jmak

Principle 5 of the Data Protection Act 1998 states: Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. So it's been a thing for 20 years...

@bondbill2k2 or anyone else: Have you got any experience of the Windows 10 Kiosk? On first appearances it looks like it would work as a way of speeding up logins for shared student devices, but when I read the MS documentation https://docs.microsoft.com/en-us/windows/configuration/set-up-shared-or-guest-pc it says:

I got soooo close: I have GSuite enabled, accounts with SSO for all staff, pupils and governors, team drives in use, file stream tested and working, first Chromebooks deployed, but...... Today we announced that we're entering consultation to amalgamate with another school. They have already implemented O365...

Haven't tried it, but I assume it runs the same software as the standard controller. In which case the APs will continue to work and connect clients, but you'll lose some functionality such as the built in radius authentication and guest portals. I've had APs running at home for months at a time without the controller - they also reboot without needing the controller.

AFAIK you either set up your own instance on AWS (or similar): https://help.ubnt.com/hc/en-us/articles/209376117-UniFi-Install-a-UniFi-Cloud-Controller-on-Amazon-Web-Services Or buy one of their cloud keys, which isn't actually in anyone else's cloud, but is an independent device that sits on your network and is remotely accessible: https://www.google.co.uk/url?sa=t&source=web&rct=j&url=https://dl.ubnt.com/datasheets/unifi/UniFi_Cloud_Key_DS.pdf&ved=0ahUKEwj2oOuh6PXZAhXkK8AKHcL2CXAQFghPMAw&usg=AOvVaw1yQtPYPYooFSaYsisKCz3u It doesn't have to be on your school network - it can be anywhere with a network connection and can control multiple installations.

Business managers

Yeah, I sat and watched one on Monday. Once I'd sorted its complaints about Sophos, it took two and a half hours to do its thing. I know that in theory a user could have continued working, but the hard drive was being hammered the while time and the NIC want doing much better. I'd already decided what I was going to do, but when I saw that all the crud had magically reappeared [emoji35] I know I shouldn't be surprised, but I still can't believe how ridiculous some of Microsoft's decisions are.

Updating 1511 brings it all back. Time to re-image....[emoji17]

Looking into this in more depth now: I'm wading my way through the various options in the MS universe and can't get my head around which of the seemingly infinite options I need to choose. The plan is that all data will be either in SharePoint or OneDrive or O365 email. What I want to do is prevent information that's potentially personal or confidential being downloaded onto personal devices or sent to people who shouldn't get it. I think I can do it with the free (included) version of Azure Information Protection. Can I put a default classification on a whole library which stops download to non-domain machines? The instructions I've seen show how users can classify each document, but I can't see that happening.... I'm thinking along the lines of a library for curriculum resources which you can access anywhere from any machine and a library/collection for everything else which will be marked as confidential. Are there any guides? Or better suggestions?

We had a quote - special prices as we were referred by another local school. Product looks OK, but not remotely cost effective for us. Have you had a quote yet?

Rubbish paper system here. I did put together a simple Google form, but apparently that was too complicated....

Just re-read my response and realised that it probably doesn't come across the way I intended it: My "no from me" was supposed to be a "don't do it" instruction to staff in the training session. I got the impression that the OP was looking for suggestions that appeared to be a bad idea, but weren't actually a breach and was trying to say that this wasn't suitable. TLDR: I agree with @enjay

I'd say that's not a data beach.... Yet. Unless the staff members' laptop is encrypted, the data is at risk. If you can't prove that all copies are deleted when the staff member leaves, you can't apply the rule to only keep the data while it's required. So it's a no for me [emoji3]

They're now available in post 91 [emoji3]

We're trying a face to face update this time to try and fill in the gaps. Office staff are attending parents evening and will have a print out from SIMS of the contact and medical emergency information. We'll then ask the parent(s) to confirm all details. We're particularly looking to ensure we have three valid emergency contacts after seeing this story in the news: http://www.bbc.co.uk/news/av/education-42861015/children-left-with-their-father-s-dead-body After our "non-snow-day" notifications we had a steady trickle of "I forgot to tell you I'd changed my number calls".

Hi @BFCIT. Did you find out any more about this? My kids have just been asked to sign up by their school. They're not required to give any personal information at sign up - just school email and create a password. Therefore seems fairly innocuous, but it's be interested in more information about what days they hold and where it's stored.

Thread necromancy: Does anyone use ANB Activman for provisioning AD from SIMS? I know it can be done in Powershell, but not with my level of ability. For the price of this product, it's not worth messing about trying to learn something new. There's a free trial available, but everyone in our SIMS already has an AD presence, so I couldn't prove much....

Sheet notifications would be simpler, but I didn't want to create an extra place that had to be checked for messages. Sites was our first venture into Google Suite, and we've never used the Gmail functionality, so getting an email direct to the office inbox that can be replied to is easier for the user. PS: I can't take any credit for the script. I found it on Steegle.com which I find a really useful resource.

Schoolcomms message to all parents plus website here too. Reason for post is to mention that it's worth checking default settings: we usually set SMS or App, so if the parents do have the App it saves us text credits. I checked the delivery status of the messages and found that a good percentage of the messages sent to the App had been delivered but not read. We now send urgent messages via SMS only.

When I started 7 years ago, setting up a "digital staff notice board" was on my job description. Turned out it was just something someone thought sounded progressive and no one actually wanted... We have made some progress - we now have a weekly "diary dates" meeting on a Friday, after which the electronic diary (woop) is updated..... And then printed out and distributed [emoji17]

I don't have a system or the Powershell skills to automate SIMS to onsite AD, so was wondering whether I could do something with the systems we're already using/paying for. Otherwise, I agree - seems like the more obvious way round.

I'm looking at moving to a hybrid SSO system and trying to work out whether I can make good use of what we've got our whether I should start again. Current setup: onsite AD with Groupcall IDaaS. AD provisioned manually/script, IDaaS provisioned automatically from MIS (SIMS). IDaaS authenticates against onsite AD. Target: SSO with hybrid onsite and Azure AD with accounts automatically provisioned from SIMS data. Question: IDaaS can provision O365 accounts based on SIMS changes. Could I then take the O365 accounts to provision Azure AD and then synchronise back to on premises?

I agree with all of the above. Most of it is advice for the school (for you to pass on). In terms of what you need to do, I would refuse point blank to use personal email for any school business. That's to protect you, not the school.

+1 for the Wisesoft to amend/create AD entries.

I created a "Contact Us" form on our Google Sites website which sends an email to the admin email address when someone fills it in. I became aware today that it had stopped working - it was still capturing the form content in a Google sheet, but wasn't triggering the email. The only thing I can think of is that it's a deprecated feature from the old Google Sheets - I created a new form and a new spreadsheet and pasted the same script in and all seems to work correctly now [emoji120] I'm probably in a very small minority of people who use a script on a Google sheet populated via a Google form to send an email #and#hadn't realised that the feature had changed, but thought I'd post just in case anyone had similar forms that they haven't checked for a while...