rogerdnixon

Have you added the custom attribute on the google side? If not, you can login - but the account is not linked to AD and things like Papercut won't work. The AD password is changed when you login with the Google account immediately - no delay. So if the attribute is set correctly on the Google side it should just work.

Password sync happens when a user logs in. AD passwords and the AD login bit are not a thing that regular users see or even know exist. They always login with their Google account. You can still login with a local AD account without the Google Login - if you know the account name, password and how to get to the regular login screen - which people don't generally. The vast majority of our devices are ChromeOS - we use this approach to make "legacy" windows device behave login wise to like ChromeOS devices. Works well in the instances where we still have Windows - but the default position is ChromeOS unless there is a very clear need for Windows - so much now.

Maybe - not tried as we just change PWs on the Google side.

You are correct - change passwords on the Google side and the tool syncs them to AD. Don't change them on AD as that causes problems.

We just use the relatively new GCPW tool from Windows - my brief writeup here if you are in an AD environment: https://wpsit.blogspot.com/2021/03/google-login-and-single-sign-on-to.html - this is free. What to ditch AD (as we have done in all primaries), you can manage your Windows devices in the Google Admin console now - you do need Google "Plus" licences - my look at this: https://wpsit.blogspot.com/2020/02/google-mdm-for-windows-10-devices-more.html - things have moved on a bit since I wrote this - lots more features (inc software deployment) - but it gives you and idea.

Just install the free version on a device and test it out. If its not on the supported list - there is still a very good chance it will work fine. You can then zap it to the enterprise version once you know it works.

I'd go Neverware - we have zapped 100's of old Windows devices into Chromebooks across out Trust - manage as Chromebooks and they just work + easy to use. I'm assuming you are using Google Workspace - if so - its the way to go.

I'd take a look at the settings on the Shared Drive as you can add files from Shared Drives - I do it all the time. One of the Shared Drives settings prevents sharing of files to non members. If that's enabled on the shared Drive, they won't be able to.

Spot on - thats what Capita did to fix the issue today. Some files locked by a third party tool they said.

Not sure if anyone else has this issue. "Upgraded" to Spring 2021 and discovered today that all of our scheduled reports which automate all sorts of stuff fail with the following error: Unhandled Exception: System.TypeInitializationException: The type initializer for 'SIMS.UserInterfaces.CommandReporter' threw an exception. ---> System.IO.FileLoadException: Could not load file or assembly 'AbstractProcesses, Version=7.198.31.0, Culture=neutral, PublicKeyToken=21f532fe36bf9cd6' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040) at SIMS.UserInterfaces.CommandReporter..cctor() --- End of inner exception stack trace --- at SIMS.UserInterfaces.CommandReporter.processCommandLine(String[] commandLine) at SIMS.UserInterfaces.CommandReporter.Main(String[] args) Its with Capita tier 2 support - might just be us - but might not be. Anyone got any ideas what might be broken? Thanks, Roger

I ran one of these while waiting for a leased line to be installed: https://www.comms365.com/product/4g-router-wi-fi-c365-4gds-dm-w/ worked reasonably well. They have 5G models if you have that in your area.

I've raised Secure LDAP with Google direct and that's a mistake - its part of Fundamentals. Advanced Endpoint management has only ever been an Enterprise feature.

We buy from C-Learning.

Chrome Upgrade licenses are perpetual - I've vaguely heard of other options - mainly for business customers I think. Once used - they are tied to that model of Chromebook - so if it breaks you can reuse the license on another Chromebook of the same model. The current RRP is £19 and in March that goes up to £29 - so I'd buy as many now as you can. In reality you should be able to get them for £15-£16 if you speak nicely to suppliers. We never pay more than £16 atm. Just ordering 2000 to beat the price rise.

Crack it open and check the trackpad cable - not uncommon for them to work loose or to be bent in a funny way. I did have a dead Samsung from the DfE and they did replace it fairly quickly with a Dell - no new license though!

Seems fine here. I've had a few reports of the Classroom notifications issue - but could not reproduce it myself. Also report on the GSFE Google Currents community.

If you use G Suite, Google Voice works well - we use at a number of primaries. Integrates with all of your other services as well.

We have a MAT agreement with VM. Primaries 100Mps leased line and secondaries 1Gbps - zero down to date and low cost, never had to call support, account manager very helpful. Works for us.

Does not have to. You can apply different policies to different OUs. We use Wonde on a G Suite setup with 24 schools and have many 100's of governor accounts. Having said that we don't use Wonde for any for of SSO - just syncing users from the MISs to Google. We do use SSO for QR code logins to Chromebooks at primaries - but those policies are applied to Device OUs so Chromebooks can use QR code logins at primaries - but it only applies to devices with the SSO settings deployed.

Just have a dedicated OU for governors outside of the OUs that Wonde has anything to do with. Also, Wonde should not be messing with manually created users at all.

Works fine in a small primary - but in a secondary it won't work as the Classroom UI is pretty much unusable with >50 classes. I've got a Google sheet that they tick which class they want to look at each day. Then there is a script that exports this to a csv file and a GAM script that adds a test account to the relevant classes. They just use the test account to poke about. The sync to SIMS kicks the test account out at the end of the day and they pick new ones afresh.

Far better than most of our desktops or laptops. Very capable processor. AMD Ryzen chips are currently dominating Intel.

Insert > Drawing - you can then do pretty much anything you want. Google Drawing, be it in other Google Docs or on its own is very good.

If you are using GAMADV-XTD3 the syntax is "gam print guardians todrive" Never a space in the todrive

Make sure in Meet settings, students cannot start video calls - option down at the bottom. Then the teacher is always the Meet organisers - being the only one who can start them. It also ensures they get the attendance register (if using Enterprise).