17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Stuck sign ins with Google using Entra 3rd party IDP
Has anyone run into this issue:
On a shared device there is a user already logged in via third party IDP - user attempts to add a second account from the org, also logging in via third party IDP. The login attempt seems to fail and it logs the first user back in, possibly due to grabbing the old token?
The user has attempted to log out of account 1 and log back in via account 2 credentials, but it grabs the old token and only "successfully logs in" using account 1.
In this case it was issues with Google classroom but we had a similar issue with Canva and shared ipads with students.
Is this something that requires any specific changes on our end in GAC?
Our google environment has accounts linked to our Microsoft side via SSO with third party IDP (SAML).
https://redd.it/1nckb5m
@r_k12sysadmin
NWEA issues ?
Anyone else having MAP testing issues this morning with slow loading, etc? They are trying to blame my WiFi (shocker) while everything else is functioning well.
https://redd.it/1ncjfq0
@r_k12sysadmin
10th -en iPads and Apple Classroom
Any Apple Classroom admins out there? We started 1:1 iPad program in 5th and 6th grades this year and noticed that Apple Classroom frequently shows student iPads as offline after they've been taken home and then reconnected to the school wifi the next morning. A reboot of the student iPad, and sometimes the teacher iPad, usually fixes it. Has anyone run into this before? Having to reboot everyday is not a great experience for anyone. Our student iPads are the latest 10th-gen base model.
https://redd.it/1nchljb
@r_k12sysadmin
Lightspeed
Does anyone use Lightspeed and their Smartplay feature? We are using iPads and you can't play embedded YouTube videos in Canvas or Ed puzzle, is this the same for others.
https://redd.it/1nbz9pe
@r_k12sysadmin
Google Chat for Students
Hi all I need your guy's opinion on something,
I recently got a request from a teacher to turn on Google Chat for Students so she can make a space for her class and communicate on there faster than email for when students are out sick etc. We've had Chat turned off since Hangouts was distracting when students found out about it. How do you guys have this setup? Is Chat on for your students? Please let me know why the choice is on or off. Thank you so much! :)
https://redd.it/1nbynjg
@r_k12sysadmin
Google Meet Down?
Trying to start a meeting and Google Meet just is sitting at the loading screen. Anyone else seeing this?
https://redd.it/1nbuldx
@r_k12sysadmin
Viewsonic IFP7550-3 with ViewSonic Chromebox keeps losing video and touch
This happens with both the ViewSonic chromeboxes and Acer chromeboxes that we have. Usually this happens first thing in the morning. Plugging and unplugging and restarting the chromebox will eventually fix it. I'm getting tickets now saying it's happening in the middle of being used.
Updated to chromeOS 138 and the viewboard is up to date on firmware. I've tried new cables and can't figure out what's going on. Any thoughts?
https://redd.it/1nbp4wf
@r_k12sysadmin
Office 365 or Google Workspace or BOTH?
https://k12techtalkpodcast.com/e/episode-230-from-cruise-ships-to-chromebooks/ and all major podcast platforms
We talk about the challenges of managing both Office 365 and Google Workspace within the same school district.
https://redd.it/1n9nsd6
@r_k12sysadmin
Google account lockout?
It's surprising to me that Google still doesn't have an option for setting this in the Admin console given compliance requirements these days.
From what I can find, Google is supposed to lock an account after 6 failed login attempts, though I don't know the timeframe. We found in a recent incident that an account was still not locked after 10 unsuccessful attempt within the span of less than 2 minutes. Support case is ongoing. And yes, we have 2-SV enabled.
Has anyone found a way within Rules or elsewhere to effect this? Doesn't seem like in Rules, you can specify per-user but I may be missing something.
Appreciate any insight or suggestions.
https://redd.it/1n9kjg2
@r_k12sysadmin
Easy(ish) print server for Ricoh printers?
Our vendor didn't tell us we would need to specify during the driver installs in Windows that we would need to tell the printer it has a finisher. That was one of the dumbest things I'd ever heard. I got off the phone with Ricoh this afternoon flabbergasted. Why would that be turned off by default when the drivers are model specific?
