bnew

Thanks for the reply. I can confirm that Qustodio is one of the products that we've encountered that does not work on networks where existing SSL inspection is employed- it causes machines that it is installed on to have no internet connectivity. Surely this situation is not unique or uncommon though? I would assume that most schools would be employing SSL inspection, and any school that has a BYOD program is bound to encounter devices where the parents have opted to install a product like Qustodio on them. I guess I'm just wondering why there aren't more EDU tech people posting about this type of issue.

Hello, Interested to hear how this situation is handled in your district / school. A number of schools in my area employ SSL inspection on student networks, and to this end require that students in the BYOD program install a certificate that is provided by the school. However, an increasing number of parents are starting to opt for installing what I would term 'parental control / monitoring' software, that typically also attempts SSL inspection and installs its own certificates on the device. Some example products include Covenant Eyes, Qustodio and Net Nanny. What we are finding is that BYOD with this category of software installed simply won't work on our networks when we have SSL inspection enabled (even if our certificate is correctly installed)- any attempt to browse to websites is met with ERR_CONNECTION_CLOSED within the browser. Removing the software immediately resolves the issue. Are there any products in this category of software that we can safely suggest to parents that are designed in such a way so that they will function correctly on our networks, alongside our own SSL inspection? Thanks

What about deploying apps in offline mode? Does anyone do it that way? https://docs.microsoft.com/en-us/microsoft-store/distribute-offline-apps

Yes there are, and we are using Google Drive. However our internet link here isn't great, so being able to access something like a video file locally rather than going via 'the cloud' makes a lot of sense.

Yet another question, hopefully an easy one. What do I need to do in Apple Configurator so that the iPads can still be plugged in to any computer and have people access the internal storage? Under the blueprint I'm applying, in the 'prepare' options I've made sure that the option for pairing with other computers is ticked. Also in the profile I'm applying I've ticked the option for 'allow pairing with non configurator hosts' However, when a user plugs the iPad into a computer they get the message 'This iPad is supervised with another computer' (in iTunes). On a Windows computer, I can see the iPad is connected, I can browse to its internal storage, but it appears empty (and there is no prompt on the iPad to allow access to the storage). On a non-supervised iPad, if I plug it in to a Windows computer the internal storage appears empty also, but on the iPad you get a prompt to allow access and once you've said yes to that you can see the contents of the iPad. All I want to do is allow teachers to easily get content off the iPads.

Thanks, that is helpful. Always good to hear how others tackle these issues.

Can anyone tell me if it is possible to pre-configure a google account via configurator so that users don't need to enter a password? I have a google account called primary_ipads@my_google_edu_domain.com that I want to have on a whole bunch of iPads. The ONLY reason I want it on there is so that students can upload content to the Google Drive associated with this google account. Teachers (who have the password for this account) can log in elsewhere and retrieve the content. Saves them having to physically plug the ipads into a computer to get photos / videos off them. However, the payload option for google accounts in the profile section doesn't allow for a password- the only three fields are account description, name and email address. Edit: I've had a good read through the documentation here http://help.apple.com/configurator/mac/2.2/ but I don't think I can use the payload settings the way that I'm trying too :-( Happy to be proven wrong though. Edit 2: another thing I forgot to ask- is it possible to prevent iOS updates via configurator? I just want to keep iOS version consistent on all the iPads and only update them myself in batches, rather than our students be prompted about the updates. I seem to remember on the older versions of configurator this was an option during the 'prepare' stage, but I can't find it in 2.2

The manage method. In actual fact these are free apps (so I could just 'purchase' more licenses) but I want to learn how to do this properly for when we do get some paid apps You wouldn't want to be here now- despite Autumn having started a week or so a go, we are still getting summer weather. It's bloody hot! Thank you so much! Can I ask where you found these instructions? Minor rant- looks like I can only revoke licenses on app at a time :-( Edit: no, I'm wrong. You can actually select every managed app and revoke all licenses at once. It just takes a while and isn't that obvious as to what is happening.

Hello all, I'm almost certain this is a very simple / straight-forward answer, but being new to the whole managed iOS...thing I can't work it out. I'm using Apple Configurator 2 to manage a bunch of iPads. Have VPP set up and am using it for the apps. All is working well. As part of my testing, I applied my blueprint to my test iPad. Worked great. However, the test iPad has 'used up' 1 license of each of the apps in the blueprint (as expected!). Here's my dumb question: how do I revoke these licenses? I see mention of being able to revoke licenses with VPP, but everywhere on the net I read about it, it is being listed as a feature. It doesn't actually say how you do it! Thanks for your help

Thanks for the reply. Since my last post I've be been trawling through our pupil GPO, and thanks to a careful reading of a GPRESULT /H report I think I've finally worked it out. I had ensured that all settings in the GPO relating to Internet Explorer Add-Ons were to allow them (to ensure that Silverlight wasn't being blocked). I was looking at the settings under User Config -> Admin Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page. All the settings here were fine. However, I missed a setting in User Config -> Admin Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management. The setting 'deny all add-ons unless specifically allowed in the add-on list" was enabled (which is bizarre- we do't use the add-on list to whitelist things, so there's no reason for this setting to have been enabled. Must have been something before my time). Disabled that setting, force a gpupdate and the software works for pupils now

Still no luck with this, if anyone can reply with some insights that would be great. No luck so far myself.

Hi, I am having the exact issue you describe in this thread. Could you please confirm exactly what settings in group policy had to be changed / removed? Lego are being less that helpful! I will send you a PM as well. Thanks!