iPads and staff

[Sheridan]

We've currently using a mixture of ipads for students (updated and checked every so often with AC2) and a growing number of staff ipads (managed and updated by Meraki)

 

We currently deploy apps and don't allow staff or students to add their own apps as we use a VPP account to 'push' them.

 

However, we seem to have growing complaints from staff as they believe they should be able to install the apps they want. Which seems like a bit of a nightmare as they would all then be creating their own apple IDs etc, and probably adding vouchers for paid apps and so on.

 

So how do you do it? Controlled centrally like we're currently doing, or open and unlocked, or somewhere in between?!

[FN-GM]

Surely it would be managed the same way computers are? If you don't let staff install software on a computer why would you let them on a tablet?

[tmoon-mint]

In my opinion there is nothing wrong with staff using their own apps as long as they are relevant and purchased properly. I dont generally stop staff from doing much with their iPads. Students are of course a different story and these are locked down and I dont use Apple IDs anymore.

[sted]

i think with profile manager you can push vpp apps the "the machine" and with the correct settings they can still use the app store with their own account to download betfred or whatever they "need" while still allowing you to remote wipe etc

[tmoon-mint]

i think with profile manager you can push vpp apps the "the machine" and with the correct settings they can still use the app store with their own account to download betfred or whatever they "need" while still allowing you to remote wipe etc

 

Yes you deploy your VPP apps via managed distribution and allow staff to use their own Apple IDs for everything else.

[bossman]

@Sheridan

 

This was the whole reason why I gave the Staff full autonomy of these devices so they could do what they wanted with them, so far I haven't heard a peep out of them..........I wonder why?

 

Could it be that they are no longer in the school I ask?

 

Not for me to question as I don't have anything to do with them except give them Internet access and repairs (Not had any as I haven't seen them hehe!)

 

SLT backed this solution so they are the ones who will reap the whirlwind should they be asked by the big "O"

[Sheridan]

So already we have a mixture of opinions I'm somewhere between the two of 'they're school devices so treated the same as desktops' and giving the staff freedom to try out new apps!

 

Although I have a feeling a lot of the apps will relate to tv/holidays/games

[tmoon-mint]

So already we have a mixture of opinions I'm somewhere between the two of 'they're school devices so treated the same as desktops' and giving the staff freedom to try out new apps!

 

Although I have a feeling a lot of the apps will relate to tv/holidays/games

 

In which case make it perfectly clear to staff that you can see exactly what is installed via your MDM. Anything installed that isnt appropriate or relevant to work can be reported.

[sted]

In which case make it perfectly clear to staff that you can see exactly what is installed via your MDM. Anything installed that isnt appropriate or relevant to work can be reported.

can you age restrict them (ive not tried) so apps with a rating over 12 say are blocked even with their own account?

[tmoon-mint]

You can indeed using your management solution. Profile Manager, AC or an MDM.

[Sheridan]

can you age restrict them (ive not tried) so apps with a rating over 12 say are blocked even with their own account?

 

The problem with that is things like Youtube are 17+ - trying telling a teacher they can't install youtube and they will have a fit.

[Sheridan]

In my opinion there is nothing wrong with staff using their own apps as long as they are relevant and purchased properly. I dont generally stop staff from doing much with their iPads. Students are of course a different story and these are locked down and I dont use Apple IDs anymore.

 

How do your staff purchase paid for apps? We use the vpp account to purchase free and paid for, but if they then used their own itunes account for additional apps do they add personal/department credit cards or simply use vouchers?

[sted]

The problem with that is things like Youtube are 17+ - trying telling a teacher they can't install youtube and they will have a fit.

free app force it on them?

[kathabell]

Staff iPads are controlled by Lightspeed MDM. We have an "apps assess" group of staff (a teacher from each faculty, me and a member of SLT) who look at requested new apps and if agreeable ask for them to be added to their faculty profile. This ensures students are not asked to use a myriad of different apps for similar tasks. Faculty twitter accounts and staff-app accounts are all registered with school email ids; social networking (Pinterest, Twitter) accounts all have 2 staff members with access. Staff iPads go through a separate internet filter but are on the same ip range as the curriculum network, so they can move files across the network, access youtube etc. Student iPads are on a BYOD service, different subnet and go through a stringent student filter. The school iTunes account is used for purchasing apps, music etc. and only IT support staff have the password; staff cannot install apps or purchase in-app services without our assistance, but we do aim to respond quickly to any requests. SLT have produced a "recommended skills for iPads" which is part of teaching staff INSET, aimed at bringing a consistent level of skill to the use of iPads in the classroom. Good luck!

[Sheridan]

Staff iPads are controlled by Lightspeed MDM. We have an "apps assess" group of staff (a teacher from each faculty, me and a member of SLT) who look at requested new apps and if agreeable ask for them to be added to their faculty profile. This ensures students are not asked to use a myriad of different apps for similar tasks. Faculty twitter accounts and staff-app accounts are all registered with school email ids; social networking (Pinterest, Twitter) accounts all have 2 staff members with access. Staff iPads go through a separate internet filter but are on the same ip range as the curriculum network, so they can move files across the network, access youtube etc. Student iPads are on a BYOD service, different subnet and go through a stringent student filter. The school iTunes account is used for purchasing apps, music etc. and only IT support staff have the password; staff cannot install apps or purchase in-app services without our assistance, but we do aim to respond quickly to any requests. SLT have produced a "recommended skills for iPads" which is part of teaching staff INSET, aimed at bringing a consistent level of skill to the use of iPads in the classroom. Good luck!

 

I think this may be where we are heading - getting a handful of staff to establish that an app is useful and then we deploy it. Students devices will get a similar treatment.