Instead of having to meet with dozens of teachers and telling them to start over, is it possible to use a random Windows machine to host a Ricoh print server? Thank you for any guidance on this.
https://redd.it/1n9grjb
@r_k12sysadmin
GoGuardian working for Some Students but wide open for others
This is driving me absolutely bonkers.
We switched to the GoGuardian app because kids were bypassing the extension by signing out of their Google sync.
Some students have the app and it’s working great. Others haven’t been “seen online” in months and have no blocking on at all. But with the ones with the blocking off… we can see them browsing and such using GoGuardian teacher.
This is getting annoying
https://redd.it/1n9e6fc
@r_k12sysadmin
Best/least awful MFP printers
We have two largish Ricohs - an IM C6500 and IM C3500. The lease is coming up renewal here at the end of the year and I essentially hate these things. In the front office I recently put in a smaller Canon MFP using Universal Print on Windows and it really feels like that that’s the future for Windows machines. BYOD, phones, iPads, and Chromebook are a whole other bucket of pain as I have very limited ability to control that short of the VLANing and firewall rules.
So what are you folks doing? What’s your strategy? How are you managing print queues so that 85 year-old art teacher doesn’t print 9000 copies of something from a Chromebook because she has unmanaged IPP access. Who’s making a decent MFP these days? Especially as it relates to enterprise software management?
https://redd.it/1n940xa
@r_k12sysadmin
About ASM
https://preview.redd.it/4r0570z1dlff1.png?width=2564&format=png&auto=webp&s=6492bdb1dc269fc4b9372defd320af6890f9151e
Hello, we just bought new macbook for installment process. But I just install configurator and tried to installment. It works perfect it did installment with no error. After erase and start over screen. I tried to make enrollment from ASM but it is like not clickable. Do you know why or anyone who faced with like same problem.
https://preview.redd.it/u4nc51yadlff1.png?width=852&format=png&auto=webp&s=73b8307c441b5f88db8c93ccc06e671391843268
https://redd.it/1mbchf3
@r_k12sysadmin
Blocksi Confusion
Is anybody familiar with Blocksi? I'm concentrating on the OOS. the url is included as a blocked url in the default home exception list. the url falls in the Business => Web-based Applications Category.. because of google docs which is an allowed category for obvious reasons.
https://preview.redd.it/iym1y7umfbff1.png?width=1946&format=png&auto=webp&s=5dc14404cb0b7f5377266dcfe02a491977983444
https://redd.it/1ma9d9h
@r_k12sysadmin
Pre-terminated bulk fiber
Our maintenance department is trenching and laying conduit between two buildings and we’re thinking of burning pre-terminated bulk fiber to do the work ourselves, saving thousands. The fiber will be outdoor, gel filled, with flying leads.
Any issues I should be aware of before making the purchase?
https://redd.it/1m9w7b6
@r_k12sysadmin
Lenovo Chromebook Duet question
We went with the Duets as tablets for our KG class. Enrolling them, and they're giving me a low space warning. They're supposed to be 64GB, but the internal storage is 3-5 GB, and they aren't registering any external storage. Any ideas?
https://redd.it/1ncke4z
@r_k12sysadmin
TX HB3512
Just wondering if anyone has any insight on this HB. Here is the important part within the first section 1. This HB came into effect 1SEP2025.
"Notwithstanding Section 2054.5191, Government Code,
only the district's cybersecurity coordinator is required to
complete the cybersecurity training and the artificial
intelligence training under that section on an annual basis."
What and who are yall using for the trainings?
https://redd.it/1ncircd
@r_k12sysadmin
Autodesk NLM file
Our AutoCAD and Revit licensing is handled by Network License Management (NLM.) The license expired recently, so I reviewed it. But now I can't figure out how to download the file from the Autodesk website in order to load it into NLM. Autodesk's tech support is worse than useless, because all they do is make me wait and then send links to articles I've already read and that don't answer the question I asked them.
