Please also sync the email address attribute from AD so users from AD can be linked with their corresponding email address when they sign in on a Chromebook. The same filtering policy should be applied to the same user whether they are logging in on Windows or Chrome.