MDM for Windows

[dagda]

Hi all

 

I am currently using Jamf School for all out Apple devices, but I need a new MDM for our Windows laptops.

 

Any recommendations or advice?

 

Many thanks

[EssentialRug]

Intune?

[TwistedHelixis]

I'm 'actually' considering giving Google's Window MDM solution a go at one of my schools. Staff can log into Windows with their Google creds, and possibly no domain controller needed at some point.

Been reading up on a few schools that have already done this and seeing as the pupils at this school are on Chromebooks, its just staff that currently need domain stuff anyway.

Edited February 22, 2024 by TwistedHelixis

[thimon]

I'm 'actually' considering giving Google's Window MDM solution a go at one of my schools. Staff can log into Windows with their Google creds, and possibly no domain controller needed at some point.

Been reading up on a few schools that have already done this and seeing as the pupils at this school are on Chromebooks, its just staff that currently need domain stuff anyway.

 

Being Google they’ll probably drop it in a few years!

[TwistedHelixis]

Being Google they’ll probably drop it in a few years!

 

There was a reddit post about this last year and someone posted up a list of all the main companies with dropped products and MS were just as bad :-)

 

FYI - MS are dropping Publisher in 2 years

[thimon]

FYI - MS are dropping Publisher in 2 years

 

I’ve seen. That’s not a bad thing! [emoji846]

[TwistedHelixis]

I’ve seen. That’s not a bad thing!

No, but when I mentioned this to the office staff, one of them had a mini meltdown :-)

[TheHyperTechie]

I'm 'actually' considering giving Google's Window MDM solution a go at one of my schools. Staff can log into Windows with their Google creds, and possibly no domain controller needed at some point.

Been reading up on a few schools that have already done this and seeing as the pupils at this school are on Chromebooks, it's just staff that currently need domain stuff anyway.

 

I have just completed a successful migration to Google's MDM. GCPW for managing logins, Google Drive for files, and Windows Device Management. I really like it!

 

I am just in the process of decommissioning our server, our DC has been off for a while now with no issues. I also migrated DNS and DHCP to our firewall successfully.

 

If you are an exclusive Google school already, I would recommend trying it out.

[PotNoodleTech]

I have just completed a successful migration to Google's MDM. GCPW for managing logins, Google Drive for files, and Windows Device Management. I really like it!

 

I am just in the process of decommissioning our server, our DC has been off for a while now with no issues. I also migrated DNS and DHCP to our firewall successfully.

 

If you are an exclusive Google school already, I would recommend trying it out.

 

Hmm this sounds very interesting!

[whartomt01]

I have just completed a successful migration to Google's MDM. GCPW for managing logins, Google Drive for files, and Windows Device Management. I really like it!

 

I am just in the process of decommissioning our server, our DC has been off for a while now with no issues. I also migrated DNS and DHCP to our firewall successfully.

 

If you are an exclusive Google school already, I would recommend trying it out.

 

How are you managing 2FA for students using Google?

[TheHyperTechie]

How are you managing 2FA for students using Google?

 

All students use chromebooks, here we have about ~400 of them. We have implemented Wonde SSO with magic badges for sign ins (for students)

 

Google MDM is exclusively for staff windows devices, as they were not willing to move to Chromebooks at the time.

 

I have 2FA on for staff, but not enforced as not all staff members have a device to access the authentication app on. Mobile phones are not permitted around the school.

 

Hope this helps!

[whartomt01]

Thanks yeah. Staff we are ok for too, use Fetian OT tokens. Just curious how people not using MS services deploy 2FA for students without Conditional Access

[TwistedHelixis]

our DC has been off for a while now with no issues.

This is my dream setup :-)

[TwistedHelixis]

@HyperTech

How are you managing / deploying your printers?

How does Google handle 'standard' user accounts and the need for admin access to the Windows device? Or do you set that up on the device itself.

 

Ill put some more time aside to read up on setting this up.

[TheHyperTechie]

@HyperTech

How are you managing / deploying your printers?

How does Google handle 'standard' user accounts and the need for admin access to the Windows device? Or do you set that up on the device itself.

 

Ill put some more time aside to read up on setting this up.

 

So...

 

We have three Ricoh IMC5500 copiers on site. These all use the Ricoh Cloud Print software which is deployed to end devices via a chrome extension (very similar to Papercut)

 

You have the option to set an OU containing users, with Local Administrator access to devices using GCPW. For example... I have an OU in Google called Administrators, this contains my account and maybe a couple of other users. I have this OU set to get Local Administrator privileges on any GCPW device when they sign in. I hope this makes sense?

 

Thanks

[TwistedHelixis]

I hope this makes sense?

Perfect sense. Sounds great.

Thanks :0)