Do any of you know how to download the new license file?
https://redd.it/1ncf52d
@r_k12sysadmin
Iboss gen2
Anyone else using iboss gen2 connector on Chromebooks? I feel like I’m constantly fighting with performance issues just curious how it’s going for others.
https://redd.it/1nbzqtk
@r_k12sysadmin
Gemini side panel not included with Education licensing
We have Gemini enabled for all Faculty and Staff. However, the Gemini icon does not appear in any of the Google Workspace apps including Gmail, Docs, Sheets, etc. The Gemini app does appear in the apps grid though.
I just reached out to Google Support and was told that the Gemini side-panel, or add-on, in the workspace apps is not included for education customers.
This doesn't sound right. Can anyone confirm?
https://redd.it/1nbvvc1
@r_k12sysadmin
WiFi Network Setup
We recently replaced our old Ruckus equipment with Aruba.
Current SSIDs
IoT - WPA2 PSK - Used for thermostats, printers, misc other non-web browsing devices.
BYOD - RADIUS Auth based on AD credentials, filtering to specific VLANS based on user group membership - personal cell phones mostly. RADIUS auth is handled by a local MS NPS server.
Guest - Captive Portal
Private - WPA2 PSK - Promethean boards, district Chromebooks, district laprops
Our password for the Private network has leaked, I suspect due to the fact that the Prometheans will show the password in clear text via the network menu. This is not necessarily a huge filtering issue, as the devices still get filtered under a student profile if they cannot be identified. It is however, quite a security issue. I've noticed that during after hour events, I see over 200 cell phones attached to the Private network and I suspect a large number of them are neither student nor staff devices, but visitors who the password has been shared with. What is the best course of action to keep these unknown devices off of the Private network?
https://redd.it/1nboiko
@r_k12sysadmin
Raptor
Anyone that uses Raptor: is it just plain slow to scan IDs and print name labels? I’ve worked with their support multiple times and it’s always “it’s your network. It’s your computer. Reinstall it.” No real results. I’ve tried multiple machines, different Internet connections. Nothing seems to make a difference. It just seems like it takes a long time for the website to read the IDs and even longer for it to send the label to the printer.
https://redd.it/1nbkurj
@r_k12sysadmin
Security Watch 9/5/25
On K12TechPro, we've launched a weekly cyber threat intelligence and vulnerability newsletter with NTP and K12TechPro. We'll post the "public" news to k12sysadmin from each newsletter. For the full "k12 techs only" portion (no middle schoolers, bad guys, vendors, etc. allowed), log into k12techpro.com and visit the Cybersecurity Hub.
Google has moved to reduce risks associated with sideloading on Android devices. Security experts welcome the change, but critics argue it gives Google excessive control and could restrict innovation. This tension reflects the broader challenge of striking a balance between user freedom and systemic protection.
A recent WhatsApp flaw allowed remote code execution through maliciously crafted messages, requiring no user interaction. Such zero-click vulnerabilities are particularly dangerous because they bypass everyday cautionary practices, underscoring the need for constant vigilance, even with trusted applications.
Reports falsely claimed that Google had forced all Gmail users to reset their passwords after a massive breach. Attackers capitalized on the confusion email campaigns impersonating Google support. Though Gmail’s protections remain strong, the incident shows how fear and uncertainty can be manipulated just as effectively as software vulnerabilities.
https://redd.it/1n9mbfq
@r_k12sysadmin
GoGuardian Extension removed Windows + Chrome management
Hey All,
We have windows 10 devices running the latest version of the chrome browser.
Recently we had a user show up with all of their chrome policy force installed extensions missing. We actually don't even use a windows GPO to push the policy, just google admin console pushed to the users. How easy it would be to remove these extensions and also why aren't they just re-added after resetting chrome.
My other question is whether or not this could happen any way other than purposeful manipulation. The policy is applied by OU, the student is in the right OU - when they log on to a different device all the extensions are there.
