microsoft guidance for dfe devices
TRANSCRIPT
Microsoft guidance for DfE devices Get step-by-step information on migrating and managing your DfE Windows 10 Devices for when DfE safeguarding settings and ongoing management expire.
Information for school leaders
Get the most from your DfE Windows 10 deviceThe Department Of Education (DfE) is providing more than 1.3million laptops and tablets as part of the Get help with technology programme. The programme helps disadvantaged pupils and young people with remote and face-to-face education during coronavirus (COVID-19). Microsoft Windows laptops and tablets may have been delivered to you with security settings already configured and managed by the DfE using Microsoft Intune. Microsoft Intune is a cloud-based device management package which can be used to deploy and setup new devices, ensure correct security and monitoring and be used to keep them up to date and this can be done remotely across the internet.
However, DfE safeguarding settings and ongoing management expire on 30 September 2022.
This guidance has been provided by Microsoft to give support to institutions on getting the most from your DfE Windows 10 device.
It includes guidance on:
1. Windows 10 device managementHow to manage your DfE-funded devices to ensure the technology can be brought into your institution’s existing IT estate.
2. DfE device migrationAdvice on migration of devices to existing IT estate to avoid data loss and ensure ongoing security and management.
3. LicensingLicensing guidance to help cost effective acquisition of any remote management software.
4. Get supportA list of certified partners who can support you through these processes.
5. Build long-termHow to build a long-term digital strategy to support your institutions academic goals, underpinned with technology.
2 | Empower Your School Back to home | Empower Your School | 3
1. Windows 10 device managementThere are several options available and considerations to consider when managing the devices that you have received from the DfE. We have provided some of these options below but always recommend you look for advice from one of our recommended partners if you need any additional technical guidance.
Given that many of these devices are used away from your physical network it is best to manage them using a cloud solution.
Secure and Configure your networkAssess your network configuration and apply network principals and best practices to ensure the best possible Office 365 user experience.
2.
Sync your Active DirectoryThis article is meant for customers who intend to integrate an on-premise active directory with Office 365. If you do not need to integrate an on-premise directory, and intend to provision cloud-only identities, you can skip this step, and proceed to Sync your School Information System (SIS) using School Data Sync or a similar tool.
3.
Create your Office 365 tenantFollow Step 1 to set up an Office 365 for Education verified tenant if you don’t already have one set up.
1.
Sync your SIS using School Data SyncSchool Data Sync (SDS) is a free service in Office 365 for Education that reads the school and roster data from a school’s Student Information System (SIS). It creates Office 365 Groups for Exchange Online and SharePoint Online, class teams for Microsoft Teams and OneNote Class notebooks, school groups for Intune for Education, and rostering and SSO integration for many other third party applications. It is compatible with SIMs and many common SIS, but should your system not be directly compatible we have alternatives from partners listed below with contact details for further information:
• ACM
• BFC Networks
• Salamander
4.
License UsersLicensing user accounts in Office 365 is important, because users can’t use any Office 365 services until their accounts have been licensed. More information can be found on licensing below.
5.
Cloud DeploymentGet started by creating your Office 365 tenant (if you don’t have one already), setting up a cloud infrastructure for your school, and creating, managing, and syncing user accounts. If you already use Microsoft 365 or Office 365 solutions such as Exchange Online or Microsoft Teams, then you already have a tenant setup and may simply need to add Intune to this.
Back to home | Empower Your School | 54 | Empower Your School
An example device deployment workflow
Licenses• Get Intune for Education licenses for
each learner (or device) - see licensing guidance.
• Partner (or customer with support from Microsoft FastTrack) adds licenses to existing tenant.
Setup identitiesCloud only: For customers who have already been setup for remote learning.
Setup AD to AAD identity sync: School Data Sync* or AAD Connect.
Assign licenses to teachers and students.
Create policies and appsConfigure Intune and AAD for Windows 10 management and security.
Define apps and recommended configurations to be pushed to student devices. For example: Office shortcuts, Bitlocker, restrictions on Edge browser, network filtering apps.
Define recommended policy settings:
Use Intune for Education Express configuration.
AutopilotAutopilot is optional but it enables easy remote deployment of future new devices.
