RLR

You mentioned Google Classroom but I think you meant Apple Classroom. We use Apple Classroom at our school and it works very well once it is setup. If you don't have Apple School Manager or an MDM that supports Edu profiles then you will need to ask Staff to setup the Apple Classrooms. If you have ASM and an MDM you can do this all yourself and it will push out to the iPads.

A heads up that the September Roll-up might break printing even more. Not much info in the post but might be worth keeping an eye out:

I would open a case with Jamf and have them look into it. We had performance issues a couple years back with Jamf Pro. I think it was something to do with licenses trying to be constantly assigned. Jamf support should be able to look at your logs and help more. I would also push for it to go beyond their first line support as they will probably try and say you have too many smart groups or something.

We found with android phones it's hit and miss whether it works or not. It will depend on the android version but new versions of android install a work profile so work apps are separate to personal apps. A lot of android apps now use certificate pinning so https inspection doesn't work with specific apps. If anyone finds a way round this or if I've got this wrong let me know. You might find push notifications don't work for some apps. For example, the gmail app. You could try exempting google.com from SSL inspection but then this then makes a lot of SSL inspection irrelevant because key words will not be picked up when they search google.

This is what we do. Separate account for specific calendars.

Anyone can give me a run down on how to deploy printers to users via GPO? Our current setup has been broken by this update and would rather not use the reg key to bypass the security issue. Do I need to install drivers on computers now a different way or can this still be done by GPO/GPP? Edit: Does Packaged Point and Print still work? Does this only affect Point and Print?

I read about this yesterday and checked my group policy and didn't think it would affect me. Come today where some machines have now received the update it has broken printing for us (on results day!). If we can't use point and print what's another method we can deploy printers?

You should be able to get a list of your devices from AD and upload that to the admin console or use GAM to create the devices. This is my plan once I get round to it.

Can someone post their Custom Schema setup from GCDS? I'm not sure I'm getting the correct field names. The sync seems to be adding the LDAP field as a seperate custom attribute based on the ldap attribute name. How do I point it to the "Enhanced desktop security > AD accounts" google attribute?

The proper method for setting up shared iPads is to use the Shared iPad mode. This makes it so students have to sign into the iPad using their Apple ID information. You can create classes in your MDM (as long as it supports it) which makes signing into the iPad fairly straight forward and the pupils will only need to remember a 4 or 6 digit passcode. Any work that they create is then synced to their Managed Apple ID via iCloud. If you haven't used the MDM yet you will need to purchase licenses for the apps you wish to use and deploy them via device licenses. https://support.apple.com/en-gb/guide/deployment-education/iora714f0cdx/web Seems like Meraki have some of their own documentation but might be out of date by now. I think they also have different versions of their MDM so might need to check your version is supported: https://documentation.meraki.com/SM/Profiles_and_Settings/Configuring_Apple_School_Manager_for_Shared_iPad_or_1-to-1_iPad

Are you greeted with a login screen (username and password) when you unsleep an iPad? This will determine if you have it in shared mode already. If it is in shared mode then you select the number of cached users in your MDM during the prestage enrolment. This will tell the iPad how many partitions to split the hard drive into. This will determine how much space each user gets when logged in. If you set the maximum number of cached users to 4, it will split the hard disk space into 4 and allocate it to the users that login. If a fifth user comes along it will remove one of the other 4 users from the iPad. Their data should be synced to their iCloud account.

As they are signed in as a Guest user I assume you have them setup in shared mode? For shared mode to work properly, you need to create accounts for students/staff in Apple School Manager. You then sync the Apple School Manager data to your MDM. You can create classes in Apple School Manager and sync them to your MDM. You can then associate these classes to the bank of iPads you have. This allows the users in those classes to login to the iPad. They will need to set their own passcode. You can't set them to login automatically. I don't recommend logging the iPads in using a generic account as this opens up the risk of users sharing accounts or leaving themselves logged in and another user coming by and having access to their account.

Anyone looking to use App Locker for all their machines should look at Aaron Locker . Does most of the work for you as long as you have a reference image or can access other machines. I found another post elsewhere on how to set up applocker forwarding events to centralize them all in one place.

This prompted me to check ADMX files. Looks like they released a version 2 of 20H2 ADMX a few days ago! https://www.microsoft.com/en-us/download/details.aspx?id=103060

We still have one setup and used it just now to remove a passcode. Is the port your connected setup on the correct vlan? Is it possible it's not getting an IP because it might be on a vlan that doens't get a DHCP address?

Don't have experience with intune but we have setup mobility print for a sen student here and it seems to work well.

Most MDMs work the same as they are built on the framework that apple allows MDMs to control. We do use Jamf and it's seen as the gold standard in the Apple world although Mosyle is another good MDM that is seen as a cheaper option. If the devices have passcodes on them then you won't be able to automatically update them. The MDM usually allows you to send commands to update devices but requires users to put in the passcode (this is an apple limitation).

We've been leasing iPads for 9 years. We usually get prices from Jigsaw24, Academia and one other at the time. Academia seem to always provide a better quote. The actual leasing is handled by CHG Meridian which have been great.

I've mostly self learnt so can't help with training materials but I would defiantly look into using GAM or GAM Advanced. This allows api access to control a lot of things the admin console doesn't.

You can compare SKUs here: https://docs.google.com/spreadsheets/d/1UNOdtbKLqD7r9-ddGwaJk0SgnVPPHDA_OV6pBlISgxY/view#gid=865117577

Wasn't aware there was a limit but I guess that makes sense. I think 1000 classes is a lot for one user. I've noticed when salamander creates our classes for us it creates an admin user per year group. It might be worth trying something similar. So you have multiple a different owner per class year group. I suspect trying to work with 1000 classes in a browser or mobile device will be very difficult.

You'll have to use gam for this. I haven't tested or used this command: gam print courses status ACTIVE | gam csv - gam course ~id add teacher [email="[email protected]"][email protected][/email] If this doesn't work you can print all courses to csv: gam print courses > C:\location.csv Then create a powershell script to loop through the csv file which will contain the ID number of each course $list = Import-Csv -Path "c:\location\of\csv.csv" cd C:\GAMADV-XTD3 foreach ($entry in $list){ .\gam course $($entry.id) add teacher [email protected] } EDIT: I just found there is an owner command too. What I've posted will just add the user as a teacher. If you want them to be owner you can add: gam update course owner Edit: Changed command to only use active classes as it will error on adding users to archived classes as pointed out by gh5000 below.

I like how as soon as I post about not seeing issues I am now getting reports of parents not being able to Join A Google Meet. We have enterprise licensing that allows us to have up to 250 participants but some parents are getting a message saying the limit is 100 and they can't join the Meet. I can see there are 113 participants at the moment on the Google Meet so I'm wondering if this might be a device issue.

We've not had any reports of this but all our devices are managed and kept up to date via our MDM. They did release an update a few days ago: Dec 7, 2020 - 51.5.0

What are people doing for students that require Word Processing but are staying at home? Are you leaving it up to them to sort their own WP out or are you providing help with sorting out ExamWritePad?