Thanks for any help!
https://redd.it/1n9ca24
@r_k12sysadmin
Bark Preventing Pages Loading
Anyone seeing trouble with the Bark web filter extension? Today we have some students who can't load any pages if Bark is enabled. As soon as I block the extension for the user their browser starts functioning normally. I have a tech opening a support ticket, but figured I'd see if anyone else is having this problem.
https://redd.it/1n9ecm6
@r_k12sysadmin
Network refresh cycle
How often do you replace your network hardware (firewall, switches, APs)?
https://redd.it/1n9bxp8
@r_k12sysadmin
SchoolDude - down for anyone else?
Unable to access anything in SchoolDude today. We *are* planning a migration to another system, and were trying to cancel but SchoolDude was fighting us so we planned to just let the current contract run out. I'm unsure if it's just us or if they finally let us cancel. The website "schooldude.com" appears down as well.
https://redd.it/1n93uwi
@r_k12sysadmin
Enrolling ChromeOS Devices
We have students in our HS bring their own Chrome devices to school and then IT enrolls the devices in our domain. We have an open SSID during orientation that allows students to get connected, and then once they are in right OU, they get forced onto the password-locked Student SSID and we disable the open SSID at the end of day.
I'm wondering if anybody gives their students the ability to enroll their own devices, in order to speed up the enrollment process and to reduce the amount of work on the IT department.
https://support.google.com/chrome/a/answer/1360534?hl=en&ref\_topic=9028498&sjid=2380176104163902993-NA
https://redd.it/1maa79n
@r_k12sysadmin
DVD player for interactive flat panels?
Does anyone have any recommendations for playing DVDs on IFPs? We are moving to these and will need a solution. I thought any trying out USB DVD players and using an app or slot loading stand alone DVD players.
https://redd.it/1ma425t
@r_k12sysadmin
Switching to JitBit as my help desk ticketing system
I researched 34 different help desk tools over several months and in the end, JitBit (https://www.jitbit.com/) was the best option for me. There's not a lot of content on YouTube about JitBit so I decided to make my own review and demo of it. I hope this is helpful to someone as they make their own decisions about choosing a help desk system.
https://www.youtube.com/watch?v=-wLlkSXKsgw
Here's my rough notes I used for the video.
What I like:
1. Help Desk Software built for email and IT people
2. Impressive list of companies that they claim use their product.
3. Straight forward website, trial setup was easy.
4. A help desk that seems focused on the basics and not distracted by adding unnecessary and complicated features.
5. Clean and easy to use user interface.
6. We can create different categories for tickets. For example, Technology and Facilities can have their own categories to keep things separate.
7. JitBit works really well with email. The email parser is very good at adding the reply to the thread of comments in the portal. It is also very good at sending a list of previous comments included in each new email. So users can look in their email to see the context.
8. Has a Knowledge Base feature.
9. Has an asset feature.
10. Has a customer portal so users can see all their tickets.
11. Easy to use for agents. They can quickly reply to users and easily change ticket settings.
12. Agents can leave private notes on tickets.
13. The way it handles forwarded emails is really good.
14. We can have separate support emails for separate ticket categories.
15. There is an interesting option to allow users to see all other tickets within a department.
16. Microsoft Integration - SSO Login, User creation
17. MFA support
18. Live Chat option for our website
19. In product tutorial is excellent. Simple and to the point.
20. ChatGPT support.
21. Pricing is good. $1300 per year for7 agents.
22. Cool option to take screenshot or even record video right from help desk.
23. Integration options.
Things that could be better.
1. Website is a little sparse. Could use some more tabs at the top.
2. Could use more video demos, such as on YouTube.
3. Could have more social media presence to show they are actually working on the product.
4. Could have a contact sales or ask for a demo option on their website.
5. I hope they continue to develop the product, specifically AI related features.
6. There doesn't appear to be any SMS support.
7. The mobile apps don't work very well.
Alternative
The second-place tool was BoldDesk (https://www.bolddesk.com/), which has non-profit, 10 agent plan for free.
https://redd.it/1m9s4cp
@r_k12sysadmin