17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Custom AI for Students
I am trying to create a custom Gem (GPT) for students in my district. I want the AI to be a tool for the students; something that they can use to provide resources, get ideas, help walk them through math problems step by step, etc. while not doing work/solving problems for them. I want it to force the students to actually do the work and assist them in the learning process.
As a recent college graduate, I have seen how when students are not taught how to use AI, they allow it to do the work for them. I have friends whose college work was done almost exclusively by ChatGPT. My thought process in creating this is that by giving them an AI that will assist them rather than do the work for them, they will learn how to use it as a tool before they learn to use it as a cheat code. I also know that while students do not currently have access to AI on their school devices, they can easily use their personal devices to do access AI to do work for them. I am hoping that by allowing this AI on their school devices, I can cut down on the number of students who do this because they already have AI on their device.
The point of this post is to discuss how I can reach these goals. I already have a very basic Gem drafted, but it is going to need a lot more work before its ready for student use. What suggestions do you have? What rules can I give to the AI to help it reach its goal? Are my expectations of what I can create unrealistic in the current AI landscape? Any and all feedback is appreciated.
Godspeed my fellow sysadmins.
https://redd.it/1s806ni
@r_k12sysadmin
Blocking Github for students when Coding and Robotics teams "need" it to function
Good day my fellow k12sysadmins.
For several years we have had an organizational policy to block Github for students and staff. Only unblocking for certain IT Support and development staff members. The reasons being first that malicious actors host malicious scripts/files in Github projects so when a user for example gets hit with a Fake Captcha attack they accidentally download and run a script from a "trusted" website like github. The second reason being students also host malicious files to bypass controls and proxies and the like. Just recently a student was found to be bypassing their GoGuardian controls, in their bookmarks was a link to a Github repo that hosted a java script that disables GoGuardian. This wasn't how they were disabling the GoGuardian in this case because Github was blocked but it at least highlights why we keep it blocked in general.
That background in mind we have been approached by the Career and Technology curriculum coordinators on behalf of their robotics teams that they have a pressing need to access Github for their projects. Due to the cybersecurity concerns above its just had the can kicked down the road over and over. I am now being approached again and I am looking for solutions for them rather than hitting snooze again.
From what i see we can at least obtain an EDU license for Github Enterprise Server. We can host the server locally. Use our own LDAP to control access. Have staff members manually update or use a programmatic way to update the local repos with the live repos on Github. This seems to solve most of the issues we have and provides the students with a collaborative space to work on the projects and "learn" Github.
The issues remaining are that the Robotics teams have informed us they need the external sponsors and mentors to be able to access the projects. They also need to be able to publicly publish the code in order to comply with FIRST rules for their competitions.
So I am asking here if any k12sysadmins have come across this roadblock before. How are you handling the Github issue in your district? What work around have you been able to put into place?
I am the districts Cybersecurity Analyst so my role is to try and establish the "guard rails" and ensure we remain within our cybersecurity policies we've establish previously. The actual logistics belongs to other groups but I basically have to be able to sign off and say "yes, that works" or "Thats an acceptable risk" and so on. I cannot change policy at this time because we're in a bit of a cybersecurity leadership transition.
https://redd.it/1s4cwiy
@r_k12sysadmin
TestNav Notifications Problem
We're currently doing our pre-testing testing to find whatever fit TestNav is going to throw this year before it gets to the students, and this year it seems to be a problem with notifications. TestNav will shut the test down if it detects any program trying to become the dominant window, which notifications count as for some reason, and it will even freak out and shut the test down over its own notifications. Before you load the test it gives notifications asking for access to the camera and mic if it's the first time this user has loaded TestNav, which isn't a problem, but as you are loading into the test it will also ask for permission to find devices on the local network (no earthly idea why it needs this) and that will shut the test down. We have yet to find a way to keep this from happening.
