0xnxmeless

Thanks for this, and for all other replies. The solution we decided to implement was to instead rely on per-device PINs that are rotated on a semi-regular basis, with account passwords not being stored by IT.

Hey folks, Apologies if a similar thread has been made before, I couldn't seem to find anything on the subject We're reviewing how supply accounts/supply laptops are being handled within our schools. These accounts are currently setup on Bromcom, where the corresponding AD account is then made and maintained by Salamander with a rotating password daily. Each account is restricted to logging into an assigned supply laptop (i.e. Supply1 -> SupplyLaptop1, etc). This has worked for a while, but recently a real-world incident has caused us to make changes. The account details can be used to logon to Microsoft 365, i.e. on a student's phone, where they are then able to log onto Bromcom via SSO and make changes (i.e. add/remove behaivour events, etc). We've thrown around the idea of using Windows Hello PINs per device and rotating them periodically (i.e. every half term, every week, etc). This would solve the above, however another concern that was raised is that we're still not Cyber Essentials compliant. So, how does your school do "it?" - any thoughts would be greatly appreciated

I really appreciate the quick reply, thank you!

Hello all, To begin with, sorry if I'm doing something wrong,rookie here + apprentice. Our trust is looking to purchase some newer devices for teaching staff, and we're looking towards the eventuality where devices no longer come equipped with Ethernet ports. I understand that USB-C to Ethernet adapters exist, but as far as my understanding goes, these adapters all come equipped with their own MAC address? Are there any of these adapters that allow the MAC address to be "passed through?" As in, adopt the MAC address of the host device? Or alternatively, is there something that can be done with an existing dongle to make it pass through the right MAC address? Our concern is that the device would be registering on SCCM via the MAC address of the USB-C dongle and not the MAC address of the device itself. Any and all insight would be helpful. Thanks!