DGardiner

MDM and ASM are not the same product. ASM is like your AD for managed accounts(if you use users), your volume purchasing portal and DEP - DEP being the king of kings here! It requires an MDM service to then leverage the above into a usable service - Without supervised ipads you lose all security and control and make them an absolute nightmare to manage as above >1 MDM

thats a lie... a proxy.pac file is a proxy... your offsite es exactly the same as SW except you use a cloud based proxy smoothwall uses on premproxy

Once its all setup apples onboarding is a dream to be fair. Unbox, hold a working ipad next to another and share the wifi key, next next next - setup Id hold off deploying any apps until you have everything enrolled though, once they start downloading they can be a bit greedy

By apple ID, im presuming you mean your ORG ID? That should be enough to get you started. You will need an MDM service of some sort to manage them from there. you wont need accounts as you can device assign apps you purchase. If its a cheap as possible deployment, grab mosyle and follow the setup path and it SHOULD get you from start to finish step by step once youre setup.

Instant alerts are still WIP as far as im aware? and either the children are being very well behaved or im getting very few hits!

Im honestly very happy with the chorme solution, if it mirrors that id be in! Thought the reporting needs some work to be feature comparable with onprem.

Last i checked doesnt every browser on ios have to use the built in apis? theyre all safari... with a different skin about the edges. So what the sharing tools etc arent upto "desktop browser" standards, can they type in a web address and view it? Some schools may not be able to dump the cash into another filtering solution so haphazardly

LGFL are offering a 6 month trial of their off prem stuff to schools and its nott too expensive post trial either

in households where this is the case we are providing connectivity and equipment

Google have some templates on the support page - But id argue operationally its required now in order to deliver home learning, We have been getting verbal consent where it was not already gained

Its more the full names getting completed than the email - the kids are ForSur#@ staff are forename.surname. I think if you anonymise the actuall names on the accounts in the directory it makes them a bit useless?

Ours was more staff cant dicern [email protected] with [email protected] and were scared something may get sent to a kid by accident instead of the adult with the same name.

I should add, if you dont use something like wonde/salamander to populate a Staff/Pupils group you should look into GAM for that and just run it on a nightly task or something

When you apply these it overrides the default "see everything" setting from what i understand - it resolved our issues atleast. You would set kids to see nothing, and staff to see all staff/kids/theirclass depends how granular you want it to be

Not true, Use a custom directory and you can chose who/what gets populated to the auto complete using groups in a couple of clicks. https://support.google.com/a/answer/7566446?hl=en

I agree, Whilst i do wish there was a "nickname/Class Name" field i could populate that would show in classroom to apease the complaints about names/respect etc... not that i agree with it but i can see why Isnt email the perfect medium for parental communication ? its all logged and auditable - no words in your mouth or lies? i dont know why you would stop a child emailing staff though, our pupils are internal/whitelist only

A bit defensive here... i have both worlds in similar quantities. I still hate that an onscreen keyboard takes up half the screen on either platform. That said the apple pencil has no competitor really - its not a dumb capacitive stylus

Make sure your schools named person (probably the head) is filling in the Form the DFE are asking them to complete daily. THen email the covid support address [email protected] , stating your ciscumstances, the schools name and dfe number and how many devices you require. Thats what weve done, ive not had any automatically become avaiable yet - but ordered 4 schools devices

we have a net2 entry panel https://www.paxton-access.com/us/net2-entry-touch-panel-surface-mount-2/ it supports video, but the documentation is.. lacking and it is connected to our hosted 3cx, ive not tried enabling the video on it as none of our desk phones support video. but it has a directory on the panel and calls the extensions as pressed. the person who answers can then press 1 to release the door. if youre interested, paxton will send you a "demo kit" to test your integration prior to purchase

with ours the touch only registers on the PRIMARY display when in extended mode, that said ive not looked for the above tickybox to pick screen

put them into DFU mode and restore

you want the top one, im not sure how they all behave in regards to placing the deivice. The one you have selected will require someone with permissions to re-enroll it. the top one just puts it straight back into google without any user intervention. Just power wash one after updating the policy and see what happens

Exactly, why even invite bromcom to the table if this is how its gonna be played out. Even if the schools used the competitor in 15 schools, this is likely whats been a catalyst for the MIS change and would obviously be a prefered supplier, 15 schools you dont have to retrain $$$$ and already held expertise on using the system of course theyre gonna have a leg up. Even if bromcom was cheaper by a mile, if the schools see the functionality they need in arbor then thats their choice.

Restricted and tick the box

Browser only, theyre better that way anyway imo. The web apps are listed as apps anyway i think in the app drawer - coud set the homepage to https://workspace.google.com/dashboard cant see a search button though so that might upset some! Id also reccomend going to https://admin.google.com/ac/owl/list?tab=services and setting gmail/drive to restricted - high risk access, this will stop staff gfiving random web apps access to your drives/emails etc. this will mean you need to whitelist anything requesting anything in the high risk scopes, but will still functions for things like "login with google"