Summer processes for student accounts

GOOGLE

August-ish:

3rd graders get new accounts with password gradyearXXXX.

4th, 5th graders choose an avatar and set a desktop and bookmark Scratch and get a tour of various user settings (Amy.)

(All LS students are in an OU with NO email service enabled.)

September:

After Amy gets a chance to brief them about netiquette etc., 6th graders get the "force password change at next signin" setting and they choose a password and share it with Amy.

We move 6th to the "Restricted Email" OU.

7th and 8th grade no change.

(All MS students are in an OU with intra-domain-only email, along with a few whitelisted domains e.g. vidigami and the like.)

October (or thereabouts):

Last year's 8th graders accounts are suspended, and their OU is moved under the "Graduated" OU.

This is what the OU structure looks like in February 2019:

We aren't currently using the bottom two OUs. "Restricted web and email" was used for some kid who couldn't focus, and I think it blocks access to all but a small whitelist of things like Google Docs and wikipedia. "UNrestricted email" was used once for a group of 8th graders who needed to communicate with a variety of people in the community and it would've been too unwieldy to add them all to the "allowed senders" exception list for the main Restricted Email OU.

WINDOWS

tbd but we make AD accounts for the new kids and disable the accounts for the gone kids.