DGardiner

if youre having issues here a bad choice of MDM or i would guess not wanting to pay for MDM is the issue, IOS10 was the turning point in making them completely hands off and managing them effectively. im working from home at the minute and deployed 10 ipads last night while they were at a teachers home. she unboxed them, connected to her home wifi and pressed nextnextnext - took them to work today and taught a class. Chromebooks are another great choice, but you really have to manage expectations - People think theyre ipads... and pcs.... and will ask you to install stuff, buy windows software and ask for it to be installed. We have both across our trust and both are a doddle to manage - but for ipads your mdm choice will make or break it

Hope so, competition in the cpu space is always good for the consumer! i almost went for a 3900x but just had visions of me mucking up the paste and killing it before id even turned it on

weve had it here a few times too - FULL NAMES WOOOO, PEOPLE CAN GUESS THE CHILDS EMAILS! except they cant send or receive from any domains not on the whitelist we ended up going with forsur#

Multicore workloads are pretty few and far between outside rendering really... the lack of a retention bracket and every other post on the internet being "i removed the heatsink from the cpu and pulled the proccessor with it, bending the pins" just made me anxious about it

Ive just recently upgraded from a i7 3770 to a i7 10700k, the performance difference is barely noticable to be honest. picked intel because the amd socket gave me anxiety, and the higher single core clock speed in most cases will be of more benefit if the proccessors the bottleneck. that said it boots faster, my nvme disk is now onboard instead of in a pcie slot, its quieter and feels a bit snappier - so im happy with the change!

ask nicely they may give you an admin account! its all audited to hell anyway so you couldnt break something and blame eachother so no reason not to!

Oh, be sure your deployment policies are aimed at the Users OU, not the device - the apps are deployed to the Users

@Koldov If you log into GSuite Admin > Devices > Chrome Management > Managed Guest Session Settings you can configure it there - Apps seems to be mentioned here. If you click there, thers 3 tabs Users and Browsers, Kiosk, Managed Guest Sesions Kiosks (Basic guest mode)cant me MITM'd or have policy enforced much further than opening preconfigured webpages, this used to be how you did guest access. Managed Guest sessions is what you want as you can configure a bit more on those, but the settings are in the seperate tab to your normal user config edit You can force a chrome policy sync by logging in then going to chrome://policy in the browser and hit refresh - then reestart the device and it should be as configured in admin

https://support.google.com/chrome/a/answer/3017014?hl=en#:~:text=With%20managed%20guest%20sessions%2C%20multiple,as%20loaner%20devices%2C%20shared%20computers. there were some changes in the last year so it may be out of date - ill have a look in ours for the specific wording as there is 2 different types

I dont think you can laod extensions in guest mode

That would depend on the proxy, our smoothwall auths from the browser plugin that is enforced using the users login - so it should?

hopefully its quick, one thing i like about the situation is its kind of forced alot of people to move into this century techwise. sending an army of staff to a school 50 miles away with expenses/wasted travel time etc out of old habit can hopefully be stopped and these things used in their place!

We had this, apparently google meet doesnt work with over so many users... and has nothing to do with the users wifi/4g and the audio feedback of 20+ people with the audio on speakers causing a feedbackloop. We blocked all zoom emails/invites coming in at the start, people shouldnt be using unsanctioned services for anything let alone anything remotely confidential - We had people from the local authorities trying to conduct child protection meetings over it the week when all the zoom drama kicked off, wether this was approved by the authorities or not i have no idea but we noped out of tha - Had a bit of hastle from some staff who just dont accept they cant have their own way. I do however wish google would pull out their finger and incorporated a few more features...

https://pdfsam.org/

We use intake year, purely from a cleanup when they leave standpoint - the actual settings applied come from the pupils OU (Whitelist only external mail/etc)

back to the original question - KS2 have their own accounts for sure, under that we use managed users on the chromebooks which login without a password - this gives basic access with a list of favourites/etc to the internet but no access to google apps.

GAM is easy to setup, pretty much does itself these days just follow the steps on the wiki. the google bulk import is just a csv, half hour of excelfu and create some OU's in google as you need and press import and examine the report for errors after. we have our kids on a subdomain - the bulk import will Update any matching exsisting accounts so you need to be careful with how you generate the kids email addresses/doesnt match existing accounts. i dont mind sharing my scripts/excel sheets if it helps, its all basic and probably could be done better like but gives you somewhere to start/play from

careful with wonde... they sold us the world, claimed their SSO thing would work fine for our needs and after payment it came to setup and all the gotchas came out. the SSO had to be system wide so will affect staff, had trouble using multiple email domains/subdomains If its just primary i would just get an export from the MIS and use gam/google bulk import to create the accounts as needed then use gam to script the OU's you have laid out into google groups as needed.

Ill have to ask some questions about that then at our next order! not that theyre a pain to setup but would be handy to just unbox and go!

thats one thing i do wish google would do, DEP is amazing

Really? none of my schools VLSC have MAK keys associated with ent only KMS ive started using pro workstation anyway, seems to have all the crap removed except xbox but i can deal with that

i think EDU can be activated with MAK keys, ent cant

is this not just bad connectivity?

ive never had issues with either, my only complain its the amount of lenovo "boatware" that comes on them i just wish the laptops would come clean!

You get mounts with the 5pk no POE injector tho - the mount is not a rail type though. https://www.broadbandbuyer.com/products/23890-ubiquiti-uap-ac-pro-5/ you can see them here in the images the unifi switches arent too pricey either - for the added cost of the POE injectors you might find it a bit more beneficial to spend that money on one of those