Your cart 0 items
Your cart is empty.
Searching the site...
No matches. Try another word.
Log in
Computers & devices

School computer lab

A room of managed desktops that wipes itself clean between classes, hands the teacher every screen at once, and keeps every child on the safe side of the network. Run by one member of staff, not a support contract.

Talk to engineering See all solutions
The problem

Shared

A school lab is the most abused room of computers on any site. Thirty children touch each machine every day, one after another, and every one of them leaves something behind: a changed wallpaper, a downloaded game, a browser signed into someone else's account, a setting nobody meant to change. By Wednesday the row nearest the door is a different build to the row by the window, half the machines throw an error at login, and the teacher spends the first ten minutes of a fifty minute lesson fixing computers instead of teaching. The usual answer is a technician who reimages the room over a weekend and hopes it lasts. It does not last, because the room is shared and shared machines drift. What a school actually needs is a room that resets itself, a teacher who can see and steer every screen from the front, and a network that keeps a child away from harm without anyone having to watch. That is a system, not thirty separate PCs.

Design targets
< 30 s To a clean station at next login
20 min Full room reimaged over the network
1 click Lock or lockdown every screen
0 Drift carried between classes
The system

One room, three jobs.

Reset, control and protect. Each part closes one gap that thirty children a day leave open. Open a part for what it fixes and how it works.

Wipes on logout
Imagery in production

The reset engine

The room that cleans itself.

Write filter discards the session Clean station in under 30 s Full reimage over multicast, 20 min
Wipes on logout
Imagery in production

The reset engine

The room that cleans itself.

Write filter discards the session Clean station in under 30 s Full reimage over multicast, 20 min

Every station runs a unified write filter. During a lesson the machine works normally, but changes are held in a memory overlay instead of being written to disk. At logout or reboot the overlay is thrown away and the station returns to the exact golden image the teacher signed off, so the next child sits down to a clean build in under thirty seconds, not a stranger's leftovers. When the image itself needs to change, the room reimages over the network. Wake-on-LAN powers the stations overnight, they PXE boot to a small imaging appliance in the cabinet, and a single golden image is pushed to every seat at once by multicast, so a 32 seat room is reimaged in about twenty minutes whether it is five machines or fifty. Nothing is done desk by desk. One image, one room, no weekend.
Sees the room
Imagery in production

The teacher console

Every screen, from the front.

Live thumbnail of all 32 screens Lock, blank, broadcast, push a link Remote view of one seat, with consent
Sees the room
Imagery in production

The teacher console

Every screen, from the front.

Live thumbnail of all 32 screens Lock, blank, broadcast, push a link Remote view of one seat, with consent

The teacher signs in at the front and sees a live thumbnail grid of every screen in the room, refreshing a few times a second. A glance shows who is on task and who has drifted to a game. One click blanks every screen and locks every keyboard when it is time to look at the front. One click broadcasts the teacher's own screen to all thirty seats for a demonstration. One click pushes a website, a file or a login page to the whole room so a lesson starts on the same page instead of thirty children typing an address wrong. For a child who is stuck, the teacher can open a single seat, watch it and take control to show them, with an on-screen banner so the pupil always knows the teacher is looking.
Filters and flags
Imagery in production

The safeguarding gateway

The network keeps watch.

Filtering to DfE standards, IWF list Keyword monitoring to the safeguarding lead Full, per-pupil activity log
Filters and flags
Imagery in production

The safeguarding gateway

The network keeps watch.

Filtering to DfE standards, IWF list Keyword monitoring to the safeguarding lead Full, per-pupil activity log

Every request from the room passes through a filtering gateway in the cabinet before it reaches the internet. Category filtering blocks adult, extremist, gambling and self-harm content, the Internet Watch Foundation child abuse image list is enforced at the network, and the policy is age tiered so a Year 3 group and a sixth form see different webs on the same hardware. Monitoring runs alongside the filter. A library of safeguarding terms, covering self-harm, child exploitation, bullying and radicalisation, is matched against what pupils type and search. A match does not just block a page, it raises an alert to the school's Designated Safeguarding Lead with the pupil, the machine, the time and a screen capture, so a concern reaches a person, not just a log. Everything is recorded per pupil, so if a question is ever asked the school has an answer it can stand behind.
Solution optimized products

The room, specified.

Every line item chosen and integrated so the lab arrives as one working system, not a pallet of parts.

Imagery in production
Station

CalyOS Desktop compact PC

Fanless, wall or VESA

Quad-core desktop, 16 GB memory, 256 GB SSD, no moving parts to fail or clog with dust. Kensington slot, cable clamp and a tamper-evident case so the machine that arrives is the machine that stays.

Request datasheet
Imagery in production
Station

24-inch IPS display

1080p, low-blue-light

Matte 24-inch IPS panel with a flicker-free, low-blue-light backlight for a room children work in all day. Single cable to the PC, no separate power brick to go missing.

