17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Backup Google Workspace Admin Console
We are looking to back up accounts and shared drives on Google Workspace.
I see a few options. We prefer to have a local copy.
\- Synology has Active Backup (local)
https://kb.synology.com/en-us/DSM/help/ActiveBackup-GSuite/activebackup\_gsuite?version=7
\- Backblaze (local to Truenas and up to cloud)
https://www.backblaze.com/docs/cloud-storage-integrate-cubebackup-with-backblaze-b2
\- Veeam isn't offering a solution :-(
What are you using? Do you like it?
\-
https://redd.it/1k65wtj
@r_k12sysadmin
Unblocking Chromebook Settings
Looking for some reassurance I haven't lost my mind.
In Google Admin I blocked students from being able to access the OS Settings on their Chromebooks. I have new students who require a foreign language setup on their Chromes. So I go into Google Admin using the steps below to reverse the lockout but its still showing as locked on the Chromebooks even after waiting an hour. I've made sure to check the appropriate OU, logged out, reboot and sign back in, but no change. Am I missing something?
Sign in to Google Admin admin.google.com
Select Devices
Select Chrome Devices
Under the word Admin at the top left of your screen, select the drop-down box and select 'Settings'
On the left side of the screen select the OU that contains all of your student accounts
Press 'CTRL' & 'F'
Type 'Disabled System Features' It will be the second result found
Select 'OS Settings' & 'Browser Settings'
Select 'Save' at the top right of the screen
https://redd.it/1k65mig
@r_k12sysadmin
Scan to Email no longer working with Gmail. Help!
Greetings,
Yesterday when I came into the ofice, all of our Kyocera Printers now no longer can scan to email. We use Gmail, and no changes have been made in our Google Tenant. I was hoping that somehow, maybe it was somehow a Google issue and would resolve itself, but this morning the issue is still there. I have no idea what the problem is, as all the SMTP settings are correct and have not changed, and I can get into the account with the credentials we have always used. Did Google change something? Have they made some change for security purposes that has broken our Scan to Email?
Any help would be greatly appreciated!
https://redd.it/1k5z0bw
@r_k12sysadmin
Defender for Cloud - Google Workspace
Hi everyone. We are looking to purchase Google Education Standard licenses for our three Google Workspace domains to use the enhanced security features. I am also looking into using Microsoft Defender for Cloud to provide the same security for Google Workspace since we already have the licensing and won’t need to pay extra money.
Is anyone using Defender for Cloud to manage the security of their Google Workspace? If so, how is it working? Does it provide DLP, threat prevention, phishing remediation, etc? Would there be a reason to use Google Security Command Center (Education Standard) over Defender?
Thank you!
https://redd.it/1k5e9r6
@r_k12sysadmin
Summer work
I am looking to see what kinds of things you have on your summer list as directors/coordinators.
I have finally dug myself out of playing catchup every year and I'm looking to get to a more proactive position.
I also generally have a technician to unpack/enroll chromebooks, image windows devices, and other low level stuff, but we are now efficient enough that there's not always enough for both of us, and they're not enthusiastic on maintaining the position over the summer. But there is too much for only one person to do. Especially in the summer.
I am looking for legitimate ideas to both become more proactive and justify the labor.
Show me what you got!
Thanks
https://redd.it/1k5d4ou
@r_k12sysadmin
Device we received today "I dropped it off of my roof"
https://preview.redd.it/3aq0h3rsffwe1.png?width=630&format=png&auto=webp&s=e5a997040a1f44655fd2f6e0197e11908b93c7b9
https://redd.it/1k5d6pc
@r_k12sysadmin
Google Context-Aware Access for Chrome OS devices
Hello K12 Team,
I am currently working to configure context- Aware Access( CAA) to restrict access to a application to only school issued devices.
This is the current policy that I applied :
https://preview.redd.it/k948qyl43ewe1.png?width=1147&format=png&auto=webp&s=a57a465821e4d1eb7256527f217b16a418186679
While configuring the policies, I noticed a couple of issues and wanted to ask for your input:
1. ChromeOS Devices Not Appearing Under Mobile & Endpoints:
In the Admin Console, under Devices > ChromeOS, I can see our full list of managed Chromebooks.
