garethedmondson (7th November 2011)
The inevitable has happened, and an SM has said that a student was using an iPad in a lesson and mentioned that it was very limiting without an internet connection. Said SM then came to ask if it could be added to the network and lo and behold, the worms were crawling out of the can and getting all over the office and everything.
I suspect this is an unstoppable trend anyway, and something that we will end up supporting at some point in the next three years, although I'd rather wait at least one more year simply because we're so busy this year with setting up 2k8R2 and testing Win7 and I don't have time to get into VLANning and what have you. I said I'd draw up a list of benefits and disadvantages for SMT to discuss at tonight's meeting, though, and this is what I've got so far. Can anyone add anything else? (in either column - I'm not deliberately trying to make it look bad, it's just genuinely come out this unbalanced!)
As I say, I will do this eventually anyway (if only ever for KS5), but it's interesting how many downsides there seem to be against the possible upsides so far!Background: at present, students are not allowed personal devices in school for accessing the internet. However there is an increasing trend towards possession of portable computing devices such as iPads, laptops etc. and many students now include such devices as part of their normal workflow, particularly in specialist subjects such as art or music that might have specific tools available on these platforms. These devices, if brought in, are currently limited by not being connected to the internet.
Proposal: such devices could, after suitable preparations, be allowed access to the internet. The connection available would be filtered in line with current KS5 levels, and the option would only be available to sixth formers.
Greater availability of IT at low cost to us
Greater flexibility for students who want to use personal resources
May better engage students
Would require the instigation of a technical project that would certainly involve a significant investment of time, and potentially budget.
Work would be saved in a single location rather than on the network; therefore if students forget their device their work will be completely unavailable and there will be no regular backup of their work. Despite warnings of these limitations students are likely to favour working on personal devices still.
Danger of loss of expensive personal equipment (particularly on public transport to and from school)
Possibly lead to poorer students feeling excluded
May offer a greater distraction to students, as personal devices are likely to have personal data (e.g. photos) and possibly games available.
Should personal devices be allowed, IT Support will be unable to support them to prevent abuse of our services and prevent strain on our time supporting a large number of myriad devices.
If popular, would likely require investment in improving our wireless coverage, ideally with a managed (intelligent) system (5 figure cost).
Security risk from viruses steps can be taken to mitigate this but there will always be a risk from zero-day exploits that havent been seen before
garethedmondson (7th November 2011)
I am against it unless the students and parents sign an AUP saying that there is absolutely no chance if you repairing any damage to the machines or fixing any faults that develop, and not installing any software etc, and they get KS3 level filtered internet. Might make them think twice!!
we already had a full wireless in place, so we allow them on. 1 device per person, ipad or laptop only, we dont allow non-productive devices like phones or ipods or whatever. It all goes through our filter and they use ntlm to login so it identifies them.
They know that we dont support the device, we have over 1000 laptops that we provide that they could be using, so if they lose their work or save it in a format incompatible with the school systems for printing etc, thats their problem not ours.
Any student or other personal device connection to your network should be seggreated from the main school network to avoid impacting on the business use of said network, thus the students could access their home folders if you had a vpn type system in operation alternatively they would either be employing local storage of content on the device itself or they would be making use of a cloud based storage service, ideally one that is also accessible from school computers in case of personal device being left at home.
just to add to my post all students have a Skydrive as part of their live@edu, and they can also access their network share through moodle. And the student wireless is seperated and locked down to port 80 only
If we went for it properly, I'd VLAN off a segment specifically for use with guest devices, with the Smoothwall set to transparent filtering. KS5 web access should be fine given that only KS5 and above will have access, and we'll never tell anyone the password, we'll add devices ourselves to stop other bits and pieces finding their way on.
And there would be no way in the seven hells I'd support equipment, otherwise people would bring a laptop in on Tuesday jsut so they could bring it back on Thursday and get us to fix it for free. There are computer shops in town for that; your device, your responsibility. With the number of KS5 students we would easily be facing a 50% increase in number of devices to support.
My biggest concern is that they will be saving locally instead of to the network (no matter how much cloud storage you offer them etc.) - so there will be no backups and they will forever be leaving work at home. It'll be the worst of educational ICT again.
Any of you who've implemented this already found any other positives or negatives on top of what I had listed above? I'd like it to be as complete a feasibility study as possible.
We have a separate VLan wireless system in place. They are filteres through the primary county filtering so no problem there. If they want to save their work on their device it is their responsibility to back it up. We offer NO support for their devices although we might assist with connectivity problems. As for accessing other undesireable internet content, if they have 3g devices or dongles they can access whatever they like anyway. We don't get involved in that as it isn't accessed through our connection. We don't have many problems and it seems to work well.
The problem with not telling them the password is Win 7 now allows you to view a key. Therefore removing the point in it being secret as they can just share with each other. I tend to look through logs and block ipods etc via mac address.
We have all our sixth formers on the wireless if they want it - don't have any problems with it and i've put on the school website a page which downloads a .rdp connection file so students can work on a terminal server inside school from there personal device.
I think its a good idea. Setup a separate vLan with an open WIFI. Once you open your browser you are presented with a login screen. They enter the network credentials and your away. The connection will be monitored and you can even set different filtering levels based on the credentials used.
What we do at my place (a bank not a school) is we have an open WIFI and as soon as you connect and open your browser you taken to the Citrix login screen then you can use the Citrix apps and then get a full screen desktop into the terminal servers.
I'd have thought bets were off re: Internet filtering?
Various phones these days operate as wireless hotspots, so if you've got one of these you can hook your tablet or laptop up to the Internet wherever you are.
SMT should not sign up to this on the assumption that all Internet access within the site will be through the filter.
Just to clarify for the sake of the thread as well: theoretically I am all for the idea and don't need convincing, I would just prefer to wait a year for reasons of current workload. I was just wondering what the other positives/negatives were that people had come across or could think up for me to present to SMT later.
could you not use radius?
There are currently 1 users browsing this thread. (0 members and 1 guests)