Help Managing iMacs in a School Environment: Seeking Solutions for Student

[edutechin]

At our school, we have 20 ( iMac21,1) devices, and I'm exhausted from fixing daily issues caused by students. They are constantly doing things like removing icons and resetting passwords. Whenever I need to install software, I have to do it manually on each machine.

I’ve already created a student user account, but the students are still managing to remove icons and make changes. The teachers requested that the iMacs not have passwords, so I set them up without passwords.

Is there any way I can use one iMac as a server to control all the other iMacs? Also, how can I restrict users so they can only browse certain sites (no YouTube or TikTok), prevent them from changing settings, and disable their ability to modify files or icons? They should only be able to access the desktop folder and download files.

[colly72]

I'd look at a 3rd party MDM like Moysle (https://school.mosyle.com/pricing/) or Jamf (https://www.jamf.com/pricing/education-pricing/), rather than trying to use another Mac. I used Profile Manager years ago, which was part of Mac Server, but it's pretty much a legacy product now, as Apple have looked to kick Server into the long grass. Edited October 7, 2024 by colly72

[Olliedawg]

You need an MDM 100%. Most people use either Mosyle or JamF

[thimon]

100% you need an MDM. I wouldn’t manage Apple devices without one.

[bicky]

You can use Microsoft Intune to manage MacOS

[edutechin]

do we have to pay for this? it's free Moysle and Jamf

[colly72]

do we have to pay for this? it's free Moysle and Jamf

 

Moysle do a free version but it's missing some features. See the link in my earlier post for comparison of free vs paid.

[thimon]

There is a free option for Moysle, depends on what you need. Jamf is £££ but is usually seen as the best Apple mdm.

[colly72]

Zoho ManageEngine also have an MDM, which you might want to consider. I can send you a link for 10 devices for free if you want to send me a private message.

[dhicks]

The teachers requested that the iMacs not have passwords, so I set them up without passwords.

 

As others have pointed out, an MDM of some description is going to be the solution you want here. For logins, the MDM will probably allow your users to log in to MacOS with existing Microsoft or Google accounts if that would be useful. Otherwise, MacOS does have a built-in guest account which (I think) resets to defaults when the user logs out, which might be useful in your case.

[thimon]

The teachers requested that the iMacs not have passwords, so I set them up without passwords.

 

Just seen this. That would have been an instant no from me. Just because staff request something doesn’t mean they get it. Everyone should be signing in with their own account, ideally linked to AD.