the reason your students are blocked exclusively on their ISD Chromebooks comes down to your Google Admin Console settings.
🛠️ How to Fix This in Google Admin
ISD managed Chromebooks are likely restricted by a Google Workspace policy that explicitly limits which secondary Google Accounts students can sign into. Since leomail.etamu.edu was probably added recently or falls under a broader wildcard, but leomail.tamuc.edu is being treated as a separate domain, and ISD may need to update the sign-in permissions.
- Log into your ISD Google Admin Console.
- Navigate to Devices > Chrome > Settings > Users & browsers.
- Select the target Organizational Unit (OU) containing your student profiles.
- Scroll down to the User experience section and locate Sign-in to secondary accounts.
- Check your pattern matching/allowlist configuration. You need to ensure that both of the university's email structures are permitted. Add the following explicitly if you are using regex or an allowlist:
- Click Save in the top right.
Note
Why does it work at home?
When students are on personal devices at home, they aren't bound by an ISD’s strict Chrome User Policies, allowing the old domain cookie-handshakes and redirects to resolve normally inside the browser.
Once you update the policy in ISDAdmin Console, have a student restart their Chromebook or visit chrome://policy and click Reload policies to pull the changes immediately.