However, these devices do not appear under Devices > Mobile & Endpoints.
This makes it unclear whether CAA policies or device-based access restrictions will work as expected across services.
2. Verification Concerns:
I'm using the "Device OS = ChromeOS" and "Verified ChromeOS = Required" condition.
I want to confirm if all our managed Chromebooks are properly verified from Google's perspective and if there's a way to validate this.
3. Licensing Clarity:
We are using Google Workspace for Education Fundamentals, and based on my research, it seems to support CAA.
I’d appreciate confirmation on whether our current licensing allows full use of CAA features, especially in terms of device-based restrictions.
Ultimately, I’m trying to ensure that:
Only school-managed Chromebooks have access to that app and dont allow if they access from other devices.
Would love some guidance or confirmation that I’m approaching this correctly — and if there’s a known way to get those ChromeOS devices to appear under the Mobile & Endpoints section (or if that’s even necessary for CAA enforcement).
Thanks in advance!
https://redd.it/1k56iq6
@r_k12sysadmin
Locking Chromebook cases?
We see a lot of screen damage that's caused by kids removing the cases to slip in references to whatever the current meme is, even though this is against policy (I know, right?)
Does anyone know of any cases we can "lock" in place? We have mostly Lenovo 300e Gen 4s.
https://redd.it/1k4n4v0
@r_k12sysadmin
IFP info from Our Demo of 3 Mimio Pro G Clear touch and V7 IFP8603-V7PROM
So we are doing a demo of IFPs to decide on one as it looks like we are going to start moving this way slowly. I always see questions about IFPs so figured I could add to the discussion.
We have 3 different models in the title. I don't know the exact Clear touch model but will add it when I get it. I will add to this as I play with them more as well.
So the first thing I want to touch on is they are all almost exactly the same. From the bezels to the software. The mimio is the only one slightly different from the three. It has a web cam in the bezel but on the negative side it didn't come with the Wi-Fi module. Where the V7 did not sure about the cleartouch as it was an actual demo unit and already had installed. I haven't had alot of time to play with them yet but they all feel and respond the same.
So that being said unless you need a specific piece of software that is baked into one of the brands it comes down to price. The V7 is significantly cheaper. We got the 86" for 2350 ended up 2500 shipped from Comp source. that is still several hundred cheaper then the 75" of the other two brands. Both of the other 2 were around 2700 for the 75"
If anyone has anything else to add about these models or any other models feel free. This can just be an open discussion about all things IFP
https://redd.it/1k2bb75
@r_k12sysadmin
GoGuardian banning Google search results based off first results
Had some weird reports over the last day of students not being able to see Google search results sporadically, so I got on my test student account and tried googling "what is the powerhouse of the cell?".
Was met with a GoGuardian block page. Weird, no reason Google should be blocked. Go to check in GoGuardian what the activated policy was and there's no entry for a Google search, but there is for a Reddit post titled "What is so funny in "Mitochondria is the powerhouse of the cell" joke?"
So I try it on my desktop, and I notice the first result when googling that question IS the Reddit link. That Reddit link isn't included in the AI overview, it's literally just the first result.
I message GoGuardian's support and they already know what's going on, apparently there's been a change with how Google handles "network prediction" in order to load pages faster when searching. This can lead to a blocked page getting included in that, which then triggers the GoGuardian block of the whole search result.
The tech I talked to linked me a support article on their site titled "Google Searches Blocked Unexpectedly" that includes all the info on this if you want to read it yourself.
Any other content filters running into this? We have Linewise running concurrently (don't ask) and it doesn't appear to be affected by the change in Google.
https://redd.it/1k2923i
@r_k12sysadmin
Navigating Tariffs and Special Tech Requests
https://k12techtalkpodcast.com/e/navigating-tech-tariffs-in-k-12-education/
In this episode, we dive into the current issues surrounding technology tariffs and their impact on K-12 education.
