Face-Man

I think this youtube video explains what you want to do

I've found unless you have auto join turned on it will drop the wifi connection when locked.

I've just done a test on one of our ipads and it is the apple "web content filter" when it is off you can search for HOT when it is applied you get the screen you show above... I'm guessing Errol Brown's estate might miss out of a few royalties or maybe they want to block "you sexy thing" and just though HOT was a catch all. You get the same issue in bing and when using chrome on an ipad. I guess if the other content filter is good enough then maybe turn the apple web filter off Thanks for the heads up.

Sorry it was only adding for non domain devices (printers, phones, tablets etc) we also tried it for pre-staging devices before adding to domain. We use Ruckus dynamic Vlans based on AD (username for wifi devices). You are right about spoofing MAC address but no security is perfect or 100% reliant on one layer...

We have implemented this and it does prevent anyone bringing a device and unplugging a school computer and plugging a laptop into a network port (we had one teacher who allowed their student to bring his personal apple mac in and plug it into the network and cause a whole bunch of data protection issues). You just have to populate AD with the MAC address of every device and it works well for both wifi and cabled network .... apart for the music suit Apple mac's that keep bringing up certificate errors.

If you have office 365 you can achieve this using a microsoft group (it can even have an external guest email in it) https://support.microsoft.com/en-us/office/learn-about-microsoft-365-groups-b565caa1-5c40-40ef-9915-60fdb2d97fa2

Apple have be told about this since ios 9 in 2015 https://discussions.apple.com/thread/7300114 but the only way is to remove the emoji keyboard in settings manually...

We use LGFL so they provide the filtering using webscreen that works well. There are a list of filtering providers who have responded to the government legislation on "Keeping Children Safe in Education" which I would say needs to be a base line for any replacement you are looking into. here https://saferinternet.org.uk/guide-and-resource/teachers-and-school-staff/appropriate-filtering-and-monitoring/filtering-provider-responses

You may well of though of this but there are several ways to run windows software on a mac using Virtual machines etc. There are some ideas her about what might work https://uk.pcmag.com/virtualization/135790/get-the-best-of-both-worlds-how-to-run-windows-apps-on-your-mac

Not sure you will be able to see the screens of a "personal device" as most manufacture are massive on privacy. You may have seen this already but this site a has some interesting ideas about managing BOYD in schools https://www.core.co.uk/blog/building-an-effective-device-management-strategy-in-education

I'm sure we can all pick holes in this set of standards for all the Hardware and backend systems need in a modern Primary, Secondary and MAT. But it does present some interesting points of reference if wanting to convince SLT or Governors for the need for hardware replacement or Cyber security etc https://www.nen.gov.uk/advice/standard-network-design/ My personal gripe is I would not recommend 5 years warrantee on a chromebook as that would cost as much as the chromebook itself....

If you are testing LGFL from a PC plugged into a 10/100 switch even if it is a 200Mbps connection you will only get 100Mbps as the switch is the bottleneck. The DFE are recommending that all school network kit should now be capable of 1Gbps to the desktop. https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges/switch-standards-for-schools-and-colleges While this is of course all depended on budget and your current solution is working but I would be using this set of DFE standards to get money from the school to improve the speed of your switches at some point in the next year or so.

It looks like this website has a lot of explanations as to the onboarding process onto an LGFL connection. The first thing you might want to do @chekmate1984 is get set up as a nominated contact on the support site. https://national.lgfl.net/services/moving-to-lgfl

It is probably because of this https://www.primarytimes.co.uk/news/2022/03/north-london-pupils-lead-world-in-trialling-new-technology and https://sites.google.com/lgfl.net/immersivelearning/home The ipads need to be newish (from 2017 and running ios 12.0) for it to work there are legacy AR resources here for older ipads https://sites.google.com/lgfl.net/legacy-augmented-reality-resou/home and you can use adobe aero https://www.adobe.com/uk/products/aero.html

If it is just about cost I would contact LGFL to see what deal they can do for you. When we did a value analysis based on what it would cost to replace all the services we use the LGFL did work out the lowest cost but it does depend on how many of the "extras" you need to use and what price the alternatives are.

