CyberNerd

It's getting a bit off topic now, but yes on most BYOD devices we can push out software. Clearly I couldn't force a home content filter on these.

I know BYOD doesn't work, except in places where it does. (looks at management console of 850 student/staff owned devices).

Indeed, it could be a good money saving tactic towards BYOD.

Take a look at Discovery Education. It's integrated with our GAFE. Discovery Education UK | Discovery Education UK

I'd be inclined to put something insanely restrictive in there to bury "we'll monitor what you do at home" in worse news!

It sounds like you have some sort of policy enabled that is restricting sign in?

You open an external IP on your Firewall on a specific port and forward traffic to it (IIRC it uses NTLM auth). On the laptops, set a proxyconfig.pac file so that if the machine has a matching ip address as your school network it will use the internal smoothwall and if it doesn't it uses the external smoothwall. You have to assume the RFC1918 addresses of the home networks (usually 192.168.1.0/24) are different to the school ones.

There's no point to even think about if we can NAT at the gateway. Our internal network will be ipv4 for the foreseeable future.

We can do this with Chromebooks and Smoothwall - force the chromebooks to use a global proxy no matter where they are. We use it as an 'opt in' feature for students/parents. Much more difficult on home owned machines, and staff won't be best pleased! Perhaps your best bet may be to redirect staff to your web/intranet page and use analytics ?

thin clients, it does it by itself. You could probably use delprof on a logoff script in windows. Thinking about it, we don't do this on OSX and not had any problems there either.

We don't disallow access to settings. I can't see any harm in allowing it; it's been installed throughout the college since about 2009 and never noticed problems. Important settings are pushed via GAFE or GPO. edit: should say that on the windows machines the profile is deleted on reboot, on chromebooks I am still waiting for issues.

Whenever we have Chrome problems that is tracked to an account it is 9/10 times fixed by CTRL-SHIFT-DEL to clear cache. If you want to check if any plugins are running/confusing things try SHIFT-ESC to get the task manager.

cache_peer x.x.x.x parent 8080 0 no-query default

If you are lucky you will get some extra hours, but I can't see you'd get a pay rise to look after more computers. HR doesn't work that way. You are employed at a particular level mostly due to the amount of responsibility that you have. The amount of responsibility doesn't increase because the workload increases. If I was you I'd try and argue for extra hours (in the team, or by overtime), or drop something else.

It would be helpful if you could post the configs.

We run an automated script that finds files over 365 days old (so that no pictures in use will be squished) and resizes them to 60% size at 60% quality.

A topical book review of "abusing the internet of things" Book Review: Abusing the Internet of Things - Slashdot

Google apps (100% 'free') does things like remote wipe, whitelist apps etc for iOS. https://support.google.com/a/answer/6080045?hl=en&ref_topic=1734198&vid=1-635781143335334906-3295804722

I'll second (third) the Kenwood pro's. Work pretty well over our large site.

For staff it won't be a problem because you can keep the app data in the original place, and it will cache their login. they only need to login once per machine.

Yes we use it for BYOD to block/restrict updates to microsoft and apple and Mozilla. We found that (especially) microsoft updates used too much bandwidth and we restricted downloads to 5mb/s. Someone did mention using a software update server for this; I'd be interested in knowing if it is possible to configure for BYOD.

As soon as you login using the person icon at the top right hand side the favourites will follow you. You can use this method to install extensions and apps to users in your domain too, it works just like a chromebook.

I figured they were only trying to harass him for being a muslim, not take it as a serious threat.

The SAN software does it at a much lower level, so you can run VMWare et al. over the top.

Take a look at Easytier from IBM (I'm sure other manufacturers do similar). It will, non-disruptively and dynamically, move frequently accessed data to the SSD's so you can use slower drives and not need to put SSD in the entire system.