Shared iPad deployments

[plumyeti]

Hi everyone,

 

We're a small independent girls primary school about to purchase a new set of 30 iPads and are looking into how best to set these up.

 

Our main concern is safeguarding and ensuring that Lightspeed Monitor work effectively.

 

For those of you using Shared iPads, do you require pupils to sign in with individual accounts, or do you use temporary sessions?

 

If pupils sign in individually:

• Are you using Managed Apple Accounts?

• Does Lightspeed correctly identify the signed-in pupil rather than just the device?

• Are there any additional steps required in Intune or Lightspeed to enable user-based monitoring and reporting?

• How well does this work with younger primary-aged pupils?

 

Any advice, recommendations, or lessons learned would be greatly appreciated, particularly around getting Lightspeed Monitor working reliably with Shared iPad.

Thanks in advance.

Edited June 19 by plumyeti

[Synkrox]

 

No accounts, shared only mode, wipes at logout.

We use allowlist only and give access to school resources only.

No access to the wider internet. 

 

Our take on it is that if they are able to login to a laptop then they can do so to get proper internet, if they can't then they can use the iPads.

 

We have Britannica School so they can still do their own research at age appropriate levels.

Works really well, creates a safe device for children to explore rather than expecting them to dig through pages of AI slop and dodgy adverts in the name of "research"

[TwistedHelixis]

We use Mosyle and Apple school manager free version.

 

The pupils don't sign in to them, they are in cart mode and the pupils do not need an Apple account.

 

These are more for quick research or KS1 usage, as we have Chromebooks that the pupils do log into with their own accounts.

 

 

[Rogueleeder]

I did Shared iPads at my MSP post, We did Shared iPads with Logins synced to Entra ID. We had Securly Filtering back then though so we could put a Smart Pac file on the iPads through MDM to look at the person's mail Attribute to identify them in filtering, combined with deploying the Authenticator app to act as an SSO agent. Not sure how Lightspeed works. 

 

If you have something like this: https://support.securly.com/hc/en-us/articles/360041375734-Filter-How-do-I-configure-SmartPAC-user-injection It could work.

Edited June 19 by Rogueleeder