We're running on MacBooks, on a combination of Sequoia and Tahoe, mostly Sequoia at this point. Anyone have any idea how to deal with this? Pearson support has been less than helpful, and our MDM Mosyle doesn't have any suggestions either.
https://redd.it/1s55nr4
@r_k12sysadmin
Any other Infinite Campus districts who use(d) CIC for support?
Hi,
We received an email from Infinite Campus that:
The partnership between Infinite Campus and Computer Information Concepts, Inc. (“CIC”) is ending. As a result of changes in our respective business strategies, CIC will no longer provide support to districts and schools using the Infinite Campus Student Information System (“SIS”).
This naturally leaves us with some questions. Since we don't have any answers yet, I wanted to ask if other districts in the same boat have any idea about what will happen with:
1. CIC created views. I have dozens of Tableau vizes that use CIC views like cic_v_Student or cic_v_StudentTeacher
2. CIC created Infinite Campus applications. It would be a real bummer to lose the CIC Sub Attendance Wizard, for example.
I will be attending the IC webinar next week.
Thanks!
https://redd.it/1s55pox
@r_k12sysadmin
Infinite Campus CEO talks Salesforce Breach
On this episode, we interview Charlie Kratsch, CEO of Infinite Campus, about a confirmed cyber incident involving the company’s Salesforce instance. Charlie explains how attackers used a fast, professional vishing campaign and an imposter login domain to harvest credentials and bypass MFA, and then ran targeted reports through Salesforce.
The data accessed was limited to support and customer‑directory information from the ticketing system, not the Infinite Campus student databases. Infinite Campus shut down access, audited the exports, engaged outside forensics and the FBI, and refused to engage with ransom demands.
Infinite Campus is contacting affected customers directly and completing a third‑party validation before issuing a final all‑clear.
https://k12techtalkpodcast.com/e/infinite-campus-salesforce-breach-what-k%e2%80%9112-districts-need-to-know/ and all major podcast platforms.
https://redd.it/1s4rdpn
@r_k12sysadmin
site to site vpn help
So I’m hoping somebody can maybe guide me in the right direction here
In all of my infrastructure experience, I’ve only dealt with single firewall institutions i.e. one building multiple incoming ISP’s and that’s it. My high school is expanding to another property a couple units away from us. (we’re in New York City) but we need to create a solution where the existing networking infrastructure can be utilized from the existing to the new location. My understanding is that we would have to set up a site to site VPN to accomplish this.
What do we need to utilize the same firewall at both locations? I only ask this because we currently use a firewall that’s rather expensive at our primary and would rather not have to expand the same amount for our secondary location.
As far as access rules and everything along those lines, what would I need to be looking at in terms of configuring that on the new site?
https://redd.it/1rzaqhv
@r_k12sysadmin
Infinite Campus outage
Are there any folks here that use Infinite Campus for their SIS? Yesterday our ODBC connection stopped working, killing our automation for numerous processes - with the big concern that automated attendance calls are not going to guardians.
The only feedback we've received is a request for the NAT address our ODBC connection originates from, which we sent to them within an hour of the request. Since then there has been radio silence, which seems kind of suspicious, as adding some addresses to a firewall for access shouldn't take significant time.
The only message we've received.
https://redd.it/1rz3diu
@r_k12sysadmin
Federal bills are shaping student safety
https://k12techtalkpodcast.com/e/ai-in-the-classroom-cheating-chatbots-and-the-bills-shaping-student-safety/ and all major podcast platforms
The main segment summarizes four major federal proposals affecting student safety and tech: Sammy’s Law (third‑party child safety monitoring), COPPA updates raising the age protections and ad limits, the App Store Accountability Act (age verification and parental consent), and the broad but divisive Kids Internet and Digital Safety Act.
Articles discussed this episode:
Securey shows how students are using AI
Should teens be confiding in AI for mental health?
