Brimstone

Macs are not fussy about HDMI I have gone into hundreds of schools and connected to screens with both my iPad and MacBook and never had a problem at all... A Mac keyboard and mouse with USB-A less than £35.00 USB-A Hub with as many ports as you need.. I really don't understand your problem

You have misunderstood what I said. There are plenty of good cloud based solutions that can handle filtering off site from a school network of web traffic, there are NO OTHER On Device Content Filtering Solutions (ODCF) that can block traffic from on device apps such as YouTube as well web traffic.

Is this Jamf Pro or Jamf School?

Sounds like not a single teacher got any CPD when you rolled out the iPads to them...Do you have a long term CPD plan for teachers> Have they been enrolled into Apple's free online teacher CPD, Apple Teacher at all? The third party browser will not work with either Jamf Teacher or Classroom..

It doesn't pick up on less, it just depends on the sentiment being used within the search criteria you specify. I'd ask the OP to check with all the teaching staff telling them that Safari will be removed from all iPads, that reaction alone should tell him/her the solution they need.

Due to Intune's limit on app size it can not package large apps like Logic and the samples pack which alone is over 50Gb's, Logic has to be run on a local home directory, it will fail if you try and run this from a networked directory.

I would not touch the browser used in this solution...Securly doesn't require the removal of Safari..

Securly Filter and Aware does the same...

Well well well MS finally launch a caching solution, something that Apple have had for about 10 years...

You've never seen a USB-C port...?

In an iPad shared device deployment, whether you decide to use Apple's Shared iPad configuration or not, monitoring solutions from companies such as Smoothwall, Senso, etc have to replace the Safari web browser with their own frankly awful browser and each student logs into the said web browser, this is how they are able to monitor keywords and web traffic, bear in mind though none of these solutions can filter or monitor traffic from on device apps such as YouTube, Facebook etc. Jamf are the only provider selling an ODCF (On Device Content Filtering) solution, Jamf Safe Internet. Although this does not offer a monitoring solution to identify users this still allows the full use of Safari being filtered and will block content from Apps on the devices, it will also block any VPN apps or VPN configuration files from working I have schools in a 1:1 iPad senario that don't have these issues as each iPad is assigned to a permanent user that sits in either Google Workspace or Entra, with Securly's filter and monitoring solution, each user can still use Safari and is tracked and monitored in Safari or OneDrive, YouTube, Outlook email whether they are in school or not. It's up to schools to decide and put together a policy which meets their own criteria, if the school just wants a base filter with shared iPads then they have to put together an iPad register with numbered devices assigned to a class or year group, at registration the teacher would check off the numbered iPads against each student using them.

iOS restrictions only allow you to either turn the camera off or on, you can set One Drive to automatically upload any photo or video to OneDrive?

Using Apple's shared iPad configuration does not mean your safeguarding or monitoring solution will identify the user whose is logged in.......

Logic will not work on networked or cloud mapped external drives, whilst to can save work to them you have to work on the files locally.

Certainly where Logic in concerned I doubt it is compatible, if you are looking for a Mac friendly network storage solution then I would strongly recommend Synology. I have supplied these extensively in large Mac based media and creative FE Colleges and they work very well.

You are as said breaking App Store policy licencing rules and I doubt you will be able to create anymore, iPads with the correct MDM and ASM in place do not require any Apple ID for apps to be pushed any longer. Apple's policy way back was not to put the same Apple ID on every device, it has never advised this (you may have talked to someone in a store who thought they knew) For schools that wanted a Personal Apple ID on devices back then had to request a 30 day whitelisting from Apple so they could create all of the Apple ID's in batches. Using the same Apple ID is a major security risk to both students and teachers using them as a single hacker with a single phishing email or message can gain access to every photo, email, message and content on every iPad. If that Apple ID becomes useless to you because of this it will leave you in such a mess I wouldn't know where to start. To be able to push "many" apps to all your users you have buy VPP Credit for the correct number of licences, currently every app you have bought belongs to a single Apple ID. Once you find yourself blocked by Apple you will start all over again with every App via VPP Credit and remove every Apple ID from the iPads.

Do not use the same Apple ID for the iPads, Apple will notice this is suspicious activity and block you from creating anymore after the first 3 or 4. If you want to give teachers access to the App store then let them use their school email for the Apple ID.

It sounds like you may need to configure a new TXT DNS record if these have changed and the 2 x networks use different public I.P.'s see below... https://support.apple.com/en-gb/guide/deployment/depe6ded0780/web

Time Machine (free) will back up both user account data (if you want this) and user created content but you need a Mac and some storage for the back up to do this

Use a NAS for storing files.......

ASM does not support in app purchasing as above you will to contact the developer direct

Are these shared iPads, as in Apple's Shared iPad config?

This may well depend on the version of Mosyle you are using, free or paid for.. In Jamf Pro you can create a software restriction record for each app you want to block

Try here... https://www.listening-books.org.uk/education

When you remove the device and "return to service" you must choose the network profile for the group you want this to go into. https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Return_Device_to_Service.html