5 ms·

Agreed, domain admins can also lock down Windows, iOS, Android, and MacOS. The school is effectively making the computer a terminal into their system. Their sy

by gernb 5y ago

Agreed, domain admins can also lock down Windows, iOS, Android, and MacOS. The school is effectively making the computer a terminal into their system. Their system, their rules. I know the OP won't like this answer but the OP should buy their kid another computer for their non-school activities. Of course they could also complain to their school/district to change the polices. Personally, I'm used to it. I have a personal computer for my own use and a corp computer that's managed by corp and is locked down. I don't complain the corp computer is locked down (except when it gets in the way of doing my actual job). For all personal stuff I use my personal computer.

ryan_j_naughton 5y ago
That corp computer is owned by your employer. If instead you are a consultant who does work for several clients on your own machine, then it would be unreasonable for them to lockdown your personal machine. Instead, if they want you to use a more secure solution, they should provide the computer.
- staticassertion 5y ago
  Right, but if you add your account to their organization so that you can get onto their network dont be surprised when they push policies.
- piyush_soni 5y ago
  In my company setting up the office email on our personal phone is optional. But if we choose to do that, they install this entirely new 'profile' with work apps and controlling software on that in the name of security. I chose not to install it, but some would surely do it. Probably no case can be made against them as they don't force their employees to install mail on their phones.
  - scambier 5y ago
    I did that for convenience (though now I removed it), but the work profile seemed to be well compartmentalized from the personal part, and there was a strong emphasis on this fact before the installation process. If they were to wipe it, only the work profile would be affected. I fortunately never had to try it...
- rejectfinite 5y ago
  No but if you add their MDM to your personal PC they can push policy to it.
0xBDB 5y ago
"The school is effectively making the computer a terminal into their system." I agree with this. If you had an rdp / citrix / ssh session to your employer you'd expect them to control what's on the other end. A Chromebook on which you're using a work/school account is much closer to that experience than a PC, but with the lines unfortunately much more blurred.

by gernb 5y ago

ryan_j_naughton 5y ago

That corp computer is owned by your employer. If instead you are a consultant who does work for several clients on your own machine, then it would be unreasonable for them to lockdown your personal machine. Instead, if they want you to use a more secure solution, they should provide the computer.

staticassertion 5y ago
Right, but if you add your account to their organization so that you can get onto their network dont be surprised when they push policies.
piyush_soni 5y ago
In my company setting up the office email on our personal phone is optional. But if we choose to do that, they install this entirely new 'profile' with work apps and controlling software on that in the name of security. I chose not to install it, but some would surely do it. Probably no case can be made against them as they don't force their employees to install mail on their phones.
- scambier 5y ago
  I did that for convenience (though now I removed it), but the work profile seemed to be well compartmentalized from the personal part, and there was a strong emphasis on this fact before the installation process. If they were to wipe it, only the work profile would be affected. I fortunately never had to try it...
rejectfinite 5y ago
No but if you add their MDM to your personal PC they can push policy to it.

0xBDB 5y ago

"The school is effectively making the computer a terminal into their system." I agree with this. If you had an rdp / citrix / ssh session to your employer you'd expect them to control what's on the other end. A Chromebook on which you're using a work/school account is much closer to that experience than a PC, but with the lines unfortunately much more blurred.