DGardiner

your biggest issue will be getting staff to play ball, the resources/guidance will not account for chromeos for the most part and they will come to you for 'install x app' or 'all my stuff is in smart notebook' and you/they will need to find suitable alternatives - at this point the teachers either play ball and find something or run straught up the ladder crying 'i cant do my lessons' id personally get some of the staff on side, and get them a decent chromebook with all the bells and whistles, 360 screen/stylus/not 11" and get them to prove it works and with your support help them get the extensions/features they need

Yeah, im awaiting my quotes now for a few options. I can share the pricing/solution if people are interested.

buy a starlink from a reseller, was speaking to one the other day and i can be turned on an off as required (30day contract) or left online ready at your cost. our plan is to either have one in each geographic location for our schools and run it to where is required - with a smoothwall s2 that i have spare. - added benefit of taking internet to residentials/weird places if we need to

check the KB, theres a few options, the browser has a few different configs you can sate to change how stuff works. Ours are shared ipads so i make the browser force login and it stores the ID in the pupils cloud storage so they never have to login again (as they log into the ipad) https://kb.smoothwall.com/hc/en-us/articles/4404006049810-Installing-Cloud-Filter-for-iOS you could make it identify the ipad in the config so reporting would say which ipad also, probably one to discuss with the engineers at setup time

If you use smoothwall, get in touch with your account manager and get the cloud filter setup (its included in your onprem licence), deploy the smoothwall browser with the configs relevant to your environment and then disable safari on the devices - Filtered internet off and on site!

you will need all ssl filtering off for epic stuff too i suspect

use iis smtp to relay up to google, thats how i did our remitance sending since the saoftware wouldnt connect to google

just go direct to nominet and claim/move your address its fairly painless and costs £10

not that ive seen, i just sat and read through them and turned off what i didnt like, if youre refering to the extension etc i think smoothwall have a list of stuff to disable that can be used to get around it with the installation instructions

not that ive noticed, just make sure you do all the other stuff like disable dev console etc so they cant guest session around it and that

setup a proxy with no ssl interception and point the chromebooks through it. once the cloud filters installed you dont need to intercept cause all the filtering is done in the browser itself

deploy the cert as a device policy on the devices OU, this preloads the cert, you will still have to exempt a few urls to get enrolment working, but you can sit with the live filter and see what urls its talking to to get it going. you then dont need to deploy the cert to users then restrict your chromebooks to logging in with accounts on your domain.

i was just assuming it may need enabled in apps > workspace or additional apps

is it not the case that ou need to enable it in services or something?

its possible, you just need to ask for the iso, i dont have a smoothwall box anymore either theyre overpriced and low spec for the cost - i doubled the spec by just using the s10(if i remember right) quote as my budget. I did end up having to run it in hyperv thought as the version of debian they use is so out of date it doesnt have drivers for any of the network cards i had

were 3rd party hosting it, 230 a month. 3cx pro, 15 sip trunks, 32sim calls - Just shy of 300 phones on it - it works really well, its probably simple enough to run but the telephony side of things isnt my area of expertice so i like that i can call people to sort that side of things or help when things go sideways, which i can count on one hand in the last 4+ years

are you trying to check the status of a message, as in someone is saying "i didnt get that mail" just use the mail log in reports, it will have post delivery status (inbox/trash/read/etc) will still be there even if deleted

probably more likely theyre using the stored functions to extract the data easier rather than reading the mess of the database and reassembling it to suit their needs

play hardball, ok ill go elsewhere then

i mean its not like a decent portion of thems workflow is Log into computer, open chrome...... how would we. remove a step

every penny? its free

id just add a firewall rule for the specific webservers ip - its not worth the hassle, i wouldnt however open it up globally

well... since its fixed. Referrer was from ......

get the mailid from an origional mail and send that, ive no idea how 365 works from a mail standpoint

recall email doesnt exist if its went external. you can delete messages in 365/google but theres some hoops to jump