A segment is dedicated to addressing the complex topic of managing individual teacher requests for technology upgrades or changes. We share strategies for handling these situations at a district level while balancing the needs of staff and budgetary constraints.
Additionally, the episode features a discussion about a significant lawsuit against Google, where parents accuse the tech giant of tracking students.
https://redd.it/1k25yyr
@r_k12sysadmin
Seamless Remote Access VDI
Hello Everyone,
I am the original author of this guide from around 5 years ago teaching you how to setup VDI during COVID times. Now, a lot of things have changed, improved, making the previous guide ultimately obsolete.
I hate seeing people spend time, and especially money on something that is unnecessary (VMWare, Citrix, any other expensive VDI solution). So that is what this new guide is for.
The changes in this new guide:
More clear and detailed.
Handles more edge cases.
Scales easier.
Covers maintenance.
Easier setup overall.
And much more.
Feel free to use this guide and give me any feedback that you have. I also have it in a public GitHub repo incase you want to contribute to it here.
https://redd.it/1k1m52n
@r_k12sysadmin
end user...lol
https://preview.redd.it/kivfml6xmfve1.png?width=526&format=png&auto=webp&s=27f85ee958ee675049b7ad5b3d5e3d53922955f4
https://redd.it/1k1ixpr
@r_k12sysadmin
MS 365 Admin Center Insight Message (Websocket Connection)
https://redd.it/1k1c765
@r_k12sysadmin
PA Upgrades
Currently we have Bogen Multicom 2000’s across our environment. I’m looking to replace the headends,amps..etc, clean up cabling, and reuse the existing analog speakers. We only have two zones, and only care about unidirectional communication.
Whatever headend/amps I rip and replace with ideally will have native SIP support. As a result, bells will be handled by another application.
Has anyone done a similar upgrade while reusing existing analog speakers? If so - any recommendations on headends/amps? I know it’s contingent on the type and amount of speakers/zones per site, but I figure I’d seek recommended options.
Would love to chat with someone who’s gone through a similar process, and did it “in-house”.
https://redd.it/1k1bgot
@r_k12sysadmin
School ERP Pro (Nee Infinite Visions) - EmployeeID
Has anyone changed the EmployeeID value (*NOT* the UserEmployeeID) Value for everyone that is active within a connection group?
We have reasons to change it, and based on small scale testing we aren't seeing any problems.
Are there any horror stories, or edge cases which are impacted by this change. Tyler made it sound like this was the worst idea ever....
https://redd.it/1k675le
@r_k12sysadmin
freshdesk ending free option. Switch to alternative or try to convince admin to pay?
I am bit bummed to learn that freshdesk changed their policy and as of June 21st I will lose access to it unless we pay for it. I did my research and it took effort to setup. It is a very busy time for me to switch to something new, but I was proud to have found something free to save my school money, since I am already asking for extra this year due to refreshes.
Any advice?
https://redd.it/1k64p9e
@r_k12sysadmin
Linux Lab Virtualization
My AP Computer teacher bought a few laptops so students can practice loading Linux, cybersecurity, virtualization etc. I was thinking of imaging the laptops with Windows 11 and adding a local account on them for students to use.
I was then thinking of loading Virtual Box so they could load Linux as much as they want.
Would anyone have some ideas of how best to set all of this up?
Any best ideas on what we can do etc?
Thanks!
Scott
https://redd.it/1k5cwjs
@r_k12sysadmin
Google Workspace Fundamentals License with Teaching and Learning Upgrade Question
Hi everyone. A few people in our admissions department want gmails native mail merge feature. We have the fundamentals plan and do not want to upgrade the entire org to education standard or plus. But the mail merge feature is only available in standard or plus. I spoke with a Google sales engineer confirmed that we can’t get just four of the standard license. But it was mentioned that if I pay for a Teaching and Learning add on, it will give me the same feature set as education plus, including mail merge.
