At St Columba's Catholic College (and in the Diocese) we use a software system called Intune to help manage the staff, student and College devices (iPads and laptops). We previously used Airwatch for the same purpose, but during 2019 we are moving devices over to Intune. Intune and Airwatch have the same capabilites.
Students are able to enrol their iPads into Intune (such as if they are new, or they wipe their iPads and need to re-enrol it in ) by seeing IT staff at recess or lunch at the IT Hub (around the side of the library).
It is a condition of the diocese (and College) that student iPads are enrolled in Intune if they are to be on the College wifi and network at all. Student and staff devices not enrolled in Intune will not get to use the College's wifi or network.
Advantages of Intune:
- we can add settings or content to devices for staff and students such as access to the College wifi, shortcuts to important web pages
- the ability to add other configurations at a later date (e.g. if we need all students to have a new survey or ebook on their iPads)
Please note that the College does not block apps such as Facebook or Messages using Intune, however, there have been restrictions within the network that have stopped some apps from running. Once away from the College wifi (e.g. if they are at home) these apps will work as normal (e.g. Facebook).
What Intune doesn't allow us to do:
- see the messages being sent or received by students with the Messages app, Facetime or other messaging apps, SMS or email. This includes the message content, place of origin or identity of sender/ receiver
- view anything on the device's screen, at home or at the College
- see any app contents (like documents, images or usernames)
- view the device's web history
- see any account details (usernames and passwords) like iTunes, Facebook, other than the student's College username (but not password)
- view photos/videos on the device
- access and use the built in cameras or microphone on the device
- remove apps that students have installed on the device
- remotely wipe the device
About location tracking
Also of important note is that College and Diocese staff are unable to use Intune to 'see' the location of enrolled devices.
Therefore we highly recommend that students or their parents have 'Find my iPhone' (or similar) connected to the student device so that they can track it if required (if they lose it for example).
What Intune can see on your device
As of 2017, the Catholic Education Diocese of Parramatta (and St Columba's Catholic College) is now using a combination of Microsoft InTouch and Cisco ISE (Identity Services Engine) to register senior BYO laptops and provide them with wifi and internet access.
Together, Intouch and ISE can capture the following details form a device when it is registered:
- the CEDP/College username of the person registering the device
- the device's serial number, the device's name, the device's network MAC address,
- a list of the applications installed on the device (but not what you are doing with the application, if you have ever used it, or what you have done with that application).
This process is used in part so that the Diocese is aware of what devices are on its network and who they belong to, and to assist in making sure devices have the settings they need to work on the network.
Currently, to unregister a device we ask that you pop in to see one of the IT team at recess or lunch, with the device you want unregistered.
For more information on what InTune can 'see' or do with your device once it is registered, please use the link below.