MrIlly

I have a meeting with Securly on Monday about creating a system cert that will read the current email address from the iCloud logged in user, and in theory, will use that to user inject into the smartpac file, saving the faff with login. This is what I'm hoping to do while also keeping the iPads in multi user mode. I'll let you know my findings once I've spoken to them!

How do you mean Securly guest? I think we're already doing this at the moment by using a generic account for web traffic reporting, but we really need it to report back to Securly for safeguarding.

We're a Senso trust. Looked at Classroom Cloud many times over the years and it just doesn't fit the bill for our use case. Great for teaching force, but that application massively falls short for technicians work (which we really want so get the final say HAHA!). I appreciate the suggestion, and someone else may take you up on that if they're up for renewal with another classroom solution! 👍

For more info, we're maninly a Google based school with an Entra ID authentication system, so we're quite flexible with which route we can do down for auth.

I agree 1:1 probably will be the best choice; the only caveat is that not all of our schools in the trust have enough iPads to give each student their own. Nor do they then have the budget to do this so we're stuck with shared devices for the most part. The problem we found surrounding Securly is to do with the way we have our Windows systems authenticated. It works near flawlessly for staff and students on PCs, where it's easy enough to inject the user's email string from the account to the proxy file variables. The problem then started with the iPads, shared user mode wasn't a thing when we first started doing this, so the setup really consisted of a single username being set for the proxy on the iPads WiFi profile, to which the staff at the schools made a manual record of which student was using what iPad. We were also getting bombarded by teaching staff about how most students, especially the younger ones, were unable to log in because they couldn't remember their usernames or their passwords, reducing the amount of actual teaching time they're getting with the iPads while they ring us to get their passwords changed, or login themselves. So a struggle all round! Since discovering multi user device on the ADE profile, I'm currently exploring how this works, but still a little bit unsure about how to get the Securly proxy to pick up the variables from the logged in Apple ID.

Thanks for this Andycat. I've had a play about with InTune in the last hour or so, and I'm already stuck at getting the company portal app to play ball... It's asking me to enrol the already enrolled (in InTune) iPad. So, great start!! 🤣

I've stumbled across the "Multi-user (Apple Shared iPad)" policy in ADE Profiles. But it seems to be doing something a bit funky at the moment, where it's not giving the end user the ability to enable location services. Which in this case, is required for it to get the correct time and date, but instead, enforces a time zone of LA, which is -08 hours. I assume I've probably got a duff config somewhere so going to tear it apart and see what I've done wrong!

Hello, I'm after some pointers about how we can make our iPad experience better in schools. We have a well-established Mosyle platform, but feel we're falling short on some critical parts of the eco-system as we're locking down quite a lot and not using it to its full potential. What we want to do is have students pick an iPad up, log in with their own account, and be able to track their browsing history within our Securly platform. We're using their smartpac certificate in order to force the iPads to use their proxy, so we are getting some metrics, but due to the nature of the beast, it never shows who is actually using those iPads. Wondering how others have their MDMs set, or if they've had better success with the likes of InTune which we're willing to give a try!

We use Senso to do this. I can tell you with certainty it is not ideal. Senso service needs to be running on the PC - usually if the PC is left on for too long without a restart, the service becomes bugged, doesn't allow remote connections, shows offline in the console, just to name a few issues. Impero may be better, but only if it's using the on-prem system, better than Senso for this, but not totally bulletproof.

If anyone is struggling printing to PDF in Adobe Reader;l change the page sizing and handling in the print options to "Actual size" and try again. Seems to solve the issue with it being unreadable in the reader softwares.

We're using HP SFF 400 G9 using the UHD 770 driver in this particular school I am overlooking. But we're even seeing this type of fault with really ancient micro Lenovo PCs, again, using Intel graphics. We use WU as part of our build as we force a kind of custom vanilla build of Windows onto our PCs via FOG project, so it needs to grab graphics drivers from WU so we're not having to do driver updates manually when we're away from schools where rebuilds are required. Kinda stuck between a rock and a hard place with that one

So after an update to the Intel Graphics drivers, we're having issues across pretty much all of our schools where, when the PCs are locked and the screens go into their sleep mode (but the PC stays on), we cannot get the screens to wake back up when pressing the keyboard or moving the mouse. If we downgrade the graphcs driver from the HP website, it solves the problem, right until Windows Update installs the newest version (totally not annoying). We've found a workaround at the moment by pressing the key combo to soft reset the graphics driver from the Windows OS by pressing CTRL+SHIFT+WINDOWS+B. Anyone else come across this?

Sounds good, think people are coming up with their own workarounds. The best would be for AQA to walk this change back, not sure they will do that though...

Hmm, that's quite interesting... Seemed to work for me while also keeping all the text highlightable (usually indicative that it'll read it via DocsPlus). Does it do the same if you print to PDF via Chrome/Edge?

Are you not able to open in Adobe Reader then ctrl+p and print to Microsoft PDF?

Microsoft Print to PDF worked for me on the Biology papers today from AQA!

So, after going through all this with Mosyle, they did accept fault with this one. It seems that the "send update command to all outdated" in the Install App profiles was not functioning for regular admins like me or you. The button wouldn't generate a command in their back-end and we then wouldn't see anything happen. I sent them proof of this happening, and they admitted it was their problem, and have since, released a fix on the platform I was having issues with, but also appear to have resolved the issue across all of their platforms as well, so I would be inclined to say it would also be more reliable updating apps this way for yourself as well! Of course, it's not absolutely perfect for the reasons in my last comment and the iPad taking absolute precedence when it says it's not ready to update, but this is much better that what was happening at least. Hopefully this works for you as well, if the send command to all outdated button isn't working on your platform, I'd speak to them through their mail in on their website!

So the iPads are in charge of installing the update when the update for the app(s) are available in Mosyle. They shouldn't take any longer than a week in theory to install the update. But with my devices refusing to do this for months on end, Mosyle say that its the way Apple tell the devices to talk to the MDM. Devices take precedence in updates and if they devices say, they aren't ready, then it will not install the app - force install at that point is the only way. I then asked if there's a way we can guarantee the update, they suggested using the "send command to all outdated" option in the install app profile > view details. It seemed to work for them in the back end, when they pressed the button, it updated the app in front of me automatically, didn't even have to press force push. However, when I tried to do the same, there was no push command generated, they couldn't even see a command in the very root of their service from my account. So we're here now, they want proof that I'm sending the command, and the Mosyle dev team will then look into why the commands from admin user accounts aren't being generated.

I'm having the same issue, we use an app called PE Passport that, every August, needs an update for the new school year in order to work. Without said update, it doesn't work and shows old data. I've got a meeting with the devs about this tomorrow as we have multi deployments across many schools which equates to well over 1,000 iPads. The issue we have is that sending the auto-update command never actually shows up in the command history, so unless the iPads are looking for the update (which they should be from what they say), it never updates any apps. I will drop in to see what they suggest.

Yea we do use that function from time to time, but it's much easier being able to see a grouped view of all Chrome OS devices from one group in Impero (grouped by school/classroom).

Sorry should've specified... Yes, mainly Windows with some Chromebooks as well. Impero does have the ability to run Chromebooks into the console as well, just for the ability to see what they're doing anyway.

Hi everyone, So we're currently using Impero EdPro for our remote management software in a MAT. But, we're looking for an alternative that can effectively allow us to do very similar activities (remote "take" control, send cmds in console, add blacklist apps/keywords/websites). What's everyone using these days? EDIT: Windows env with some Chrome OS devices also being used to see what they're doing.