ThatBoringBloke

Taken from their Support Page: Audience Staff Users Instructions Sign in to id.sims.co.uk with your existing SIMS ID account. Click 'Hello {name}' at the top right of the SIMS ID Launcher screen. Click 'My Profile'. Click Login & Communication Preferences | Choose either Google or Microsoft. Click 'Add (either Google or Microsoft) Account' and enter your credentials for your chosen account. Add Google Account Add Microsoft Account Once completed, log out of SIMS ID, and then back in after clicking on the Google or Microsoft icons on the login page

Care to share where you have set this? I was looking for something yesterday but couldn't see where to apply it.

I have discovered that I can pretty much lock down the Windows device using Device GPO's if it is joined to the Domain. Then use GCPW to authenticate the user. This works if you have different Staff and Student devices. Doesn't solve your issue for tablets and phones though.

Why would the computer already be logged in? Surely they would log in with their credentials so that they get their own profile created and log off at the end of the session?

Local profiles are the way forward.

Using the Intune for Education Admin console would be a good place to start. It's far simpler to navigate than full blown Intune and lets you start with the basics.

Take a look here:-

Another vote for Trelson.

You've probably already looked here, but this was a great help when I was trying to get it to work: https://kb.smoothwall.com/hc/en-us/sections/14416649318300-Cloud-Filter-Extension-on-Windows Just a shame it doesn't work with GCPW.

Please don't f**k up ChromeOS in the process. Thanks. 😊

Cloud filter doesn't work with CGPW, I tried. Once you install the cloud filter GCPW just flashes up white and disappears. Remove Cloud filter and it works again. I spoke with David Navin / Josh McTighe about this issue.

Are there any schools out there that use GCPW to authenticate ON SITE Windows devices who also use an ON SITE Smoothwall? I'm just trying to find out how you authenticate your Web traffic? GCPW is not supported by Smoothwall, so there is (apparently) no way to directly pass the Google Authenticated User onto Smoothwall without directing to a SSL login page where they can sign in with their Google credentials. This means that until the user manually signs in all web traffic is identified as Unauthenticated, which is a no no from a safeguarding point of view. Whilst Staff will happily sign in when they hit a block page, students are less likely to do so. Smoothwall currently filters all Unauthorised IP's as part of our KS3/4 Blocks, so short of having to change this around I'm looking for suggestions.

Just to bring this to a close (a bit late) I ended up having to create a Powershell script to open the ports up.

Yep, PDQ is locally hosted, RemoteAddress is set to the server's IP. So you're right, it's not that! 😂

Just in the testing stage on this but I can't seem to get Firewall settings to apply through Google. All other policies are applying, I just can't seem to get the Firewall rules to work. Summary of the setup:- Clean Windows install, Manual Chrome install, Manual GCPW install. Device shows up in Admin Console and user has the appropriate licence. Attempting to deploy software through PDQ Deploy to the PC works with the firewall turned off, just not with it turned on. Attempting to apply the below settings as detailed in PDQ's documentation Allow SMB inbound:- <Rule Name="PDQ Deploy SMB Inbound (TCP 445)" Description="Allows inbound TCP 445 (SMB) traffic from PDQ Server for deployment" Group="" Action="Allow" Protocol="6" LocalPort="445" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/> ICMP:- <Rule Name="PDQ Deploy ICMPv4 Inbound (Ping)" Description="Allows inbound ICMPv4 (Ping) traffic from PDQ Server for status check" Group="" Action="Allow" Protocol="1" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/> Do we have any pointers as to where I'm going wrong? My little project will fail at the first step if I can't get the software to deploy without having to turn off the firewall.