DGardiner

Turn off inspection for the apple domains, atleast the account ones. The content they serve is largely safe anyway - the store should be controled by MDM, not on device anyway - you gain nothing from inspecting it it also states at the bottom of the kb article [h=2]HTTP proxy[/h]You can use Apple services through a proxy if you disable packet inspection and authentication for traffic to and from the listed hosts. Exceptions to this are noted above. Attempts to perform content inspection on encrypted communications between Apple devices and services will result in a dropped connection to preserve platform security and user privacy.

actually looking forward to this release! almost as much as team drives

looks like its nothing new, just pulling all of the seperate services into one pane - i like it! hopefully not too long of a wait and hopefully chat gets a bit love i just cant get away with the threaded rooms just seems odd to me

An EDU Cpanel licence can be got for a one off £30 admin fee last time i got one

Digital ocean have a free plesk vm image, i htink its 3 domains limit or something but that would let you get a real webserver setup with very little linux knowhow for 5-10 usd a month

https://support.google.com/a/answer/7644837?hl=en theres an option to use browser auth in here, would atleast make it not require a password if chromes picking up the auth?

How can people use DNS based filters? arent they childsplay to work around?

the only way id see this happening is by hiding every app except the ones you wish to allow... dunno why youd buy an ipad to lock to safari though? mosyle has a free version, would probably cover you https://myschool.mosyle.com/

thats the point, after this change they wont be able to?

i clicked until it said contact support anyway

We have offline storage disabled so its always files on demand so no downloading. i did no special config or anything it just worked out the box, we have roaming appdata though not sure if that helped?

works fine for us

Whilst true, would have been nice to just be a switch in admin

it wouldnt be so bad if it was a per OU switch, or a you know, a meeting that has external parties in the invite list have anon access and internals not? just seems like a backwards move

https://gsuiteupdates.googleblog.com/2020/07/anonymous-users-will-be-blocked-from.html What do you guys think of this? the lack of admin is a bit... i think this will hamper uptake more than protect users?

https://mymicrosoftexchange.wordpress.com/2015/06/21/how-to-configure-mail-flow-coexistence-between-gapps-and-o365-using-internal-relay-domains-and-mail-users/ setup the smtp connector in office365 to point at google(Step 4) - had this the other day after addding a few 365 accounts any mail to those accounts would not exit 365 to google until i did the above

https://tools.google.com/dlpage/dirsync/

Yealink T48S (£150) for the school offices, and heads where they wanted. Yealink T40G/T42G (£50) Everywhere else Usually order our phones from voipon, they will send you the MAC addresses on order so they can be preconfigured in the system for auto provision by the time the phones arrive its just a game of plugin and go

Id echo this, Our trust 3cx instance covers 10 schools now our average peak concurent calls is about 6 with bursts to about 10.

https://www.digitalid.co.uk/ is who we usually shop with for this stuff

I dont like leasing, it puts you in a position of replacing every 3 years or returning/extending/buying out the agreement - it also tends to put you in the position of having too much gear to replace at the end so you never get out of the loop. In recent years the servicable lifespan of a computer has extended a deal

Eh, if it would smash a standard TV panel it probably would have broke an old soft touch smart board thingy that its replacing! This is entirely dependant on the school/thekids like but even if you have to replace one a year youre probably coming out ahead

In some of our tight schools weve been putting up 65" tv's with chromecasts/appletv and the teachers just cast their devices to the board from wherever they work - they do have built in cast stuff but i havent looked at it to be honest and it seems to be working a treat, i honestly beleive the interactive thing is a gimmik, i find very few actually use it effectively. and its 1/2 1/3 the cost of a budget touch panel

https://www.jamf.com/products/jamf-pro/ were using the hosted product, costs us about £6.50 per device per year. if you are completely new to ipad start your ASM Enrolment/approval now now so you are ready, buy the ipads from someone who can enroll them in DEP(this can be done after manually using a mac and apple configurator but obviously its a manual proccess, but will help if you have some pre-DEP or non DEP resold equipment that are IOS10+). JAMF has a mandatory jumpstart training session for new setup though, this does increase the startup cost quite a bit but they will do start to finish first time configuration and it is absolutely worth it. Once complete, you will spend more time unboxing the ipads than actually setting them up with the help of proximity setup. Dont get me wrong, you can do the above with any MDM provider as long as they support DEP and VPP Device Deploy, Ive used Meraki(origional free product), Lightspeed, Mosyle, JAMF and jamf is by far the most reliable solution by far, Lightspeed used to fail to deploy apps because the initial deployment would choke the internet, download fail on a hanful of ipads and not correct that once things eased up, this gave me a year of hell and lightspeed supports solution was force app reinstall for the whole OU which would just move the issue to other ipads, i havent used it in 2-3 years now this may have changed but it burned me enough! Mosyle looked good but didnt really work as a trust wide solution for an all in one panel but i can see it being great as a single school and if you have the time play with the free version and bump it up if you need. When our trusts second big 1:1 program kicked off i managed to squeeze in a centrally managed jamf install so i took that oportunity and have not regretted it one bit. JAMF has some big third party integration companys too so you can really get some use out of the likes of apple classroom if you choose for very little legwork if you want the details of the company that we got farmed out to by our reseller i can pass that over, they basically supported our deployment for free post install and all they asked was to be on the table for any post install training/extras! edit, if you intend to go down the jamf route get that order in early, their training schedule was rammed last year and i had 600+ ipads to enroll in 1 week last summer.

are you using unifi wifi by any chance? we have had issues with the 5ghz band on ours recently taking an absolute age to distribute ip's - disabling 5ghz on each AP resolved the issue instantly