RLR

All our software is installed via bat scripts. Took a while to get them all setup but even most of the exe files have silent install switches. The only ones that don't or I can't find are usually very old bits of software.

I didn't set it up or manage it so can't go into much detail. On NPS Windows Server: - Add Radius clients (for us this is the master Aruba access point at each of our locations). - Point Remote Radius server to for Fortigate. - Setup a connection request policy (we use windows auth for all users) - Setup Network Policies. Our network polices are specific ad groups of people to make sure they get the correct filtering (staff/specific year group of students/etc). These policies give you a Class attribute that you can then put into Fortigate as a unique identifier to create user groups (under User & Devices on Fortigate) using Radius Single Sign On. Create wifi policies based on the user group you created. This is a just a quick overview of what I'm currently seeing.

Our students sign into the wifi (Aruba) with their AD credentials. We have a radius (NPS) server that links to fortigate. We also use SSL inspection so students are required to install a certificate to get filtering. We have a guide depending on the device they use so they can follow the instructions for installing the certificate (or we do it sometimes).

We've purchased/iPads a lot over the last 8 years. Some suppliers we've used are Jigsaw24, European Electronique, AMC and Academia. We get quotes and then do the leasing through CHG Meridian.

There is another method that is detailed in this post: https://www.jamf.com/jamf-nation/discussions/18019/ipad-stuck-on-focused-app-no-wifi-can-t-turn-it-off Either option you will need to buy/have some kit already and it doesn't always work. Edit: One thing we do before putting it into lost mode is to send the clear passcode command first.

Interested in this also. We currently use Thycotic Secret Server for the IT department but thinking about getting more staff using password managers. I've heard bit warden is a nice free one? Would like to know if anyone else is using any password managers for staff and what the experience is like.

I guess they could screen share with you and you can try talk them through it. Alternatively, you could use chrome remote desktop.

In the GCDS have you ticked the box to make new users set a password at sign in?

With iPhones and iPads our MDM can push out profiles for mircosoft and google and request people login. I'm wondering if the company still has this phone in their mdm that is pushing these settings to it?

I don't think the last logon date is a good thing to go on because I don't think this updates when users are using apps as they always stay logged in.

I can only imagine the amount of support this is going to require. Even in our tech school we get quite a few parents/teachers asking how to do specific stuff and 99% of the time it's user error.

We're quite lucky in that we have 1:1 iPads so are pretty much running as normal. All students and teachers are using google meets to deliver their lessons. It's been a learning curve for everyone. We had teachers test Google Meets with their classes the week before we went into lock down which helped massively as there where a few little things that we found out (meet didn't work on IOS12 in the browser so had to tell everyone to update their iPads) . We also created a few training videos for staff to watch on how to use Meet. I think our main issue has been some students/parents reporting that some things are not working like the classroom app or Goolgle Meet disconnects for them. These are difficult to support as everything is setup the same so you can only put it down to an issue at home but it's hard to tell people that.

Not familiar with airwatch as we use Jamf but I guess they work similarly as they have to work from the same apple Framework. When a user installs an app from the app store it is installed as Unmanaged which means you can't manage that app. Does Airwatch have a way for users to install their own apps (jamf has self-service)? If they install apps via self-service it is installed as managed and we have more control over it. If teachers want to test an, app we get a few licenses for it and deploy it to their iPad's. This allows us to then remove it if we need. We don't allow staff or students access to the app store. Everything is done via self-service.

I'm getting the same behaviour. People in this thread are seeing the same: There are some suggestions on blocking certain address bus this will only work if the devices are communicating back to the schools wifi. Also, this page says: https://support.google.com/a/answer/9784550?hl=en Q: Can I turn on Hangouts Meet but disable classic Hangouts (chat)? A: No. For more information, go to Classic Hangouts to Meet FAQ. The issue seems to be with the 2 difference services being merged but seperated. hangouts.google.com is the old one which allows everyone to send messages. chat.google.com is the new one which doesn't work if you have hangouts chat turned off. Or so it seems to be from my testing.

I couldn't watch all of this. Was way to cringey.

We're similar so some of our staff that can't do work from home have been furloughed. We've setup out of office for them and also made all emails get forwarded to their line manager. A label has been added to the forwarded email so the line manager knows it's come from a furloughed member of staffs email.

We're being asked to take 4 days mandatory holiday (Easter weeks). I don't mind since I've still got 18 days to take before September.

I think the issue you will have if you allow anyone to join is you might get students join. I have a powershell script that runs using GAM that will add all staff to this group once a day: Get-ADGroupMember -Identity "STAFF GROUP FROM AD" -Recursive | Get-ADUser -Properties Mail | Select-Object Mail | Export-CSV -Path C:\Export\location\nameoffile.csv -NoTypeInformation$list Import-Csv -Path C:\Export\Location\nameoffile.csv cd C:\gam foreach ($entry in $list){ .\gam update group [email protected] add member user $($entry.mail) }

Are you talking about the google Classroom Teachers group?

I posted this a while ago but never found a solution. I've just decided to live with it for now and just hope it's a bug that will be fixed? http://www.edugeek.net/forums/windows-10/211707-app-caused-problem-your-default-x-setting-so-reset-y.html What version of windows are you installing?

Yes, I just heard this also. Support staff and teaching staff are considered key workers at schools. To leave your kids in school, both parents need to be a key worker.

Does quick assist work with computers off the domain? For example, personal computers? Also, does it require a Microsoft account?

Is it up to the school to determine who the key workers are? As a school that has moved to remote learning that we have to support as IT people, does that make us a key worker?

I think people are getting confused or not understanding shared folder != shared drive. Sharing a folder with a group and add / deleting people from that group will not update the permissions. Using a Shared Drive using a group will keep permissions up to date.

Yep, shared drives permissions are based on members of the group. Adding / removing people will update the permissions.