Does anyone have experience with this? I bought one add-on for myself as a test. And so far, I don’t see the mail merge button in my Gmail compose window. I can confirm that I have the license though.
https://redd.it/1k5fs8c
@r_k12sysadmin
Better network minds have advice on getting my school to a better SSID configuration?
'm the IT admin at a charter school dealing with a messy WiFi setup. Looking for advice from those who've done similar restructuring.
**Current situation:**
* One SSID with 8+ user groups (Staff, Student, Facilities, Lab, VoIP, Video, etc.)
* Different passwords route users to different VLANs
* Staff password widely known/unchanged in years (that I know off, I've been here since last Oct)
* Staff using personal devices on staff network (biggest security concern)
* New computers arriving soon for device refresh
**My concerns:**
* Too many unnecessary WiFi groups (seems like someone made a group for every VLAN)
* Security issues with shared passwords
* Don't want to configure new computers with settings I'll change later
* Worried about "breaking things" during transition
**My plan:**
* Simplify to three networks: Staff (school devices only), Student, and Guest/BYOD
* Create a new SSID structure alongside existing one for gradual migration
**Questions:**
1. Has anyone successfully migrated from a password-based to 802.1X system?
2. What's the best way to run both systems in parallel during transition?
3. Any recommended tools or approaches for a smooth migration?
4. Timeline tips? (Summer break is \~1 month away)
I want the staff password completely private and every school issued computer to only have the connection. So I am trying to figure out my options for that.
Any advice on how to give all staff devices access to the staff wifi without giving out the password. And also how best to do this transition. Could creating the other SSID and moving everyone over be the best solution?
https://redd.it/1k5cu9c
@r_k12sysadmin
Rolling back 1:1
Anyone seeing/experiencing a pushback on 'true' 1:1 (everyone takes home a device every night)? We (rural K-12, \~1,000 students) are starting to discuss what it would look like in the district to pull back and really consider the 'why' of what we are doing with devices. We have already stopped sending home devices in K-7, but we may actually start rolling toward classroom sets even up through 10th in the coming years. Much of the drive from admin is from the standpoint of 'Are we really using these for a reason?' or are they glorified babysitters? Just curious to see where everyone is on the subject in 2025....
https://redd.it/1k5827k
@r_k12sysadmin
Chrome Kiosk Print
I'm trying to setup a Chromebook to work as a kiosk for users to click in/out. I have everything setup but print does not work, I get an error Print is blocked. I'm sure I'm missing something but I have researched and Googled this but nothing has helped.
I have all settings that I could find set to allow printing in Gsuite for that OU.
https://redd.it/1k4o533
@r_k12sysadmin
Social Media Admin Management?
Hey there all, I'm working with our interim Social Media manager to revamp Social Media access and rebalance the load so that it's off of people who are already overworked.
The current issue is that access to the social media platforms is connected to personal accounts, including the SuperAdmin for our Facebook account. If someone leaves, then we're a bit SOL and will have to either start from scratch, or rely on that person to reassign someone else.
My main idea was to use the shared emails in order to create accounts for specific people to sign into, and from there connect it to the Facebook Business account as the Managers. However, in creating the account, it immediately got suspended before we even had a chance to add it to the school's Facebook. I don't really want it to be that people create accounts using their work emails and the like, but I was curious how other school districts do it? 'Cause we have specific emails that are like [campus acronym\]@[domain.org\] and those would be easy enough for us to manage access, then from there the schools can have at it.
And I know it's best practice to keep IT and Social Media separate, but my district has <1000 students and each of us are wearing a lot of hats (especially IT *cries*), and setting it up for the schools to take over will lighten the load of a lot of us.
https://redd.it/1k4kkhl
@r_k12sysadmin
Acer Chromebook Spin 513 Shorting out
Are any of you seeing issues with Chromebooks shorting out?
I have a classroom that has gone through 5 Acer Chromes this year alone. I replaced the Chromecart with one that I put in all new (UL listed) chargers.
https://redd.it/1k2a56k
@r_k12sysadmin
Security Watch 4/18/25
On K12TechPro, we've launched a weekly cyber threat intelligence and vulnerability newsletter with NTP and K12TechPro. We'll post the "public" news to k12sysadmin from each newsletter. For the full "k12 techs only" portion (no middle schoolers, bad guys, vendors, etc. allowed), log into k12techpro.com and visit the Cybersecurity Hub.