Request datasheet
Imagery in production
Station

Spill-resistant keyboard and mouse

Sealed, wired

Sealed membrane keyboard that survives a knocked-over water bottle, wired so there is no battery to flatten or receiver to lose, and quiet enough that a room of thirty is not a wall of clatter.

Request datasheet
Imagery in production
Room

Imaging and filtering appliance

1U, in the cabinet

The brain of the room in one 1U box: the multicast imaging server that rebuilds the lab, and the filtering and monitoring gateway every request passes through. Holds the golden image and the safeguarding logs on site.

Request datasheet
Imagery in production
Software

CalyOS Classroom console

One teacher seat

The teacher console: live screen grid, lock and blank, broadcast, push a link, remote help, and the exam lockdown mode. Runs on the front machine and joins the room automatically.

Request datasheet
What is included

A working room.

Turnkey

Delivered

The lab is racked, imaged, filtered and joined to your directory before we leave. Your golden image is built with you, the teacher console is live, the filtering policy is tiered to your age groups, and the safeguarding alerts route to the right person. A teacher can run a lesson the first morning.

Imagery in production

Built to your image

We help you build the golden image with the exact software your curriculum needs, then lock it as the state the room resets to.

Filtered on arrival

The filtering and monitoring policy is configured to your age tiers and your safeguarding lead before handover, not left as a project.

Joined to your directory

Stations join your on-prem directory or your Entra ID tenant, so pupils and staff sign in with the accounts they already have.

Reset before the bell

The write filter and overnight reimage are set up and tested, so the room is clean for period one without anyone touching it.

“The first lesson used to be lost fixing logins. Now the children sit down, the machines are clean, and I am teaching by the second minute.”
Head of computing, a secondary school
In the classroom

Front

The teacher runs the room from one console at the front. See every screen, steer the whole room at once, and lock it down for an exam without a technician in the building.

The console

Steer

Imagery in production
See the room

Every screen, live at the front

The teacher console shows a thumbnail of all thirty two screens in a grid, refreshing a few times a second over the room network. On task or off task is a glance, not a walk around the desks. Sort the grid by seat so a name matches a machine, and open any one screen full size to read what a child is actually stuck on before you cross the room.

Imagery in production
Steer the room

Lock, blank, broadcast, push

One button blanks every screen and freezes every keyboard and mouse, so when you need eyes at the front you get them in a second. One button broadcasts your own screen to the whole room for a demonstration nobody has to squint at. Push a website, a document or a sign-in page to all thirty seats so the lesson starts on the same page instead of thirty typos, and send a quiet message to a single machine without stopping the class.

Imagery in production
Help a child

Remote view and control, in the open

For a child who is stuck, open their seat, watch what they are doing and take control to show them the step, all from the front desk. A banner sits on the pupil's screen the whole time so a child is never watched without knowing. Nothing is hidden and nothing is recorded unless a safeguarding rule fires. This is a teaching tool, not surveillance.

Exam lockdown

Sealed

One mode turns the room into an assessment station and lets nothing else in.

The screen

Nothing but the paper

The station goes full screen on the exam or the allowed application. Alt-tab, the task switcher, a second monitor, screenshots and the clipboard are all blocked, so a pupil cannot slip to another window.

The web

Allowlist only

The web is cut to an allowlist of the exact addresses the assessment needs. Everything else, including search, email and messaging, returns nothing. USB storage is blocked at the same time.

The room

Started and ended together

The teacher starts and ends lockdown for the whole room from the console, with a live count of who is in the sealed state, so an exam begins and finishes as one, not seat by seat.

Teaching questions

Asked

Does the console work if a child unplugs the network?

A station off the room network drops out of the grid and cannot reach the internet through the filter, so pulling a cable does not buy a way around the room, it just isolates that seat until it is plugged back in.

Can a pupil see other pupils' screens?

No. The live grid and remote control are the teacher console only, tied to the staff account at the front. A pupil account has no view of another seat.

Is exam lockdown strong enough for real assessment?

It blocks the task switcher, second screens, screenshots, the clipboard and USB storage, and cuts the web to an allowlist, which meets the conditions most exam boards and the DfE ask for on-screen assessment. We map it to the specific board you use.

The duty

Duty

A school has a legal duty to keep children safe online, and it does not lift because the child is in a computer room. Keeping Children Safe in Education is clear that filtering and monitoring are the school's responsibility, and the DfE filtering and monitoring standards say a school must know what its systems block, know when a child tries to reach something they should not, and be able to show it. Most labs meet this with a filter bolted on somewhere upstream that nobody in the school can see into. That fails the standard the first time an inspector asks who checks the logs. This room treats safeguarding as part of the machine. Filtering and monitoring live in the cabinet in the room, the policy is set to your age groups, and a real concern reaches your Designated Safeguarding Lead as an alert, not a line in a file no one reads.