I worked in a LA who gave out laptops to their LAC these were personal devices new out of the box for the child to use as they saw fit a bit like a parent buying a laptop for their child. There were some filtering and an aup but if they wanted to play games or use facebook that was up to their foster carers to discuss with the child.The schools were not involved one bit and they should be treated as boyd if brought into school. Certainly any school software licences small print would be tested if found on this kind of device.

As a mac user and having to support them in schools my tips would be 1) Any budget to buy hardware needs to include the cost of MDM and training for you don't accept "we don't have the money" no money no macs 2) DEP and ASM are really good for M1 hardware 3) Check out https://twocanoes.com/products/mac/mac-deploy-stick/ https://twocanoes.com/products/mac/mac-deploy-stick/ for reimaging quickly 4) MacOSX does not apply NTFS permissions on folders if a mac can see a share a mac user can browse it's contents 5) If badly setup the local hard drives can get full of student work which is not saved anywhere else 6) Mac mini and PC monitor + mac compatible wired keyboard and mouse can save money on iMac's 7) Never use iMac wireless mice and keyboards in schools classrooms We have bought from Toucan (now part of academia) they always seem to have provided good value and importantly after sales support.

Any annual fee is peanuts compared to a potential GDPR fine for having an ipad stolen with data on it. Our school teachers ipads are managed (ASM and meraki MDM) but Teachers have freedom to add any app they want etc but I can wipe them and lock them if they report them missing

PS using one school itunes account is in breach apples t and c. They would never find out or if they did do anything about it but is not really needed.

I agree I've setup loads of ipads for teachers and just avoid shared ipad and any icloud/itunes account. All the apps are bought via vpp and pushed using meraki and the ipads are enrolled in DEP so that they don't get activation locked. This way the teacher can use the full 32gb and they take responsibility to upload to google drive or office 365 depending on what the school uses (we even used dropbox before GDPR but thankfully that is no more). The advantage of doing it this way is you can tick the box in meraki to keep the app upto date and managed so everyone has the same apps and the same version of apps. the 200gb of icloud space sounds nice from apple but I never really found a way that it can be more useful than other free storage. this pdf seems to explain how to upload a movie to google drive https://www.nausetschools.org/cms/lib/MA02212418/Centricity/Shared/Technology/Backing%20up%20iPad%20files/How%20to%20Upload%20iMovie%20Videos%20to%20Google%20Drive%20on%20iPad.pdf

Office 365 full fat apps are licenced differently from Office 2016 2019 and 2021 so require a fresh install rather than upgrade https://support.microsoft.com/en-gb/office/download-and-install-or-reinstall-microsoft-365-or-office-2021-on-a-pc-or-mac-4414eaaf-0478-48be-9c42-23adc4716658#InstallSteps=Install_on_a_PC

I couldn't get this to work with Big Sur so ended up adding the shares to all users dock then they click on them and mount the drives. Not ideal but does work

I just hit an issue with the latest ipados that the restriction to prevent the end user for erasing the ipad no longer works. With a supervised ipad in IpadOS 14 the end user could not get to the setting to "Erase All Content and Settings" . With iPadOS 15 this moves to a setting called "Transfer or Reset iPad" where the user can then wipe the whole thing. The ipads is protected by DEP and so still no use if stolen it is just going to be a real pain having to re add then to the wifi when the student discover that they can be wiped. Fortunately I've just been doing this on a few to test.

Depends on context but I often get the argument "I can buy this cheaper at PC world" . I then have to explain that equipment is designed for home use doesn't have a business type warranty or have security features such as TPM . The counter arguement is that ipad not really designed as education ict equipment out of the box you just need to have all the things in place like apple school manager and a mdm to make them fit for use in school. However there are some cheap switches and wifi solutions that are not fit for use in school due to the specific requirements of education. My advice to schools is invest in business grade tear 1 supplier for your infrastructure equipment that then gives you options to separate cheaper devices from your data to avoid any data breach risks... PS . a bit redundant now but encrypted USB sticks are not educational ICT equipment PPS do you mean educational ict equipment like beebots ? (see https://www.tts-group.co.uk/ for loads of this type of equipment)

you can put them in recovery mode and wipe them to remove the passcode but if they are not enrolled in DEP and have personal itunes/icloud accounts on them you might find they are activation locked and useless.... I learnt this the hard way when taking on a new school who gave out ipads for staff to setup themselves.....