Windows 7 or windows 10 Operating System with professional edition

[genesis]

Hi

 

One of a parent is willing to purchase a laptop for his son to use in the school and we are using windows 7 and windows 10 in our network.

 

We will be joining the purchased laptop to the domain, can I ask them to purchase windows 7 or windows 10 Operating System with professional edition OR do you suggests any other edition.

Thanks

[DJ-1701]

I take it the laptop will be donated to the school? As generally licenses for most software have to be installed on company owned assets.

 

Do you have EES or ES-OVS licensing at all? As you should be able to upgrade the license of school owned devices under your allowance.

[elsiegee40]

If the laptop is to be owned by the family, you cannot use school licenses on it. You will therefore need to ask them to ensure it has Pro edition on it if you join it to the domain. This isn't something I would do though.

 

I had a boy at my school where there this happened. In the end I decided, and the HT agreed, that putting a laptop on our domain that we had no control over was too risky. I couldn't have a partly managed machine on the domain as the risk to the network from viruses etc was OK.This was an independent and the parents still bought it and paid for licenses for certain specialist SEN software, but they could install anything else they wanted on it too.

 

My rule was either the only admin for a machine is me and I have 100% control over what is, or isn't installed on it, or it can only go on the guest network.

 

Think backups, dodgy software being installed, viruses, video/games/music that aren't licensed ending up on the school network...

Edited September 10, 2018 by elsiegee40

[Cazale]

We never put laptops on the domain (not even school/staff ones). The only exception being if they live in the building 24/7 (as a couple do).

 

You can still access network shares from a non-domain PC (there are various methods, but browsing the file server and using \\domain\username + password works by default) if that's your concern?

 

BTW, you can use Windows 7 keys to activate Windows 10 (i.e. if you have a Windows 7 Pro key enter it during the Windows 10 install and it will activate as Windows 10 Pro).

[hardtailstar]

We never put laptops on the domain (not even school/staff ones). The only exception being if they live in the building 24/7 (as a couple do).

 

You can still access network shares from a non-domain PC (there are various methods, but browsing the file server and using \\domain\username + password works by default) if that's your concern?

 

BTW, you can use Windows 7 keys to activate Windows 10 (i.e. if you have a Windows 7 Pro key enter it during the Windows 10 install and it will activate as Windows 10 Pro).

 

Why dont you put laptops on the domain?

[Cazale]

Why dont you put laptops on the domain?

We manage primaries, and laptops are generally taken home by staff (and we hardly see them again, unless there's an issue) and are used by a single user. Also, the vast majority of things we set in GP just don't apply to the user or the computer. I can appreciate not every environment is like this, but it sounds similar(ish) to the OP.

 

Ironically, the majority of times we saw domain laptops coming back was due to domain username/password caching expiring or some other domain issue. So now we just set them up with 2 admin accounts (a generic account we can pass on to other support companies if the school ever decides they want to move on + one for our company) & then give them a user account. Then create shortcuts on their desktop for staff shares and their files on the server (i.e. \\server\staff\ and save their network credentials) for when they are in school.

 

It works a treat.

 

It's not something we do, but I've also seen this done on pupil laptops that live in schools (just a generic "pupil" username and a fileshare setup specifically for that user).

[mavhc]

I'd think letting computers not on your domain access your shares is a worse idea.

[genesis]

We have moved to 0365 and now we can assign licence for 0365 for this student. Also I can ask the parent to purchase a valid antivirus software and we can install on the laptop?

[AlanD]

I wouldn't be allowing any external devices to connect directly on my domain network.

 

Well..not unless that devices was essentially locked down - and they couldn't install programs ...but even then there would be a serious risk of malware and/or ransomware infections

 

It would belong as a BYOD device - on a separate VLAN ...and if you are not already using cloud storage for files - I'd be looking at smoething like HAP to access files via a web interface.

 

 

And I'm not sure where you would stand with licences for program taken off site. A site licence...is a site licence....not an off-site licence. If you have Volume licence agreements with Microsoft you can add the "365" bits to allow students to download and use office 365.

[Cazale]

I'd think letting computers not on your domain access your shares is a worse idea.

Not sure what the difference is? We still have complete control over the laptop: We install the OS from an image with local security policies set (much the same way you'd apply them from Group Policy). Anti-virus, etc installed and managed by us. We're the only ones with admin accounts. We're the only ones who can install or remove programs, etc.

 

They're as secure as domain PCs.

[FN-GM]

Putting the other issues aside I think you will struggle to find a new laptop that is Windows 7 compatible....

[mavhc]

Not sure what the difference is? We still have complete control over the laptop: We install the OS from an image with local security policies set (much the same way you'd apply them from Group Policy). Anti-virus, etc installed and managed by us. We're the only ones with admin accounts. We're the only ones who can install or remove programs, etc.

 

They're as secure as domain PCs.

 

I'm always updating the SRP rules mainly, as anti ransomware. So many programs can install for the user without it. Plus software updates, although as all anyone wants is MSOffice and Chrome these days, that's not too bad.

[MarilynH]

Thanks) Have you tried it https://www.outlooktransfer.com/products/data-extraction-kit-for-outlook/?