Home Use laptop for 'looked after' child - filtering...

[Koldov]

We have our first ever actual laptop going home with a child soon.

 

I am proposing as it is something we have never done and unlikely to do regularly (previous devices were iPads during lockdown and had Meraki restrictions + LGfL 'Home Protect' app) to do the following:

 

Domain Join (once logged on as a child, then cached credentials should keep all GPO restrictions etc. The device can be brought back to school once a month to refresh/ update)

Meraki (MDM - not for restrictions on Windows laptops, but as a 'where has this laptop gone' provision)

Sophos (this includes a web filter, can be set fairly strictly and is managed)

 

I don't think we can justify buying a platform such as Securly for one child, but do you think the above would fulfil our obligations?

[PaddyNewman]

Sophos will be a quick fix, their web filtering side of the client is fairly basic, but it will do what you need for web filtering.

[Koldov]

Got a bit bogged down with other things, simply adding it to the children's OU creates so many restrictions (including redirected folders!) that I will have to look at separating this user and laptop to their own OU.

 

Looked at Sophos yesterday but didn't have time to dig any deeper...

 

Anyway, I never really looked into the Sophos solution before and everybody is pretty much on the basic policy settings (which you can modify - but that affects everyone).

 

The thing is I can't really tell how to only apply a modified policy and not a base setting (or if I apply both how to ensure the modified one takes precedence)...