References

Bremen Senator for Children and Education

The Bremen Senator for Children and Education takes care of the IT for 142 schools in the city state with approx. 80,000 IT users (pupils, teachers and school staff) and 10,500 client systems.

Requirements

• Centralised administration of educational IT infrastructures of the schools in the city.
• Cross-school, centralised provision of IT services such as e-mail, Internet, Intranet and the integration of different end devices such as the pupils’ smartphones and tablets.
• Easy-to-use software solution for teachers for controlling IT and the pupils’ computers in the classrooms.

Solution

Univention Corporate Server (UCS) with Samba 4 and UCS@school 4.3 (August 2018)

City Basel

Educational center PZ.BS, ICT Medien
Maintaining 60 school sites with 25,000 pupils and 2,500 teachers and about 3,000 PCs and notebooks.

Solution

Since 2010 UCS@school is used on 13 servers and 13 further, connected virtualized UCS servers as the central identity and access management system for the provision of file sharing, groupware services and virtual desktops based on Citrix.

Requirements

• Central solution for the about 60 school sites with minimal overhead for the schools themselves
• Connection to Windows Active Directory via Univention AD Connection
• Extensive interface for the complete and automatic import of accounts from pupils and teachers
• Single sign-on and site-independent access to services via the Internet
• Integration of further services such as LDAP, mail and web mail, eduBS-Cloud (ownCloud), Plone (eduBS-education server), school websites), eduBS-ILIAS, SoLe
• Connection of Windows Active Directory via Univention AD Connection for the provision of virtual desktops based on Citrix.

City Hanover

The objective of a pilot project of the city of Hanover, encompassing six schools and 5,500 users, is to create modernized IT groundworks and infrastructure for the digitization of Hanover’s education system. The pilot project, which is scheduled to run until 2018, works on implementing a centralized IT infrastructure management, among other things.

Requirements

• Centralization of IT administration for the school authority
• A central access, role, and authorization management for the digital identities of students and teachers (user administration) adapted to the requirements of schools
• Import mechanism for users for automatic administration of users, schools, and classes
• Integration of the Webweaver learning platform and the Apple School Manager to the central user administration
• Integration of Microsoft Active Directory into the user administration system
• Central web portal for access to web services
• Self-service functions (e.g., password reset) via the web portal

Solution

Univention Corporate Server (UCS) with UCS@school provides central access and authorization management for the affiliated schools and web services. Since March 2020, 50 schools in the city with approximately 50,000 users have been in the system. Automatic import mechanisms ensure that the data of users, schools, and classes are synchronized so that all services connected to UCS@school always have the latest user information available. Users can log in to the services themselves with the same access data. The Active Directory connection is made by the AD Connector contained in UCS@school.

In addition, with UCS@school, Hannover provides a web portal with password self-service, through which all users can easily access digital education services.

City of Beckum

The city of Beckum has a total of nine schools: six primary schools and three secondary schools. Two employees take care of the network infrastructure, the telephone systems, the servers and NAS systems as well as the end devices (including mobile device management). There are about 5,200 accounts (4,500 pupils and about 650 teachers).

Requirements

• Central identity management for the administration of around 5,200 accounts
• Connection of nine schools
• Externally hosted server with fast Internet connection and support from the service provider
• Modular and expandable system
• Problem-free integration of existing Apple devices (incl. MDM)
• Data protection-compliant integration of MS Office 365
• Optional integration of a learning management system and a timetable

Solution

• UCS@school operated in the NetCologne data center with central administration of all user accounts
• Connection to Nextcloud, Open-Xchange and Rocket.Chat, MS Teams for audio and video conferences
• Optional extension with an LMS and timetable management.

City of Cologne

The School and Pre-Kindergarten IT Services department at the Data Processing Office in Cologne provides services for 261 schools with around 10,000 faculty members and 135,000 students in total with the support of NetCologne.

Solution

A UCS-based identity management system managed centrally by the education authority with integration of the groupware Open-Xchange, the mobile device management software Jamf, the learning platform Moodle, and Office 365 via single sign-on

Requirements

• Consultancy services, supply and strategic further development of the IT infrastructure in schools
• Commissioning, responsible operation, and support of the IT infrastructure
• Standardization and quality optimization
• User maintenance from the school administration software SchiLDZentral via LDAP
• Automated software distribution
• (Centralized) administration of entire IT infrastructure, for example:
• Different server environments in the schools
• Centrally provided services
• Support of bring-your-own-device models
• Operation of around 5,500 tablets financed by the education authority
• Provision of a student and teacher mail solution
• Learning management system, web spaces, and cloud services

City of Fulda

The council of the city of Fulda is responsible for the support and operation of IT for 23 schools with 13,000 students and 1,000 teachers.

