IT-Tech

Sounds like a holiday job, if you get the chance to sit down and work out what might be causing it, for your own sanity if nothing else!

Depending on what you have, a wildcard option could be Web content filtering - Microsoft Defender for Endpoint | Microsoft Learn - It requires some high-level Microsoft 365 licensing (A5 or other specifics) but if you already have that, then you could give it a shot without shelling out anymore. Its not education specific, so its a more set and forget filter than something a teacher can tweak lesson by lesson, the other suggestions made above will work much better for that, but you can make use of categories and you can make exceptions - its basic, but if your already paying for it, its worth testing to see if it fits your needs. Outside of that, Senso is a good product, much like Impero and LanSchool, just another flavour.

Here is an example of mine, much like Jaan's but gives a different set of options for you to consider I try and allow things that will allow me to fix basic issues from the student or staff acount itself, just makes everyones life a little easier when it comes to problems.

No question is very basic, always better to ask and learn than it is to stuggle and stress! I agree with what Jaan has said, I think those two guides will solve your problem but come back if not!

You could buy something like an IronKey storage drive which will be encrypted and password protected, plug that into the back of a server or protected workstation that is locked away. Put KeePass portable on it which will then store your password database, KeePass also encrypts the database. Then you need to logon to the correct server to unlock the IronKey to unlock the KeePass database - just make sure you keep some kind of emergency access sheet as well! That said, this only really works well for IT admins for the keys to the IT kingdom given its obscure access requirements!

Some thoughts/ideas from when I have done something similar before (end of the day shutdown for me). Try this as your scheduled task action: C:\Windows\System32\shutdown.exe And then add the arguements: -f -s -c "This computer will now shutdown. You have 2 minutes to save open files" -t 120 (adjust the time and text accordingly) For good measure, make sure you have ticked the box, Run with highest level.... You may also want to tick the box to allow it to wake the machine up in order to run it, just to be sure its not sleeping when it tries to run.

Could you potentially block the individual cpl items and include them all, it would mean control panel would still launch but it would be blank at least.

Could it be an option to apply a vanilla Win 11 Edu image to the devices from your SCCM and test (that's no software, no domain join, no drivers)? After that, you will have a clear picture of whether or not this is related to your domain (some pesky GPO lurking somewhere) or whether its possibly related to some missing HP Software that might be required for the sleep to function correctly. If this was me investigating, I would probably start with nothing more than a blank Windows 11 image from SCCM and work my way up from there. i.e. install Win 11 Edu, leave it off the domain and test. Then introduce the drivers you are using from SCCM (you never know the proper HP ones might be the issue) and test, then try joining to the domain and test. Its a bit of a faff to step through that process, but it should give you some indication as to where the problem lies.