Restrict Students to School Device Only?

[Meghan]

Hello,

I am trying to understand if our small school should permit students to login from home on their own devices.

At school they are 1to1 but they do not take them home. They are 7-11 years old.

As the admin, I would like to turn off access from outside school.  The teachers want it on so students can "share their work."

What do other small primary schools do?  Thanks!

[kaned · Accepted solution]

This has not been as much of an issue for us as we must have less access to personal identifiable information.  I would think that if this was something that we can be implemented, then taking the device off would likely be a requirement. 

The student would essentially not be able to do any work that they couldn't log into a personal device and they also did not have a school device.

Isn't I managed two separate school districts and this is not been a consideration regarding our students at this time.

[MarkLoundy]

We see ourselves as a service team whose first goal (after network safety) is making the jobs of the teachers easier. Whenever possible, I defer to the teachers’ judgment. 

[AhmadAli]

The question here: is there any option from the admin console to restrict the use of devices based on location or based on the network where learners cannot use their devices except they are connected to the school network?

[kaned]

I don't think so... Still I could be wrong...

• I think this would require a third party identity provider that can do on-device verification through certificate services.  Though I'd be interested if anyone had a different way to approach this.

[panderson]

Although not foolproof, you may be able to use Context-Aware and block by IP subnet

[kaned · Accepted solution]

This has not been as much of an issue for us as we must have less access to personal identifiable information.  I would think that if this was something that we can be implemented, then taking the device off would likely be a requirement. 

The student would essentially not be able to do any work that they couldn't log into a personal device and they also did not have a school device.

Isn't I managed two separate school districts and this is not been a consideration regarding our students at this time.

[Meghan · Accepted solution]

thank you so much.  This makes sense.  I have locked down the accounts from sharing in and out, so it should be ok.  Thanks!!

[Dean_Mantz]

We are a small, rural school district. Like you, we are 1:1 at school but not allowed to go home in grades K-6.  We do allow students to access their accounts from home but made parents aware that our content filter extension will install on the Chrome browser via the school account.  That has deterred some from accessing outside of school.  

[JoyMagnolia]

Hi Dean, we are implementing content filters and monitoring also (GoGuardian) and need to communicate to families the same info that you shared about extensions being downloaded when the school email account is used. Did you get pushback or have you run into any issues with that rollout?