localzuk

There are loads of rules regarding who can be added. I would personally recommend The CPC instead, much easier to do. https://www.thecpc.ac.uk/ On frameworks you generally find tier 1 companies and national sized resellers.

Its been a while since I looked at their offering. But I believe this may be the current framework page for them - https://www.crowncommercial.gov.uk/agreements/RM6174

Depends what you want from it. It will technically run on older chips, but MS says you're more likely to see crashes. Also, they aren't guaranteeing that anyone with an unsupported chip will get updates.

Far cheaper. And the contracts have been written to deal with many of the gotchas copier companies try to do (eg. charging a huge amount to collect machines at the end of a contract, charging for staples, charging for area coverage instead of flat rate per page) etc...

We also use framework agreements to do this. The CPC and the CCS frameworks to be precise - they've already done all the legal bits for tendering, you just follow their guidance on actually getting the pricing in.

We don't use Exchange. By Hybrid, do you mean Hybrid AD join or Hybrid Exchange setup?

Why? If the domain is using the new FQDN? What would still be using the old one?

What do you mean the primary domain will stay the same? In Google or in AD? If in AD, this can't happen - we would want this to be a new domain name.

So, there's a possibility that I will need to rename our domain soon - to a completely different FQDN. I understand in the past, when it was just your active directory domain it was a bit of a faff, but doable but these days, with Azure Ad being linked to it, and Google etc... What are the implications?

That isn't true? We have Sophos XG and we get the full 1Gbit through. The issue is that Wifi bandwidth is shared, like old network hubs (pre-switches). Only way you'd get all of the bandwidth is if no-one else was connected to it.

Indeed, this is our view here. All devices that we issue to children have to have our filtering in place. It adds cost, but ensures we're complying with our obligations and prevents issues like this.

Well, that all depends on how you manage your devices, and how you comply with your responsibilities regarding safe internet access etc... Realistically? Yes.

No, I ended up changing how we dealt with this anyway - we no longer do "PXE boot first" on our devices.

Absolutely. It needs to be like the Chromebooks we have - where everything is modular and easily swappable.

That is for the Enterprise edition of SQL - do you need that, or should the Standard edition suffice?

If that's what they're paying for, then I'd wonder what on earth the devices are there providing? A Chromebook can be bought for £170 + £30 management. Easy 5 year lifespan. That'd be £40 a year.

Airports aren't the ones running it, the border force are. And they do it for national security reasons, which is a big exemption for such things.

Not really? It would cost in the region of £1500 a day to provide FSM to all children here. Vs a few grand a year on cashless catering...

That's the thing though - building a facial recognition template can be done by anyone so long as you have some photos. So, the idea of abusing the templates in this sort of system is kinda odd, as it would be more effort to do so than just take some photos of the person you want to recognise. Whereas a fingerprint? That requires direct access to the person to work with. So ultimately, fingerprint recognition is more intrusive.

Its simpler than RFID cards, that's for sure.

Because it literally takes the person operating the till a few milliseconds to press the button to take the photo which is sent to the server to do the comparison with templates? Without a button push, the system would risk picking up the wrong person in the queue etc... The person running it needs to be able to tap to say "now, that's the person in shot".

In general, no, they don't now. Only if the school is in amber or higher measures, and only in corridors/common areas if they are.

The big problem with RFID cards is the faffing. Costs us hundreds of pounds a year to issue them and maintain them (lost cards, etc...). Without having to print student ID cards, I'd not have to spend on a higher price card printer, for example. Add in the volume of "forgotten cards" slowing down the dinner queue and it can be a huge pain.

I don't see how facial recognition used in this way is a problem personally. Having seen how this sort of tech works, and having investigated it for my own system (but then decided its time for my system to be retired), I can't see a big issue with it. You train it with a few photos of each person, and it usually requires an active "button push" to enable the camera to take the live photo to compare with - it isn't "always scanning". In a world where everyone posts 10,000 photos to the web with their own face and have no issues with social media using live facial recognition across everything? So long as you have consent, I can't see the issue? To me, it only becomes problematic if the system is extended and used for live scanning - tracking where children are in school etc...

As far as I can see, the process should simply be - change MDM assignment in Apple School, factory reset iPad to get new ADP profile and enroll in Jamf, assign device to group/profile in Jamf School and let it download apps/settings. I'm not sure where releasing it or Apple IDs come in? Are any apps you've deployed bought through VPP (ie. not bought on an Apple ID directly)?