Hardware OEM or Partner uploads device IDs (hardware hash).
Learn how to set up Autopilot
First launch at schoolShip device straight to student/teacher with link to instructions to connect to internet and check that they can access Office 365.
OR
School launches device with student or teacher, connects to Internet and ensures it’s setup properly.
Stay productive and secure Microsoft Intune for Education is a cloud-based, mobile device management (MDM) service designed specifically for schools and colleges. It helps your teachers and students stay productive on classroom devices and keeps school data secure and devices up to date.
With Intune for Education, you can:
The Intune for Education portal is designed to include only the settings and workflows you need to manage iOS and Windows school devices. From the portal, you can view and act on your device, user, and app inventory. Intune for Education also supports the Take a Test app, which allows teachers to assess student progress directly from classroom devices.
• Manage the desktop and mobile devices students use to access classroom data.
• Configure and assign the apps students use in the classroom.• Control how students and teachers access and share
classroom information.• Apply school security requirements to devices and apps.
• Easy deployment and management of Windows and Office 365 apps.• Scoped administration actions enabling delegation of common tasks.• Tools and features to transition from on-premise to cloud platform.• Support of multiple platforms including Windows, iOS,
MacOS and Android.• Discover the technical data sheet. • Get IT step-by-step guidance.
Back to home | Empower Your School | 76 | Empower Your School
On-premise management of devices with SCCM Many organisations have existing network solutions to manage their devices. Historically most of these have been based on local servers and require the managed devices to physically connect to the organisations network to enrol. The most common solution is Microsoft’s System Center Configuration Manager (also known as SCCM or Config Manager).
If your organisation already uses SCCM (or other on-premise device management solutions) then this may be enough to manage devices transferring from the DfE Intune management. However, given that many devices are now being used remotely by students and teachers for remote learning it may still be advisable to look at adding cloud-based management tools such as Intune. Intune and SCCM can work together in a setup called co-management. This allows you to take advantage of existing processes and policies whilst adding the benefits of remote, cloud-based technology.
Microsoft has now brought Intune and SCCM together in a single solution called Microsoft Endpoint Manager to simplify this.
Get full details about how to setup and use Intune for Education 2. Device migration and
data transferDevices that have been provided by the DfE have also been supplied with a local user profile and core security measures to ensure they are ready for secure use by students regardless of any intervention from an institution. If your device is currently enrolled in the DfE central Intune tenant please visit this site for further guidance:
Guide to resetting Windows laptops and tablets (education.gov.uk)
In most cases, it was expected that users of these centrally managed devices would log in to an organisations Office 365 apps and services using their own user details created by the school/college. Therefore, when they created documents or notes in OneNote or Teams it should have been stored in their online profile and OneDrive associated with their user account. In this case all their data is safe in the cloud and will be available from wherever they log on.
However, it is worth checking with the user that they did not save data locally to the C:Drive, in which case this data will need to be backed up or transferred to the cloud prior to resetting the device to migrate it to your IT estate.
Visit the DfE page for further information on the Get Help With Technology programme
Back to home | Empower Your School | 98 | Empower Your School
3. Licensing guidance
To ensure that you have the right licensing to support your devices we’ve made the following recommendations based on common education scenarios. It is worth talking to a Microsoft partner to ensure you are using the most cost-effective licensing solution for your requirements.
If you already own and plan on using existing on-premise or cloud-based management solutions from alternative providers, then no additional licensing may be required. Additionally, you should check what existing Microsoft licenses you own that may provide the rights to use Intune for Education.
Already have an existing license? If you own the following licensing already you will be covered for all features above:
• Microsoft 365 A1/A3/A5• EMS A3/A5• Intune or Intune for Education
Please note that Office 365 suites (such as Office 365 A1/A3/A5 or E3/E5) do not provide licenses for Intune, these are only part of Microsoft 365 suites.
Already managing devices on-premise?If you have an existing on-premise solution (such as SCCM) you can also use this to enrol the devices but it will require physical connection to the school network.
We would still suggest adding cloud management to facilitate remote management in the future to support any remote learning or devices that go home to students.