[enjay]

Staff create their own AppleIDs linked to their school email address - a small number use personal AppleIDs, but we encourage them to create new ones to a) keep a home/school gap in place, and b) reduce the risk of personal messages or content being seen by students.

 

Staff are free to install whatever apps they want (educational or personal) but are told to speak to me before buying any apps for school. We have a VPP in place, but even if we're not buying enough copies to get a discount, this still means we can reallocate the apps when a staff member leaves. That said, no-one has yet come to me asking to buy an app.

 

We also have Meraki MDM in place to push out whole-school apps, e.g. Google, SIMS Teacher App, Seating Planner.

 

We want staff to engage with their iPads and see how they can benefit them. I think if IT insisted on controlling all app access, we would stifle that. Plus, I simply don't have the time to find all the cool apps which can help productivity or the teaching of French, nor would I necessarily recognise a good or bad app if I saw one.

Edited July 7, 2016 by enjay

[enjay]

Surely it would be managed the same way computers are? If you don't let staff install software on a computer why would you let them on a tablet?

 

The big difference there is iPad apps don't carry the same level of risk as random things installed on PCs. Plus, you know anything they're installing on their iPad is legit not pirate.

[maxrebo]

Going through the same at the moment.

Our school bought 10 Ipads before i started, not one of them is or has been used since for Teaching and learning. Not one ever appears in school to used for the correct reasons and when i request them back to do upgrades all they have on is Social media apps or it is used for their kids for games.

Unfortunately this was before i rolled out MDM so I`m very tempted to ask SLT to pull all back so we can limit any control by staff and force them to use it for T+L

 

I imagine this would cause an uproar and i would get over ruled so I`m holding back.

Any purchased from now on are added to MDM and fully managed.

 

More and more are being purchased by departments and everytime i wonder what they want them for, the bad thing is i dont think they even know why there buying them in the first place!

 

Used correctly though i think its a decent resource

[sparkeh]

Currently we only have staff iPads, managed by Meraki MDM. They are handed over with some default apps installed but no Apple ID attached. If they want apps installed then they have the following options:

1. For free apps:
   
   • Ask me to push it out via VPP
     
   • Attach an Apple ID and install it themselves
     

 

[*]For paid apps:

• Buy some VPP credit from whatever budget and ask me to buy it and push it out
  
• Attach an Apple ID and pay for it themselves (funny but this never happens)
  

[enjay]

Unfortunately this was before i rolled out MDM so I`m very tempted to ask SLT to pull all back so we can limit any control by staff and force them to use it for T+L

I would suggest getting MDM installed on them all retrospectively, as it would allow you to install apps, track location and if needed remotely wipe a lost iPad.

 

Forcing staff to use them only for T&L is the SLT's call, not yours, but certainly make them aware of the personal use. That said, do you report to your SLT when staff check Facebook or do their Ocado shop at lunchtime?

[Sheridan]

Currently we only have staff iPads, managed by Meraki MDM. They are handed over with some default apps installed but no Apple ID attached. If they want apps installed then they have the following options:

1. For free apps:
   
   • Ask me to push it out via VPP
     
   • Attach an Apple ID and install it themselves
     

 

[*]For paid apps:

• Buy some VPP credit from whatever budget and ask me to buy it and push it out
  
• Attach an Apple ID and pay for it themselves (funny but this never happens)
  

 

This looks like a good compromise. I think we'll have to let the staff have the freedom of trying apps (like its been said we don't have the time or background to pick apps) but also have a layer of control over the device. If I keep managing them with Meraki but allow the app store then presumably pushing apps from the MDM will work in conjunction with apps 'bought' under a personal Apple ID.

 

There are some slighty iffy apps out there - wifi scanners and the like but nothing too horrendous (yet) unlike the play store which seems to have all sorts of garbage!

 

Having said that, we notice a lot of staff in our school and primaries assume an ipad is the default thing to buy, then wonder to what to do with it when facebook isn't available.

Edited July 7, 2016 by Sheridan

[enjay]

If I keep managing them with Meraki but allow the app store then presumably pushing apps from the MDM will work in conjunction with apps 'bought' under a personal Apple ID

Correct, exactly that. The staff could install apps on their own AppleIDs and you could deploy others through MDM.

[p858snake]

The big difference there is iPad apps don't carry the same level of risk as random things installed on PCs. Plus, you know anything they're installing on their iPad is legit not pirate.

 

Actually it's not that hard to install pirated applications…

[Areku]

we brought 10 here for SLT members, after a month or so of arguing with an SLT member that an un-managed device was going no where near the schools network she eventually backed down. So all our ipads are restricted. no apps, no personal accounts etc.

Its worth noting, i did offer the hands off approch, as in they could be given to the SLT member vanilla, but in this case i was refusing to let the Ipad access the schools data/network (Emerge(sims), Exchange etc).

So it became a choice, for SLT which did they prefer? being able to go on facebook using an app, or being able to access student DATA. I was not going to back down over data, can you imagine the uproar of one of these slt members had "lost" their pad with potentially access to all that data?... No, we as a school must have had control over the data that device is accessing.

[enjay]

we brought 10 here for SLT members, after a month or so of arguing with an SLT member that an un-managed device was going no where near the schools network she eventually backed down. So all our ipads are restricted. no apps, no personal accounts etc.

I'm sorry but I think that's overkill. I understand not allowing unmanaged devices full access to the school network, but you could put them on a locked-down SSID which can access the Internet and nothing more (our staff SSID is a bit more open as we want to allow AirPlay)

 

I was not going to back down over data, can you imagine the uproar of one of these slt members had "lost" their pad with potentially access to all that data?

Your SLT and all staff are already taking "all that data" off site, they're just doing it on memory sticks and paper. By denying them access to a password-protected encrypted iPad, you're arguably making the data more vulnerable not less...