rogerdnixon

OK the typical price is around £24 per device for its lifetime. We use C-Learning for licenses - but there are lots of Google Partners who will supply these and add to your Workspace domain.

£3.33?? We typically pay £24 (few years ago they where around £15) per device for ChromeOS Upgrade Licences which is what you use to manage devices on the Google Admin Console. Lots of suppliers out there. Licence is for the lifetime of the device. You might be looking at the annual licence which I believe does not exist for Edu domains.

Are they in the classroom_teachers group? Thats how it knows they can be teachers.

As other have said - built in if you have Plus licenses on Google Workspace and its really good - we make extensive use of it across the Trust along with document approval. Plus is worth it for the elevated security tools - but end users also get all the bells and whistles - this being just one on many features. So worth considering if you have Workspace and are on Fundamentals.

Some of our primaries are on FTTC where they can get it. Typically BT business with a static IP (needed for Securly filtering) and a UDM Pro for a Firewall. Works great 900 down and 110 up. We also have a 5G connection from Three as a backup for about £12.50 a month. Otherwise its leased lines or in our case Gigaclear.

Canvas - the built in paint/drawing app?

Securly either via the extension or SmartPAC has always done this - works great - dead simple to deploy.

The permissions on the doamin wide delegation we have and it does work are: https://www.googleapis.com/auth/admin.directory.user https://www.googleapis.com/auth/admin.directory.user.readonly https://www.googleapis.com/auth/admin.directory.userschema https://www.googleapis.com/auth/admin.directory.userschema.readonly https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/admin.directory.orgunit https://www.googleapis.com/auth/admin.directory.orgunit.readonly https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.directory.group.readonly https://www.googleapis.com/auth/admin.directory.group.member https://www.googleapis.com/auth/admin.directory.group.member.readonly https://www.googleapis.com/auth/apps.groups.settings https://www.googleapis.com/auth/classroom.courses https://www.googleapis.com/auth/classroom.courses.readonly https://www.googleapis.com/auth/classroom.rosters https://www.googleapis.com/auth/classroom.rosters.readonly https://www.googleapis.com/auth/classroom.profile.photos https://www.googleapis.com/auth/classroom.profile.emails https://www.googleapis.com/auth/classroom.guardianlinks.students https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events https://www.googleapis.com/auth/calendar.events.readonly https://www.googleapis.com/auth/classroom.student-submissions.students.readonly https://www.googleapis.com/auth/classroom.student-submissions.me.readonly https://www.googleapis.com/auth/classroom.coursework.students https://www.googleapis.com/auth/classroom.coursework.me I had to get this from support as the list online is out of date.

Does the user you are signing into actually have a standard or plus license (if does moan if not - but should let you login still...)? Is Windows management actual enabled on the admin console. I'd also check content filtering is not blocking something - so test on an unfiltered network. Assuming you have Plus or Standard licenses - you can raise a support ticket with Google if you don't get anywhere and they can look at the GCPW logs and figure out why it not working for you.

Have you set the domains allowed to login reg key? By default there are none. If you download via the admin console you can have this preconfigured. Moving forward to actually manage the device you would need Plus or standard licenses and I'd suggest using Edu not Pro as Pro does not support many policies.

Our ticket said fixed in Chrome 136. So the next release now.

Maybe - we shall see - hence the "give or take". End of April would be nice.....

Being fixed in Chrome 136. So month and a half give or take.

We use Securly across 34 sites now and 31 schools. This has one console and we can clone policies and easily onboard a new school. Works fine across a range of devices.

If you raise a support ticket with the details of the message e.g. the full message details, Google can look at the back end logs and say exactly why an email was blocked. Do this as soon as possible as they don't keep the detailed logs for long - about 4 days I seem to recall. If the sender is legit, get the recipient to pop the sender into their contacts which can help.

Its worth noting, that unlike Windows 10, it won't stop getting updates. It just means Google will stop testing the latest release of ChromeOS on that specific bit of hardware. So sometime down the line - you might find the it just gives up and won't boot or the video is messed up or the like. The list is also the ones they have managed to test ChromeOS on - there is pretty much an infinite combination of hardware out there - and most will just work fine on ChromeOS for many years to come and receive regular updates. The benefit of having kit on the list is if something does not work, you can raise a ticket with Google and they will help you get it working. If its not on the list they will not.

You use the same Chrome Upgrade licences that you use for Chromebooks. So about £24 per device. Google has a official supported list here: https://support.google.com/chromeosflex/answer/11513094?hl=en Reality is that most devices work just fine. I've had a few webcam issues on the odd device but thats about it. Like all OSs - an SSD makes it a lot more useable - a cheap 120Gb one is more than enough. But a mechanical harddrive will work a lot better than it does on Windows.

Yes - Google have identified that this has been caused by a recent Chrome update and are looking for a fix. You should have had an update if you logged a support ticket with Google. My ticket update states: Our product team shared that the issue you are facing was caused by changes in the chrome browser. They also informed us that they are working on a fix. I will keep you posted in case of any advance, please expect more information from us in no later than the next 4 business days (Tuesday March 25th before 6 PM CST).

We onboard schools into our Trust that are O365 and we are one of the biggest Google Workspace orgs in England. Happy to discuss what some of the actual benefits are and how to practically do it. Just PM me and we can fire up a Meet at some point. I would echo what others have said - this is less about cost and more about the tools and their impact on learning.

Google have reproduced the issue and are working on a fix - that's the latest I've got.

If you want to manage Android devices on the Admin console you need either Plus, Standard or the dedicated Mobile device management licenses. Cannot do much before you have those. Then its important to realize that these are single user devices. So on the OU the assigned user in in, you need to enable Advanced Android device management. Then go through all the policies for general and Android settings to create the experience you want the user to have. Also deploy whatever apps you want. Note - they if the person users a private mobile device, they will be promoted to setup the device management app and a work profile. If these are going to be multiuser - then you would need an OU in with some generic user. Not you would need to block browsing as you could not meet KCSIE. To be honest you would be a lot better of with Lenove Chromebook Tablets - then its fully multiuser and a doddle to manage like all Chromebooks.

I've got a Google Workspace support ticket open about this and have referenced this thread. I'd recommend people raise there own ticket to get more traction in this.

You typically have a primary domain and you add secondary domains to it. So in out setup we have pone primary domain for the Trust and each school has their own domain as a secondary (30+ of them). When you add a secondary domain, the GUI for doing so gets you to verify domain ownership and directly talks to most domain providers to do this or you can manually add a TXT record. Then their is an option to enable mail and this will add the MX and SPF records for you if you domain provider is directly supported e.g. Cloudflare - or you add them manually. Then you can go to Mail > Authenticate Mail and it will generate a DKIM record for you that you do have to add manually to your DNS. Add your DMARC record to DNS and I'd also enable MTA-STS while you are at it. Then you users can have accounts with any domain you have added and can also have aliases of any combination of your domains.

You want this set to false: https://chromeenterprise.google/policies/#PromotionsEnabled - its new and the old policy is depreciated.

Across out 29 schools I don't often have to use support and when I do they do seem to be on it. We deal with lots of third parties and I'd say they are generally one of the ones that responds the fastest as opposed to some that takes daya/weeks or even moths to sort things (things on one that starts with a B and another that starts with a C.....). I have onboarded schools who have had poor setups and really have not set things up correctly and therefore were having issues - but I suspect that's true of most systems.