Do not have existing solution or licensesIf you don’t have an existing solution, we recommend one of the following license solutions:
The exact selection and most cost-effective way to license will depend on the number of faculty and students as well as the number
of devices you need to manage. Most licenses can be purchased either per user (irrespective of the number of devices they use) or per device managed (irrespective of the number of users of each device). Additionally, for many user licenses in education, Microsoft
10 | Empower Your School Back to home | Empower Your School | 11
provides a student use benefit where several student licenses are provided free of charge for each faculty license purchased.
Finally, consider the products you wish to license overall. Intune for Education can be licensed as a stand-alone solution, relatively inexpensively and alongside any other Microsoft licenses. However, you may want to license Intune as part of a wider suite such as Microsoft 365 A1 or A3 which will provide additional cloud services and security capabilities. Therefore, it’s worth considering your longer-term digital strategy to see if a wider suite license would be more cost-effective in the medium term.
Microsoft offerings can include Intune for Education. Most are available to license through several Microsoft licensing programmes such as Cloud Solution Provider (CSP), OVS or EES. Programmes can be mixed and the simplest way to add Intune alongside any existing server or on-premise license you own may well be Intune for Education CSP.
• Intune for Education (Licensed per education qualified user)
• Microsoft 365 A1 (Licensed per device for the device lifetime – up to 6 years*)
• Microsoft A3 or A5 (Licensed per education qualified user)
• Microsoft Enterprise Mobility and Security (EMS) A3 (Licensed per education qualified user)
4. Get Microsoft partner support
Microsoft technical and volume licensing is predominantly sold via a Licensing Solution Partners/Microsoft Resellers. Customers will find it more efficient to contact their Microsoft partner for many scenarios, including:
• Entering into a new Volume Licensing Agreement.• Changing contact details on existing Volume Licensing Agreements.• Ordering volume licensing products.• Advice on products or licensing solutions.• Invoice accuracy, pricing, payment status or other billing matters relating
to volume licenses.• Microsoft Customer Support teams do not make changes to volume
licensing orders or invoices issued by our partners.
12 | Empower Your School Back to home | Empower Your School | 13
5. Building a long-term digital strategy The past year has likely proven to be the biggest challenge any education establishment has had to face in its history. And with many organisations now looking to build a long-term digital strategy, we wanted to spotlight the framework that Microsoft has had in place and developed for over six years.
The Microsoft Education Framework is an effective, flexible platform for education transformation. To develop it, we combined the latest research
and consulted hundreds of academics, experts and policy makers. We distilled the key insights into a single powerful framework now available to school leaders everywhere.
The Microsoft Education Transformation Framework is a guide for education leaders to navigate the complexity of transformation impacting every aspect of their mission. It facilitates the process of envisioning what’s possible and developing a strategy to achieve it.
Get partner support building your strategy To find a partner who can support you on your digital strategy simply visit the Global Training partner page and filter the Service Provided by Microsoft Education Transformation Framework for System and School Leaders.
Get more information on the Education Transformation Framework and how to undertake this process for your institution.
Student &School Success
IntelligentEnvironments
Teaching& Learning
Leadership& Policy
Educator, Leader& IT Development
Equity, Inclusion,& Accessibility
Social-EmotionalLearning
Future-ReadySkills
Strategic Planning & Change
Management
AdvancedAnalytics & AI
HybridLearning
Optimized &SustainableOperations
Curriculum &Assessment
Vision forChange
LearningSpaces
Devices forLearning
Safety, Security,& Privacy
StudentCenteredLearning
CommunityEngagement &
Partnerships
Continuous Improvements
& Culture
14 | Empower Your School Back to home | Empower Your School | 15
AdEPT Education, formerly known as Atomwide, is AdEPT Technology Group's dedicated education team that has over 30 years' experience providing designed-for-schools technology that is simple to use, easy to implement, and budget-friendly. Our award winning range of products and services are used in over 4,000 schools across the UK, including all those that have a London Grid for Learning (LGfL) connection.
As a Microsoft Gold Partner and Microsoft Cloud Solution Provider, we have helped hundreds of schools on their Microsoft journey. We offer a comprehensive set of services including: setup, support, hardware, licenses and training. This includes Microsoft 365, Office 365, Intune for Education, and Microsoft licensing.
