ThatBoringBloke

Taken from their Support Page: Audience Staff Users Instructions Sign in to id.sims.co.uk with your existing SIMS ID account. Click 'Hello {name}' at the top right of the SIMS ID Launcher screen. Click 'My Profile'. Click Login & Communication Preferences | Choose either Google or Microsoft. Click 'Add (either Google or Microsoft) Account' and enter your credentials for your chosen account. Add Google Account Add Microsoft Account Once completed, log out of SIMS ID, and then back in after clicking on the Google or Microsoft icons on the login page

Care to share where you have set this? I was looking for something yesterday but couldn't see where to apply it.

I have discovered that I can pretty much lock down the Windows device using Device GPO's if it is joined to the Domain. Then use GCPW to authenticate the user. This works if you have different Staff and Student devices. Doesn't solve your issue for tablets and phones though.

Why would the computer already be logged in? Surely they would log in with their credentials so that they get their own profile created and log off at the end of the session?

Local profiles are the way forward.

Using the Intune for Education Admin console would be a good place to start. It's far simpler to navigate than full blown Intune and lets you start with the basics.

Take a look here:-

Another vote for Trelson.

You've probably already looked here, but this was a great help when I was trying to get it to work: https://kb.smoothwall.com/hc/en-us/sections/14416649318300-Cloud-Filter-Extension-on-Windows Just a shame it doesn't work with GCPW.

Please don't f**k up ChromeOS in the process. Thanks. 😊

Cloud filter doesn't work with CGPW, I tried. Once you install the cloud filter GCPW just flashes up white and disappears. Remove Cloud filter and it works again. I spoke with David Navin / Josh McTighe about this issue.

Are there any schools out there that use GCPW to authenticate ON SITE Windows devices who also use an ON SITE Smoothwall? I'm just trying to find out how you authenticate your Web traffic? GCPW is not supported by Smoothwall, so there is (apparently) no way to directly pass the Google Authenticated User onto Smoothwall without directing to a SSL login page where they can sign in with their Google credentials. This means that until the user manually signs in all web traffic is identified as Unauthenticated, which is a no no from a safeguarding point of view. Whilst Staff will happily sign in when they hit a block page, students are less likely to do so. Smoothwall currently filters all Unauthorised IP's as part of our KS3/4 Blocks, so short of having to change this around I'm looking for suggestions.

Just to bring this to a close (a bit late) I ended up having to create a Powershell script to open the ports up.

Yep, PDQ is locally hosted, RemoteAddress is set to the server's IP. So you're right, it's not that! 😂

Just in the testing stage on this but I can't seem to get Firewall settings to apply through Google. All other policies are applying, I just can't seem to get the Firewall rules to work. Summary of the setup:- Clean Windows install, Manual Chrome install, Manual GCPW install. Device shows up in Admin Console and user has the appropriate licence. Attempting to deploy software through PDQ Deploy to the PC works with the firewall turned off, just not with it turned on. Attempting to apply the below settings as detailed in PDQ's documentation Allow SMB inbound:- <Rule Name="PDQ Deploy SMB Inbound (TCP 445)" Description="Allows inbound TCP 445 (SMB) traffic from PDQ Server for deployment" Group="" Action="Allow" Protocol="6" LocalPort="445" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/> ICMP:- <Rule Name="PDQ Deploy ICMPv4 Inbound (Ping)" Description="Allows inbound ICMPv4 (Ping) traffic from PDQ Server for status check" Group="" Action="Allow" Protocol="1" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/> Do we have any pointers as to where I'm going wrong? My little project will fail at the first step if I can't get the software to deploy without having to turn off the firewall.

For me it would depend on a few factors, such as how much Google is embedded in your school currently and what you future aims are regarding Google Management, e.g. do you want to use Google to managed your Windows estate too?

Sorry to resurrect an old topic but I'm curious if you ever got this to work?

I know that this isn't answering your question but we moved DCHP from the servers to the switches when we set up VLAN's. In an age of services, not servers it seemed to make more sense.

We don't use Arbor here (SIMS) but we are currently haing simillar issues with groups syncing from SIMS into Google. This seems to happen every year. A few years ago I looked at this and found OK Goldy to do it manually. Its a bit of a faf, but worked then, and I'm possibly looking into using it again this year to get them populated if ESS don't get back to me with an answer today.

DCHP on the core switches. DNS is still AD based for on domain devices. Our Chrome devices point to Google DNS.

Been seeing something simillar here. Not yet able to confirm but I think it may be tied to the 2025 DC. I upgraded (Built a new one) at half term on 2025 and since then we have seen the issue. The other DC is 2022. Currently in two minds whether to bin the 2025 DC and go back to having both on 2022, or just see if updates provide a fix. Like you have said, a restart usually resolves, but not always.

As has already been said, lots of suppliers around. we have used @VeryPC for ours recently. Think they are around £28 per device, for the lifetime of the device.

20.

We're just in the process of doing costing for energy use per room in our new build school. Our server room has 5 air con units and the room itself is 'apparently' costing £2,500 a month to run! Been asked to see if I can turn two of them off this morning... The other three seem to have increased their output.

Two words - Second hand. Decent spec 2nd hand pc's at a fraction of their cost when new. I then try and stretch them out to 5-6 years of life. We are predominantly Chromebooks though and for those I'll always look to buy new. We are looking to cut back on numbers though as Covid provided us with a LOT of devices.