How it protects

Guard

Imagery in production
Filtering

The web, cut to the age in the seat

Every request passes through the filtering gateway before it leaves the room. Category filtering blocks adult, extremist, gambling, weapons and self-harm content, and the Internet Watch Foundation child abuse image list is enforced at the network. The policy is age tiered, so a primary group and a sixth form get different rules on the same hardware, and encrypted traffic is inspected so a blocked site cannot hide behind https. Overblocking is as much a fault as underblocking, so a teacher can request a site be unblocked for a lesson and it is logged either way.

Imagery in production
Monitoring

A concern reaches a person

Monitoring reads what pupils type and search against a maintained library of safeguarding terms, covering self-harm, suicide, child exploitation, bullying and radicalisation under the Prevent duty. A match raises an alert to the Designated Safeguarding Lead with the pupil, the machine, the time and a screen capture of the moment, graded by seriousness. The point is not to block a word, it is to put a possible cry for help in front of a trained adult the same day.

Imagery in production
Record

An answer you can stand behind

Every request and every alert is logged per pupil and held in the room, not shipped to a service you cannot audit. If a parent, a governor or an inspector ever asks what a child saw, or what the school did when an alert fired, the answer is a record with a name and a time on it. Logs are retained to a policy you set and covered by your UK GDPR data handling, with access limited to named safeguarding staff.

The difference

Seen

This roomA bolted-on filter
Where it runs In the cabinet, in the room Somewhere upstream you cannot see
When a term is matched Alert to the safeguarding lead, same day A line in a log nobody reads
Age policy Tiered per group on one system One rule for the whole site
Encrypted sites Inspected, cannot hide behind https Often passed straight through
Proof for inspection Per-pupil record with name and time A promise from a supplier
Who holds the data The school, on site A third party, off site
Safeguarding questions

Checked

Does this meet the DfE filtering and monitoring standards?

It is built to them. Filtering and monitoring are both provided, the policy is age appropriate, alerts route to a named safeguarding lead, and every action is logged for evidence, which are the points the standards ask a school to demonstrate.

Who can read the monitoring logs?

Only named safeguarding staff you nominate. Access is by account, every view is itself recorded, and the data stays on site under your own UK GDPR data handling rather than leaving your network.

What about false alarms?

Every alert is graded, so a homework search about a poem that mentions death is not treated like a genuine risk. Grading and a human review mean the safeguarding lead spends time on real concerns, not noise.

Specify it with us

Safe

Send us your age groups and your safeguarding lead and we will configure the filtering and monitoring policy before the room ships. You sign off what it blocks and who gets the alerts.

Talk to engineering OEM & ODM
The reset engine

Clean

Between classes

Reset

During a lesson a station works normally, but every change is held in a memory overlay by the write filter, not written to disk. At logout the overlay is discarded and the machine is back to the golden image, so the next class sits down to a clean build in under thirty seconds with no technician and no waiting.

Imagery in production

Instant reset on logout

The write filter throws away the session at logout, so nothing a child does survives to the next class.

Multicast reimage overnight

Wake-on-LAN, PXE boot and a multicast push rebuild the whole room from one golden image in about twenty minutes.

One image, edited once

New software goes into the golden image once and reaches every seat at the next reimage, not thirty manual installs.

Signed patches, tested first

Operating system and security patches are signed and tested against your image before they roll to the room.

Rollout

Live

  1. Image workshop

    We sit with your computing staff and build the golden image: the operating system, the curriculum software, the browser policy and the directory join. You sign it off as the state the room resets to.

  2. Install day

    We rack the appliance, place and cable every station, join them to your directory and push the image over multicast, so the whole room comes up identical in one pass.

  3. Policy and alerts

    We tier the filtering to your age groups and route safeguarding alerts to your Designated Safeguarding Lead, then test both with you until the right things block and the right person is told.

  4. Handover

    Your staff learn the teacher console and how to edit the golden image, so day to day the room is yours to run and only a real fault comes back to us.

Support
3 yr On-site warranty standard
Next day Advance replacement of a station
7 yr Spares and signed images held
1 Engineer who answers, one of ours

How the room is supplied

32 Stations, imaged and joined
1 Golden image, built with you
1U Imaging and filter appliance
20 min To reimage the whole room
“A pupil managed to break their machine mid-lesson. I told them to log out and back in. Thirty seconds later it was fixed and I had not left my desk.”
ICT technician, a multi-academy trust
Compliance & resources

Proof

The room is built to the standards a school is held to, and the paperwork to prove it comes with it. Here is what it meets, and the documents that scope it before you buy.

Assessed against

Held to the standard.

