A simple solution: Require individual activation through a student's .edu email address and only allow the school's license to work with their own school.edu emails.