Protocols and practices are ostensibly objective. The same rules apply to all users and, especially those that are controlled by technology are applied with precision. The reality in schools, however, is that not all users have similar capabilities and some protocols and practices appropriate for one group of users may not be appropriate for others. While we may allow simple passwords for primary students and encourage their teachers to know them to help logging on, no IT professional will allow high school students to have simple passwords and to encourage their teachers to know those passwords. When considering the potential that IT professionals may be unfamiliar with the nature of school IT users, it is often best to convene groups of IT professionals and educators to ensure protocols and practices maintain security while ensuring availability to all users.