Filtering for children in a non-school environment

[jmak]

We are going to host under-eighteens as part of their T-Level course and have been asked to provide computer/network access to them. 

 

I'm assuming that as it's part of their course and more than a supervised work-experience placement, then we are subject to the same rules as secondary schools/sixth-form institutions. I'd be grateful if anyone  could share any experience they have of this scenario.

 

Assuming I need a filtering solution:

I can't imagine that any network level controls will be considered - this will be a handful of users out of >100k users and a complex network, some of which is controlled at a corporate level and some of which is managed by divisional network teams.

 

I'm therefore looking at client level controls. Our Windows clients are Windows Active Directory domain managed and our Apple devices are Jamf managed. We could limit logins to specific clients and prevent access to our 365 tenancy. We also have access to Entra AD Intune only managed devices, but they have corporate policies which I can't customise.

 

Any suggestions welcome (other than don't do it - that ship has already sailed).

[achedgy]

I look after a couple of Alternate Provision setups which would be a similar scenario. I use Senso for these, client based, so doesn't matter what internet connection they're connected to.

 

Found it works well, reports if anything untoward is looked up. The support team are very helpful and they are happy to look at small numbers of clients.