mjk

I'm pretty sure that is on the way

It can be used on Chromebooks/Chromeboxes. What we need is microsoft to write an android compatibility layer! We are now in a weird situation where Android/Chromeboxes are running software that windows cannot.

Thanks. I have a sales rep at softcat already, I'll give them a call.

That does sound sensible. I asked one of our suppliers, but he said: Have you got a contact at MS, or another supplier that I could speak to please ?

I did see the post but I would assume that we do provide a hosted service to our students, because we host services for them. eg we host apps on our terminal servers that they can use. Or is that not what they are getting at? Come to think about it, does anybody qualify for this definition? The link also suggests that an external user is somebody outside the organisation, ie not a member of the college, rather than somebody physically outside the building so I can't see how that could possibly apply to students I'm starting to think that making up my own licensing is going to be the best option here. I hereby define a user as 10,000 people. Done.

Isn't it the same problem ?

I can't see any documentation from microsoft that suggests it is ok to use external connector licenses for students, even if they connect in externally. I'm pretty sure you need either a device license if they only connect on one device or a user license if they connect with multiple devices. If anyone has anything official about this please let me know because this would be a major saving, or is the consensus just to wing it and hope nobody checks (does anyone check ?). £5 is about was what I was expecting so will recommend the perpetual license with a 5yr life-cycle which means we should save us £12k over EES. Until I hear about the external connector that is.

As per title, we're quoted £18 per user or device for a perpetual license. How much is it if you have an EES agreement per year ?

The reports section in gsuite admin console will tell you who it is sent to and whether the email was opened.

We use 802.1x with Chromebooks, but with 1:1 chromebooks. With 1:1 you can allow the users to login to the wifi as a device and then pass that through when they log into their account. This works reasonably well but without 1:1 it's easier to set a single user/password to sign in.

I mean diskless, running in RAM. Some of our servers and all of our thinstation clients boot like this: they PXE boot and run their operating system in RAM with against an NFS share - no local disk and no installation. One image is the master.

Without any doubt this is a SLT position, it's not something a network manager should or could do.

Yes it is more far reaching, but the consequences to the school in terms of fines/ damaged reputation if things go awry are pretty equal. The level of seniority required for negotiating/directing staff is also similar. I don't think that a job evaluation would put a DPO over H+S or safeguarding lead. Just my opinion.

My thoughts are that it would be roughly equivalent to the Designated SafeGuarding Lead (DSL) or Health and Safety Officer.

Another For Google Classroom. It's the perfect solution for this and you even get parental notifications so happy ofsted too.

I see. Reading it again I see that the entire post looks like a ramble of misunderstandings.

@jmak "Server OS" is a construct created by Microsoft to sell licenses. It doesn't really mean anything on anything other than windows and I doubt they'd cripple disk performance on the desktop or write bad drivers intentionally. It doesn't work like that. Google Apps files are stored in Google Drive, not locally - you only get a link. I'm very suprised people are still talking about internet going down! It is such a mission critical system here we now have two backup lines. I'm not sure the school could operate if we had no internet access as it would undermine our safeguarding procedures.

I guess that's the problem. We offer the scheme whereby parents buy a Chromebook for the child; This has been deemed necessary for Teaching and Learning to the extent that they pay no tax and must have one. The Chromebook is normally owned by the parents unless they have not paid in full, or there is a bursary of some kind. I suppose the easiest answer is to not offer the service, but the question is how do we offer the service and comply with GDPR. If it was just in-school. Do we have to allow students opt-in then ? because it's basically asking them to opt-into education...

Following from this bit: Suppose the students refused consent, and we blocked internet access at home/school. It would then follow that they would be reprimanded for not handing in a piece of work because all homework is set via IT systems. Given that is our legal obligation to educate students would GDPR allow us to not ask consent ?

We just report it

Our procedure is to report concern to Head of Year or to the Safeguarding team. We (IT) don't have a procedure to report to parents, but the other teams might do after we report to them.

We moved from Smoothwall to Fortigate. I think it was a very good choice for us and has solved a stack load of problems that we experienced with SW. The only minor problem with your list is 8) the reporting is decent but you have to write your own SQL queries which are complex and time consuming. Everything else about it is A+++ including the price which was a lot cheaper than SW for us.

Perhaps a popup asking for consent to access the internet would do it. They could always opt out of that.

Someone has raised the first hypothetical question that we cannot answer. Please can someone give me some insight as to the following: We monitor and record students internet activity, out of school time and in their homes. This is currently done with parents permission and is a service that the school offers. With GDPR will we need the students permission to do this? Our understanding of the regulation of investigatory powers act (RIPA) says that as a service provider we must retain the data for 12 months. If parents and or students ask for the data to be deleted is this possible? We cannot work out which regulation we need to adhere to. My gut says RIPA but has anyone got a legal perspective on this ?

I'm sure that is the case, they are designed to be user based so that you can use them on any device that you use. Google's 'per device' mode is only for Kiosk mode which might not work for this either. I agree with both the comments here, it's something that Impero should really have thought about. @skell 's idea of having impero lookup to see if the device was in a predefined IP range and deactivate if it was not is probably the most workable solution, but knowing Impero there would probably have to be some high profile scandal before they fix it.