Requirements

• Uniform identity management for the centrally organized school IT of the schools in Fulda, to which the existing Active Directory can be connected.
• Controlling access rights for all students, teachers and school administrators of around 1,500 Windows PCs and notebooks and 850 thin clients
• Automatic and encrypted data import including a user life cycle management from the school administration (LUSD)
• Connection of further services to the central IDM such as Active Directory, fileservices, Self Service and Office 365.

Solution

• UCS as the basis of identity management
• UCS Active Directory connection for synchronization to the cross-school Active Directory.
• UCS Active Directory compatible domain controller for file services on all clients.
• UCS@school for central identity management and automated import.
• UCS Microsoft Office 365 Connector for the connection to Office 365.
• UCS Self-Service which enables students and teachers to reset their passwords independently.

City of Marburg

The Marburg Media Center currently has 12 employees who manage the IT of the 23 schools with approximately 11,500 students and 1,100 teachers. They are responsible for around 4,700 terminals, 80 server systems, 500 access points and 80 switches.

Requirements

• Unite networks and users in one system with a contemporary structure
• Shorten support runtimes
• Faster provision of new IT services
• Physical merger of networks (school network and administrative network)
• More flexible and faster response to sudden problems (e.g. corona pandemic)
• More time for on-site support in Marburg schools
• Overcoming shadow IT and meeting the individual needs of schools and students
• And our main goal: building a sustainable and more user-friendly authentication basis for users with central management of all end devices via mobile device management (MDM)

Solution

• Future-proof and user-friendly authentication based on UCS@school (one UCS Primary Directory Node, one Backup Directory Node, two Replica Directory Nodes for monitoring and one LDAP Connector for future systems)
• Management of end devices via Mobile Device Management (MDM) incl. Single Sign-on
• GPG-encrypted import of user data
• Import from the country directory service LUSD as a customer-specific repository
• Reverse proxy for LDAP directory and setup of UCS Microsoft 365 Connector
• Concept for collective authentications in the Windows login of Azure AD planned

City of Neumünster

The IT department of Neumünster’s city administration is responsible for the IT infrastructure and IT services for 22 general education schools and three vocational schools in that city. These schools include around 1,100 teachers and 15,000 students.

Requirements

• Discharge of schools through central provision of school IT by the school authorities
• Operation in the data center of the municipal IT department
• Provision of uniform IT services that are easy to maintain and support via the municipal intranet
• Preferred use of Open Source solutions

Solution

• UCS@school as identity management with digital identities for all students and teachers
• RADIUS server for authentication of all users of the school WLAN
• Use of web content filters, including parental controls
• Online school portal for centralized provision of all IT services and easy access to those
• Connection of IT services such as Nextcloud, ONLYOFFICE and Moodle to UCS@school and single sign-on access

City of Norderstedt

There are 21 schools in Norderstedt (12 elementary schools, 4 high schools, 4 community schools, 1 special needs school) with around 8,000 students and 1,000 teachers. Ten specialists are currently in charge of IT, three of whom are responsible for identity and access management with UCS@school as well as interfaces to the school’s own WLAN or Mobile Device Management (MDM).

Requirements

• Redudant and virtualized server infrastructure
• Network and security concept
• Redundant firewalls
• Nextcloud connection with integrated Collabora Online Office
• Separate secure WLAN with youth protection filter
• Automated registration of school-bound end device to the school WLAN
• Altogether: Preferred use of open source software (OSS)
• Perspective: A secure video conferencing tool integrated into Nextcloud, a digital class register, and additional teaching and learning software

Solution

• UCS@school as central school platform with hardware incl. storage area network (SAN) and hypervisor in the town hall
• Connection of the schools via fiber optics with 1GBit/sec. by wilhelm.tel GmbH
• Service Set Identifier (SSID) with parental control filter (school WLAN “MobyEdu”)
• Nextcloud with integrated Collabora Online Office and perspective BigBlueButton rooms

City of Wolfsburg

District-free city with 18,800 pupils at 37 schools

Requirements

• The City of Wolfsburg intends to use the Wobila.de project to create a virtual learning space for the educational landscape in Wolfsburg. Within the framework of a pilot project at 6 schools, initially the central provision of WLAN and web services is to be tested.