SSL/TLS Lifespan Cut Proposed
Starting in 2029, SSL/TLS certificates may be limited to just 47 days—down from 398. This push for better security means automation tools like ACME will become essential for certificate management.
Smarter Phishing on the Rise
“Precision-Validated Phishing” is making traditional defenses less effective. These attacks confirm the validity of email addresses before launching, bypassing automated detection tools and targeting users more effectively.
An Odd Ransomware Case
NTP recently handled a unique incident involving amateur attackers using AI and 7-Zip instead of traditional ransomware. The attack was neutralized, but it highlights a growing trend of less-skilled actors targeting smaller organizations. See full newsletter for details.
CVE-2025-29824: SYSTEM-Level Exploit
A new Windows vulnerability allows attackers to gain SYSTEM privileges. Patched as of April 2025 (OS Build 26100.3775), this flaw emphasizes the need for regular updates, strong monitoring, and endpoint protection.
https://redd.it/1k25ww6
@r_k12sysadmin
Chromebook or Windows?
This came up in a meeting today. My point was that most schools are on Chromebooks. I was told that many are on Windows, which didn't sound correct.
Please vote for what your school uses for students.
View Poll
https://redd.it/1k1jnvg
@r_k12sysadmin
3D Scanning & AR/VR - Any Experiences, Recommendations
I'm helping set up an EdTech lab and we're looking at hearing what other schools are doing as far as AR/VR and 3D scanning. Anyone seeing these get use in their environments? Any thoughts on what works, or what to avoid?
https://redd.it/1k1kzgm
@r_k12sysadmin
Is anyone using Google's Cloud Certificate Connector to distribute SCEP profiles for 802.1x networks to Chromebooks?
I've looked over this documentation and the setup seems pretty straightforward (assuming our windows team has the NDES/SCEP stuff set up in ADCS).
We are using a service account to get chromebooks on our Enterprise network that of course got leaked to some crafty students and now they are able to get on our Staff BYOD network. SCEP certs seem like a good way to go, but does anyone have any experience is this setup?
Thoughts, feelings, insights etc? It seems like one of those things that if something goes sideways with a cert, all of your chromebooks now can't get on the enterprise network. Also does the cert have to be renewed once everything is in place?
https://redd.it/1k1gtlh
@r_k12sysadmin
Cybersecurity: The Greatest Threat Schools Aren’t Ready For
https://www.gse.harvard.edu/ideas/edcast/25/04/cybersecurity-greatest-threat-schools-arent-ready?utm_source=SilverpopMailing&utm_medium=email&utm_campaign=Daily%20Gazette%2020250417%20(1)
https://redd.it/1k1cego
@r_k12sysadmin
What is ForAudio
Over the past couple of weeks, we’ve been having issues with pages not loading or freezing on Chromebooks on our student WIFI network. I’ve gone down multiple rabbit holes trying to troubleshoot it.
Today, I logged into our Palo Alto firewall and reviewed the blocked traffic from one of the student WiFi networks. To my surprise, I found hundreds of blocked sessions labeled with the application "ForAudio," all going to Google IP ranges. I searched online and on Reddit but couldn’t find much information about it.
What’s really strange is that I had a ticket today from a student who couldn’t access a local community college’s website. When I checked the Palo Alto logs, the connection attempt was using the "ForAudio" application and was being blocked. I created a rule to allow "ForAudio," and just like that, the site loaded immediately.
So far, we’re only seeing this behavior on Chromebooks. Has anyone else come across this or figured out what "ForAudio" actually is and how it ties into Google?
https://preview.redd.it/l6odonl3yave1.png?width=2302&format=png&auto=webp&s=e7d42de03d1a2880aed7728f94c340676017956d
https://redd.it/1k11p84
@r_k12sysadmin