What the room is built and certified to, and worked deployments a school can picture itself in. Open a card for the detail.

Standard
Imagery in production

Safeguarding and filtering

KCSIE and the DfE standards.

Keeping Children Safe in Education DfE filtering and monitoring standards Prevent duty, IWF CAIC list
Standard
Imagery in production

Safeguarding and filtering

KCSIE and the DfE standards.

Keeping Children Safe in Education DfE filtering and monitoring standards Prevent duty, IWF CAIC list

The filtering and monitoring are built to meet Keeping Children Safe in Education and the DfE filtering and monitoring standards: a school must know what is blocked, be alerted when a child tries to reach harm, and be able to evidence both. Category filtering, the Internet Watch Foundation child abuse image list and Prevent duty term monitoring are all enforced in the room, age tiered, with alerts to the Designated Safeguarding Lead and a per-pupil log for inspection. We map the configuration to your policy and hand over the evidence pack for your safeguarding file.
Standard
Imagery in production

Security and data

Hardened, and GDPR clean.

CIS Benchmark hardened image Cyber Essentials aligned UK GDPR data handling, data on site
Standard
Imagery in production

Security and data

Hardened, and GDPR clean.

CIS Benchmark hardened image Cyber Essentials aligned UK GDPR data handling, data on site

The golden image is hardened to the CIS Benchmark for the operating system and aligned to Cyber Essentials, so the room is not a soft spot on the school network. Accounts come from your directory, local admin is closed to pupils, and USB storage is off by default. Monitoring data and logs stay in the room on the appliance, under your own UK GDPR data handling, with access limited to named safeguarding staff and every view recorded. Nothing about a child is shipped to a service you cannot audit. We provide the hardening report and a data flow record for your DPIA.
Standard
Imagery in production

Electrical and environmental

Safe, quiet, and green enough.

IEC 62368 safety, EN 55032 EMC CE and UKCA marked ENERGY STAR, low-blue-light panels
Standard
Imagery in production

Electrical and environmental

Safe, quiet, and green enough.

IEC 62368 safety, EN 55032 EMC CE and UKCA marked ENERGY STAR, low-blue-light panels

The stations and displays are CE and UKCA marked, tested to IEC 62368 for electrical safety and EN 55032 for electromagnetic emissions, so a room of thirty machines does not interfere with itself or the rest of the building. The compact PCs are fanless, so a class is not run over a wall of fan noise and there is no fan to clog with dust and fail. Displays are ENERGY STAR rated with flicker-free, low-blue-light backlights for a room children work in all day. The full declarations of conformity ship with the room.
Use case
Imagery in production

Primary ICT suite

One class in, one class out.

Settingprimary school Room30 stations Rolewhole-class ICT
Use case
Imagery in production

Primary ICT suite

One class in, one class out.

Settingprimary school Room30 stations Rolewhole-class ICT

A thirty seat suite shared by every class in the school across a day. Between lessons the write filter resets each station in seconds, so a Year 6 group never inherits a Year 2 group's mess, and the tightest age tier of filtering keeps the youngest children on a small, safe web. The teacher blanks the room to teach a step, broadcasts a demonstration, and pushes the one website the lesson needs so six year olds do not have to type an address. A stuck child gets remote help from the front without the teacher leaving the desk.
Use case
Imagery in production

Exam and assessment room

A lab that doubles as a hall.

Settingsecondary school Room32 stations Roleon-screen exams
Use case
Imagery in production

Exam and assessment room

A lab that doubles as a hall.

Settingsecondary school Room32 stations Roleon-screen exams

The same room that runs computing lessons runs on-screen assessment. The teacher starts exam lockdown for the whole room from the console, the stations go full screen on the paper, and the task switcher, second screens, screenshots, the clipboard and USB storage are all blocked while the web is cut to the board's allowlist. A live count shows who is sealed in, the exam starts and ends together, and afterwards the room resets to its teaching image on logout, ready for the next lesson.
Brief
Imagery in production

Solution brief

The one-page case for the room.

2 pages For senior leadership
Brief
Imagery in production

Solution brief

The one-page case for the room.

2 pages For senior leadership

A two page summary for the people who sign off spending: the problem of a shared room that drifts, the three jobs the system does, the standards it meets and the price model, with a headline of the specification. Written for a head or a business manager, not an integrator, so a decision can be taken from it without a technical reading.
Request the files

Files

Send us your school and we will return the documents scoped to your age groups and your directory.

School computer lab datasheet Datasheet PDF, on request Filtering and monitoring evidence pack Safeguarding PDF, on request Reimaging and directory integration guide Integration PDF, on request
Specify it with us

Room

Tell us the size of the room, the software your curriculum needs and the directory you run, and we will come back with the room specified and priced. You own it outright, with no per-seat licence behind it.

Talk to engineering See all solutions