RLR

We are 1:1 with iPads and have Apple TVs in most of our classrooms. All our Wireless devices including laptops and 1:1 iPads connect to the same vlan/subnet as it uses 802.1x for authentication. We try to have an access point in every classroom. Most Apple TVs are connected via ethernet but some do sit on their own hidden Wifi network. Our iPads can still see Apple TVs even though they're on different subnets/vlans. I wasn't the one that set this up so don't know the technicalitys of it but I believe it has something to do with our Wifi system, Aruba and their AirGroup service: https://www.arubanetworks.com/techdocs/Instant_40_Mobile/Advanced/Content/UG_files/AirGroup/UnderstandingAirGroup.htm

Polite as always in your posts.

I've had quite a few people confirm it on the MAC admins slack group. People are reporting it to google so hopefully fixed soon.

Is anyone able to test the Google Drive iPad app for me. An update was released yesterday and we've found this morning that students are unable to use it as it comes up with a message saying they don't have access to the service. Signing in via the browser works fine. It's only when they use the new updated version of the Google Drive app. I suspect it has something to do with students as their OUs are marked as users under the age of 18. Google Drive app version: 4.2022.12204

We have a local version of sims installed on a sever that has a vpn connection to our sims hosted supplier (scomis).

Our schools iPads have a PAC file installed on them via our MDM which forces them to sign into our firewall to be filtered when not on our network. This means they get filtered where ever they go.

We had a couple of machines not get updated to the latest version of windows which had issue connecting printers. Once we updated them it was fine. Check the machines are at least on 1909 or higher.

Do you mean within the xml? If so, you just combine it all so it would be something like this: xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1">

Correct, moving a user to a Google OU that doesn't automatically get licenses will not remove their license.

We assign licenses via OU. To remove licenses we run an offboarding script for staff and students. Part of that offboarding script is to remove the their google license via a GAM command. I believe GADS can assign licenses too but not sure if it can remove. Not explored that area before. GAM command: gam user $username delete license 1010310008 You can get a list of license skus from here: https://developers.google.com/admin-sdk/licensing/v1/how-tos/products

We don't use outlook but more than likely yes unless there is something specifically built for outlook and gmail.

Go to myaccount.google.com and sign in using the account needed to setup 2fa. Scroll down a little to 2-step verification and click on it. This will prompt for your password again. Enter your password and follow the steps to setup 2 verification. Once 2 step has been setup go back to myaccounts.google.com and just below the 2 step verification button you clicked, you will see App Passwords. Select this and enter your password once more. On the App Passwords page you can create a new app password. This is basically a 2 step password for a specific app. Use this password when setting up an app that requires authentication. More Details here: https://support.google.com/mail/answer/185833?hl=en-GB

I think he means resetting (wiping) it completely. This can be done with apple configurator 2

Exams take up way too much of my time. We seem to have them all year round. I eventually settled to setting up laptops that are only used for Word Processing. These laptops are setup to automatically login to an exam account allocated to that laptop so any student can use them. A script runs at login to copy the Exam Write Pad software from a share to the local machine and then run it. This runs in full screen mode with a password so students can't leave it and open other applications. Another script runs at logoff to move their work to a secured shared place so other students can't access it.

Not familiar with Mosyle but there should be an area for pre-stage enrolments. These are the settings the ipad will display during setup. If it's not assigned a pre-stage enrolment it won't go into your MDM.

Try adding their domain to the HTTPS Inspection bypass list. I'm not sure were this is on smoothwall as we use fortigate but there should be a place that you can exempt domains from being inspected. Possibly this: https://help.smoothwall.net/FilterFirewall/Content/7Guardian/2WebFilter/4Exceptions/ExceptionsPage.htm

Might be worth noting that there is a limit of 20 teachers allowed in a classroom.

I don't believe this is how it works as there is a separate command to making a teacher an owner: gam update course owner Plus, to make a teacher an owner, they need to be part of the class already: https://sites.google.com/jis.edu.bn/gam-commands/services/classroom#h.p_ZzCeeHvUNR8o

You will need to know the course ID to add staff/students to a course. gam course 12345657 add teacher [email protected] or gam course 12345567 add student [email protected] Change the numbers to the course ID. If you're unsure of the course ID which I don't think you can get from the admin console you can run another gam command to find them: gam print courses > C:\gam\CSV\classes.csv or gam print courses todrive This will list all courses in your google domain. If you know a teacher that is already part of the classroom you want to update you can just print their courses: gam print courses teacher [email protected] > C:\gam\CSV\classes.csv or gam print courses teacher [email protected] todrive

I'm seeing the same. Tested a few pages on that website but only seems to be this one that is doing it. If you copy and paste the url in to Google Search bar you get the same dodgy heading. I wonder if their website has been compromised or at some point in the past maybe: https://www.malcare.com/blog/what-is-pharma-hack-how-to-clean-it/

We use MyConcern to sign off important Policy documents. For training such as manual handling, data protection etc we use iHasco.

We had Cunninghams many years back and support was terrible. We moved to Vericool which has been okay. It's fairly small company but support is pretty quick at responding. I would say the program looks very old but we don't generally have any issues with it. I would say you have to pro active with contact support if know anything is coming up such as a new academic year. So don't wait until the end of August for help, put the request in early.

I would go down the Apple School Manager route and get an MDM. Otherwise, in the future you will probably have devices locked to a personal iCloud account that you can no longer use. Also, if you're installing apps across multiple devices then you're probably breaking some app licensing rules. I agree this might mean someone in the primary school might need to manage this but I think if you can get them setup then there shouldn't be much else needed to do done. An MDM will also allow you to setup shared iPads that allow each student to login to them with their own managed apple ID account. If you don't use shared mode then there's a good chance students or staff will leave themselves logged into apps or emails and this can lead to data breaches.

Is it worth asking why they want MACs? I find most software these days is available on both platforms or there is an alternative that's just as good. We have some MACs that are controlled via Jamf but we are getting rid of one of our classrooms of MACs as we got asked to Dual Boot them and they only get used as Windows machines. We still have some MACs in our Art department but not many.

We're just in the middle of switching to Operoo which does several things. Admissions being one of them and I believe this writes straight into SIMS.