Email [email protected]
Setup in 2001 to provide ICT support to both Education and Business, the business soon developed and by 2005, we became a limited company. With a proven record of working in the Lincolnshire Schools ICT Service since 2001, we continue to build on our experience and infrastructure suppling services all over the East Midlands. Supplying a large array of hardware and software solutions to our customers has built a solid reputation for quality services.
Email [email protected]
Computeam is an accredited Microsoft Partner with a 20-year track record in Education, trusted by the DFE to support schools in using cloud technologies to enhance teaching and learning.
Email [email protected]
Telephone 0800 8620123
Empower inquisitive minds, no matter where they are:
We believe that every teacher and every student deserve a creative environment without boundaries in order to spark the imagination of future generations.
Email [email protected]
Telephone 0333 111 0004
Insight is a leading technology provider of hardware, software and service solutions to 70,000 clients in the US, Canada, Europe, the Middle East and Asia-Pacific.
Education hardware services from Insight free up school time and reduce costs. They include, Autopilot and Intune provisioning, consultancy and engineering services.
Email Contact Us | Insight UK
Currently over 500 Schools rely on Medhurst for their IT solutions.
As IT education experts, Medhurst advises schools on how best to use technology to support teachers to reduce their workload and administrative burden and create exciting, innovative and inclusive learning environments for students to improve performance in education outcomes.
Our IT education team have been education professionals in previous roles, so we understand the positive impact that technology can deliver for curricula: improving student engagement, encouraging individual learning and offering inclusive home and remote IT solutions. We work with our schools to scope IT proposals that are based on current evidence and data to deliver great student experiences as well as improved education outcomes for all students.
Talk to us today about how Microsoft Intune and Windows Autopilot can manage your DfE devices from the cloud across your School’s IT infrastructure.
Email [email protected]
Telephone 01489 563000
NS Optimum is a Microsoft Education Partner. Working with schools, colleges and directly with the DfE, NS Optimum has specialised in supplying and supporting complete ICT systems for over 26 years.
Email [email protected]
Telephone 01926 880300
With a dedicated Schools Team, we have a long history of working within the education sector and offer a tailored approach to help with any IT requirements that you may have.
Today’s schools demand agility, efficiencies and tools to enhance and meet the need for excellence, with the aim of superb learning experiences and outcomes for all students.
We help provide clear roadmaps to a cloud-inclusive infrastructure with a resilient and security wrapping – which is a must for all schools.
Email Contact Us - Phoenix Software
We provide bespoke, innovative end-to-end technology solutions that help your business and organisation to succeed.
Email [email protected]
Stone has been providing the education sector with leading IT and AV solutions for almost 30 years. Stone’s education business is built upon an in-depth knowledge of the sector and our technical experts can help transform your IT to advance the learning of your students.
Our experience in delivering solutions, teamed with our partnerships with global IT brands such as Microsoft, means we can assist you with a vast range of solutions including:
> Devices from Stone and leading global brands
> Deployment services
> Servers and storage solutions
> Networking and infrastructure
> Managed Services and Break-fix options with UK customer support
> Software and licensing solutions
> AV and collaboration solutions
> Secure ITAD and asset management
> BYOD and 1:1 Schemes
> Safeguarding & Cybersecurity solutions
> Training and enablement
> Classroom resources
> Professional services
Email [email protected]
Telephone 08448 549 800
At turn IT on we empower you to teach IT with confidence, streamline your administration and maximise the full potential of your school tech. We provide ICT support you can trust.
Email [email protected]
Telephone 01865 597620
At XMA we understand that technology is an integral part of school-life. Each day, we use it to teach, learn, connect and create, and we are constantly looking for ways for it to help us be more efficient in schools and colleges. We believe innovation is the key to solving your challenges and helping you achieve your goals. But there’s a bigger picture to consider. Every education institution is different, so for technology to truly enable better experiences and processes for staff and pupils, it needs to align to your strategic ambitions. The right technology is out there, but solutions will only drive effectiveness and ROI if they first meet specific objectives. That’s where we come in. We start with you. We listen, understand your needs, consult, define, and adapt to realise your ambitions. XMA MAKES IT ABOUT YOU.
Supporting Microsoft partners