Devices without Logins - who last used?

[ReverentCreature]

Hi all. Whne it comes to Internet safety you can find out who came across an inappropriate website accidentally or who went on a dodgy website deliberately as you have the login details for that user on a Windows computer. But when it comes to iPads, this is not the case. What do you do to get round this issue? How do you track who last used shared class ipads?

[Koldov]

Can't help you with anything on the Apple side for managing shared iPads I'm afraid, as I'm a complete noob when it comes to what Apple School Manager and the 'Classroom' options provide (hopefully someone with more knowledge will chip in). Not sure if Apple provide anything for shared iPads, I know it's a concept they're not familiar with and tend to imagine everyone has a budget for single user per device!

 

As I haven't looked in to what Apple do for shared iPads, we went old school and stuck with pen and paper.

 

All our iPads are numbered, each child in a class has an allocated iPad number and each class books them out on a sheet of paper stuck to the iPad trolley.

 

So, if someone opens an iPad and is presented with a Safari page with a dodgy search, it should be quite easy to look up who had it last. That's in theory how it should work anyway, if it doesn't then it's a classroom management/SLT problem...

[Brimstone]

Hi all. Whne it comes to Internet safety you can find out who came across an inappropriate website accidentally or who went on a dodgy website deliberately as you have the login details for that user on a Windows computer. But when it comes to iPads, this is not the case. What do you do to get round this issue? How do you track who last used shared class ipads?

Primary or Secondary......?

[Rob_D]

Secondary here.

For us it would be a classroom management/teacher issue. We've got an electronic booking system for shared ipads we and we can check the smoothwall logs to find out exactly when the incident happened. After that, it's down to that class teacher work out which student(s) where involved.

 

I'd be keen to find out if other people have a more technical solution.

[Brimstone]

Secondary here.

For us it would be a classroom management/teacher issue. We've got an electronic booking system for shared ipads we and we can check the smoothwall logs to find out exactly when the incident happened. After that, it's down to that class teacher work out which student(s) where involved.

 

I'd be keen to find out if other people have a more technical solution.

Why not just use AD Authenticated Access to Safari for the iPads?

 

If you have a Smoothwall you could speak to someone there about this..?

 

https://www.smoothwall.com/solutions/visigo

[Rob_D]

Why not just use AD Authenticated Access to Safari for the iPads?

If you have a Smoothwall you could speak to someone there about this..?

https://www.smoothwall.com/solutions/visigo

 

Not seen this before. I'll have to take a look.

 

We haven't really wanted the kids logging into anything on the shared ipads as they'll forget to log out and have access to each-other's accounts. I understand this probably means that we can't log internet traffic beyond the device level.

[elsiegee40]

Not seen this before. I'll have to take a look.

 

We haven't really wanted the kids logging into anything on the shared ipads as they'll forget to log out and have access to each-other's accounts. I understand this probably means that we can't log internet traffic beyond the device level.

You can't have it both ways.

 

Either they use their own private login or you cannot know who used what. Either way there is a classroom management issue.

[elsiegee40]

Just to add that iPads are designed as single user devices. Their use as a shared resource in schools raises many questions with regard to Safeguarding and the monitoring requirements of Keeping Children Safe in Education

[fiza]

We redirect our few iPad users to a smoothwall SSL login page before they get access to the internet. They need to type their AD credentials before proceeding.

[Ditto]

The point about iPads and effective monitoring is a valid one and one that I have yet see tackled well. The KCSIE states "Governing bodies and proprietors should be doing all that they reasonably can to limit children’s exposure to the above risks from the school’s or college’s IT system.". I wonder how many IT teams can say their DSL has fully engaged in a conversation about how that is achieved. I don't buy in to it being a purely classroom management topic - there's no way a teacher can effectively monitor visually a classroom of 30 pupils and if your school has an IT suite/library/study room, again you're not going to visually monitor. I think it's reasonable to be expected to use authentication and tracking/filtering. I've seen that achieved well in Windows and GSuite/Chromebook environments. Too often the iPad scenario just does not seem to get addressed. @Brimstone has made a suggestion that is the best I've heard to date. Perhaps with internet safety day next week, it's an opportunity for all of us in schools and governance to speak to our DSLs/fellow governors and at the very least get this topic on the radar.

[mavhc]

Can it be set up so the proxy auth is forgotten once the ipad screen locks?

[Brimstone]

Can it be set up so the proxy auth is forgotten once the ipad screen locks?

I would expect most good filtering systems tied to AD to have a time out solution for this.

 

I've just done some work with a secondary school who have hundreds of shared iPads across departments, they were engrossed into all sorts of safeguarding solutions, nearly all of them just crippled the iPad usage with their own web browser (no names mentioned)

 

As students were all used to logging into everthing they just set up AD Auth for these which saved them thousands in additional software, having a really good MDM solution is must for this to work (not free)

 

I'm sure many secondaries will have a BYOD program already so may have users having to authenticate to get web access.

 

In a 1:1 environment it's a lot easier as most good MDM's have AD syncing and will ask a user to authenticate using their AD credentials when they first activate the iPad.

[mavhc]

I would expect most good filtering systems tied to AD to have a time out solution for this.

 

I've just done some work with a secondary school who have hundreds of shared iPads across departments, they were engrossed into all sorts of safeguarding solutions, nearly all of them just crippled the iPad usage with their own web browser (no names mentioned)

 

As students were all used to logging into everthing they just set up AD Auth for these which saved them thousands in additional software, having a really good MDM solution is must for this to work (not free)

 

I'm sure many secondaries will have a BYOD program already so may have users having to authenticate to get web access.

 

In a 1:1 environment it's a lot easier as most good MDM's have AD syncing and will ask a user to authenticate using their AD credentials when they first activate the iPad.

 

Just name them to save us time, that's the point.

 

Which MDM did you use?