DGardiner

We have this across our trust too, not seen it personally but had a report from 1 person a week ago, today it seems to be more widespread. I reached out to google support earlier:

the group policy stuff is required so the smoothwall agent can detect logins from the logs. thats probably why youre getting unknown users it doesnt pull a database it populates as people login from what i understand

Have you did the required changes to the group policy for all your dc's and installed it on all dcs? https://kb.smoothwall.com/hc/en-us/articles/360007256160-Smoothwall-Filter-Firewall-Installing-IDex-Agent-on-Your-Domain-Controller

idex client or idex agent?

i always have issues with it. used this recently and it was much quicker and easier https://networkproguide.com/bulk-import-users-into-active-directory-from-csv/

we use cards primarily, but the users can self service a pin from the papercut user page if they wish and its 8 characters to discourage it being used - handy for if they forget the cards/misplace them

it does have a 30 day restore, but theres no restore single file or anything. its press on the user and restore anything upto a date, it works but i wouldnt bet on it personally i have managed to recover specific stuff using vault like, but that wouldbe dependant on your retention settings... again wouldnt bet on it but it works if youre stuck

this is the way, the setup was pretty prompt for us

i mean, i assumed people would be using managed ids in this scenario?

dunno about classroom integration, but it does full auto provisioning and sso - easy to setup

Not really, you used to be able to control which subnets it serviced and the statistics pane used to be handy to see how well it was working Now you have an on off button:

Yeah youre not getting any visibility of the proccess.... you just tell the macs to run the cache service, they tell apple theyre "caches" behind your public ip and when a device behind the same public ip tries to download something apple tell the device to ask for it from the "cache" which they then either download from apple to the cache and then pass to your device or pull it from another cache on the network.

Shame apple binned the server app and integratred it into macos, and whilst doing so gutted out most the config options. though if you have a decent amount of macos devices kicking about with caching turned on it may be pretty good

whilst true, its really not an inconvenience if you can keep the kids using in on the same ipads, the class management tools that come from it are really usefull and the kids 4 digit pins make it a doddle after the first session. its gotten alot easier to implement

if you use actual shared ipadm ode you get 200gb per user of cloud storage

thats not allowed.... In the old days before managed ids and device deploy you still had to evidence buying enough "gift" codes for the software. i think now theres a limit of 5 to an id before they start being funny now that theres a managed solution. Youre probably getting hammered for passwords because of the mass account sharing. Use device deploy, disable the store and disable account management on the device. ive got hundreds setup this way and never been asked for account details as theyre not required. On another note, we finally got our ASM federated with google and setup shared ipad properly on a hand full of devices to play with - the acounts are 4 digit pins for the kids so id say thats probably fine? its actually really good if you can set it up

What may be a shout is to deploy the idex client to the macs if the agent isnt working, but id assume if the login events are showing on the server it should work

Have you changed the relevant proxy to core authentication? edit: nvm!

Also im assuming you have - created an idex directory in the directories

If you go into the realtime system report on the machine, check to see if youre seeing authentication errors in the authentication filter

Any word on what the v2 idex agents benefits are? i notice it has some settings for cloud etc.. but cant find any documentation on the smoothwall kb

have you added port 81 to the web proxy as a usable port? Wep proxy > settings > advanced add the port to the usable ports list?

do it anyway, if something goes bad because "you never installed an update" you'll be in the firing line for it. They will only ignore it once.

use the WUFB gpos to Nag the user, then enforce an install if they dont make an informed choice to press install when they leave for the day. Will be some kickback initially but people learn to do them when its convenient or deal with it when the comptuer decides its time

Quick skim over this: https://support.google.com/a/answer/60218?product_name=UnuFlow&visit_id=637914121928139953-4138758074&rd=1&src=supportwidget0 seems that the contact sharing checkbox just turns on the managed directory.