Solution

• Univention Corporate Server (UCS) and UCS@school as Identity Management and Portal Solution for Student and Teacher Identities
• Connection of the school WLAN to UCS for Internet access at the schools
• Connection of the learning management system itslearning to UCS for the central administration of users in UCS

Diakonie Eine Welt, Austria

The Austrian deaconry Eine Welt

Requirements

• Replacement of the unsufficient management console
• Central management of the devices and their users
• Central identity management in order to easier integrate different services.
• Future-proof with connection possibilities also to cloud services

Solution

Univention Corporate Server: As this infrastructure solution allows the integration of Windows domains on the one hand and because UCS offers the desired Open Source base with a German-speaking community on the other. Last but not least, Univention also has an Austrian service partner in Siedl Networks.

Fritz Haber Institute of the Max Planck Society

Nearly 500 employees* located in Berlin

Requirements

• Complete replacement of the Microsoft server infrastructure
• Connection of the Windows clients to the central user administration

Solution

• UCS as Domain Controller and Backup Controller of the Windows clients
• Connection of UCS to the self-programmed management tool

Jena Media Center

The Jena Media Center currently has ten IT employees who are responsible for 27 school locations (elementary schools, community colleges, high schools, vocational schools and a support center). The employees manage the accounts of about 12,500 students and 1,700 teachers and take care of about 4,000 PCs, 1,500 notebooks, 1,500 iPads and a large number of servers, switches and access points.

Requirements

• Open Source Software (OSS) instead of proprietary solutions
• Standardized system at all locations
• Minimal training requirements for teachers and students
• ID management and LDAP functionality for all devices
• Stability and possibility of connecting additional services
• Coverage of needs for school server functionality, cloud, groupware, Radius, Microsoft 365, Apple ID, etc.

Solution

• UCS@school as technical basis for the complete IT infrastructure
• School server domain for the Jena School Portal (JSP) hosted at “jsp.jena.de”
• Master server in the central office of the Jena Media Center and Replica Directory Nodes in the schools with decentralized DHCP and DNS management
• Use of UCS identity management for connections to Moodle, helpdesk, portal and end devices
• Management of printers, clients and active components incl. central software distribution at all school sites via UCS Lightweight Directory Access Protocol (LDAP)
• Connection to Open-Xchange (OX) as mail solution for all students and teachers
• Integration of Nextcloud with connection to the school server for all users

Kassel District

The media center maintains 72 schools in the district of Kassel with about 25,000 pupils. It also manages the use of around 6,000 end devices.

Requirements

• Central administration of the school IT in spite of the wide-spread area structure
• Functional IT despite partially poor Internet connection at schools in rural areas
• Centralized provision of services from the data center Hofgeismar, combined with local school servers

Solution

Full extension of UCS@school with central services and school servers.
Partial use of UCS@school administration servers in networks which are separated from the educational network.

Landesmedienzentrum Baden-Württemberg

Over 550 Baden-Württemberg schools, whose school networks and IT services for lessons are supported by the LMZ.

Solution

The new version of paedML Linux 6.0, which is based on UCS@school and the Open Source server operating system Univention Corporate Server.

Requirements

• Flexible firewall solution for expanded network infrastructures
• Multi-server operation and multi-school capability
• Support of current Windows desktops in the schools
• Control options for teachers such as screen monitoring and transfer or automatic distribution and collection of student data
• Integration of student smartphones

Stadt Bremerhaven

The media center Bremerhaven supports schools in the implementation of IT-based classes.

The aim here was to provide the 17,500 teachers and pupils in this town with an easy and safe access to the learning platform itslearning.

Solution

UCS with UCS@school as the central identity and rights management for the learning platform itslearning. The integration of further IT services into UCS was planned for the future.

Requirements

• Automatic, low-maintenance user administration for thousands of users
• Intuitive and easily manageable solution as no IT experts were available
• Fast integration of the learning platform itslearning
• Possibility to integrate further IT services such as email, Active Directory or WLAN authentication later on
• Central administration with the possibility to delegate certain single tasks to schools
• The continuous import of user data from different data bases allows consistent and up-to-date user accounts