JMSJ

I Second Jamf School. I've seen it deployed across multiple schools/trusts now with each location having it's own instance under the main trust account. You can then restrict access to different locations for different techs. I don't see any con's apart from if you decide to go down the Mac route and want a MDM for those as well, if that's the case i'd be more inclined to go for Jamf pro as it's better for managing Macs but still has the functionality to manage iPads just in a slightly more complex layout

I'd go for Jamf school. I've seen lots of school use it and like it as well as a trust with over 5000 devices and it works perfectly fine and gives the control and separation they want for the different locations.

I've used zoom for this in the past but google meet or Teams would work if you already have those set up.

If you already have the bind to AD policy set up, you should just be able to re run it and it should reconnect. If not manually unbind it if it's already bound and then rebind again either via policy or manually

I've used internet sharing from a Mac before to get it connected after a restart. However there is a restriction called USB restricted mode and i can't fully remember if that needs to be enabled or disabled for it to work. Best bet is to test it on a spare device or a device you know the password of.

Every time I take my dog to the park, the ducks try to bite him.. That's what I get for buying a pure bread dog.

Mostly gaming and the gym but occasionally working on my car when needed