Clever’s 2026 Cyber Secure Report
https://redd.it/1rz0pre
@r_k12sysadmin
Phishing complains targeting multiple school districts in my area
Are there any other school systems that are experiencing targeting phishing at this time? We are getting emails from districts who have compromised users and those users have forwarding rules set up to all their contacts. They are reaching us through many different districts and private schools. The trend is that they are using .EML attachments/embedded EML messages. They lack context, and typically have a subject of “action required” or “fax”. The attachment link goes to malicious websites that have potential Trojans, malicious software, and key stroke loggers. The websites steal session cookies to gain access to these accounts. While notifying these districts and talking to their IT about the users these emails are coming from, all these users have 2FA enabled and the token and session stealing is able to bypass that. If any of you have advice or experience with this type of targeted campaign, I’m all ears! It’s been quite a fiasco.
https://redd.it/1rxbu14
@r_k12sysadmin
Has anyone ever successfully extended the life of an AUE Chromebook?
A huge batch of our Chromebook fleet reach end of life soon. AUE means no more security updates, and as per IT policy, they cannot be on our network. With the AI chip craze creating shortages and the price of Chromebooks being 400-500$ it would be hard to replace them with compliant devices. I looked into chromeOS flex and Linux, but this batch uses ARM processors which complicates things. Any advice would be appreciated.
https://redd.it/1rxr6gs
@r_k12sysadmin
Dirty Gurts, browser URL bar based game links
A new filter bypass I've not seen before is code pasted into the URL bar. The Google Doc or .docx just contains this:
data:text/html;base64,PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KICAgIDx0aXRsZT5VR1MgRmlsZXM8L3RpdGxlPg0KICAgIDxzdHlsZT4NCiAgICAgICAgYm9keSB7DQogICAgICAgICAgICBmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7DQogICAgICAgICAgICBiYWNrZ3JvdW5kOiBsaW5lYXItZ3JhZGllbnQoMTM1ZGVnLCAjMmUzMjQ0IDAlLCAjMzYyMjRiIDEwMCUpOw0KICAgICAgICAgICAgbWluLWhlaWdodDogMTAwdmg7DQogICAgICAgICAgI....
Pasting this whole code generates the page and only the games themselves are linked out.
https://docs.google.com/document/d/1\_\_0Z3kq8s8Q91L5GHHDz2dAiN\_pEs7Vtk5GeXrPA1MY/edit?tab=t.0
I was only able to block it in Google Admin by blocking data://* in Blocked URLs for student user groups like file://* and javascript://*
https://redd.it/1ry9ci0
@r_k12sysadmin
Fiber Optics cleaning/test kits
Looking for recommendations on a cleaning/test kit. We do not install our own fiber, but I would like to be able to clean ends when patching closets. Would also like something that can help me with initial troubleshooting and verifying that end faces are clean. Not looking to spend a ton of money on something that won't get used often, but don't want to buy junk either.
https://redd.it/1rrw4d4
@r_k12sysadmin
Windows Device Management/Authentication Alternatives to AD
My school has two servers that handle Active Directory and Group Policy. The servers are past EOL and either need to be replaced or I need to come up with another solution for authentication. I'd rather not replace the servers as they are extremely pricy.
We are a Google school, but only on the Fundamentals plan, so device management through GCPW is out of the question - but Authentication is not.
We have an office 365 account, but only to manage our Office subscriptions. We have a 2021 volume license and when I worked with Microsoft and CDW on this, we are also paying for licenses for students/teachers to download Office onto their personal devices if they wish. I think a very basic version of AAD (Entra?) is included, but I don't know much about it.
What is recommended for someone in my position that's low to no cost?
Thanks in advance!
https://redd.it/1rpydf4
@r_k12sysadmin
Chromebook Apps
Have you heard that kids are using the riverside datacenter app to bypass blocked sites and certain KIOSK apps (only ones that use the google sign-in) to bypass filtering. I was amazed by the process a particular student that showed me how to bypass filtering (at least most of it). Have any of you experienced what I'm talking about? I can share the process for a clearer picture if needed, but let me know if you guys have a fix for this. I'm currently just blocking Riverside datacenter from use until testing day and removing some google sign-in apps from KIOSK mode so students can't bypass the filtering.
Got to love how clever students are -_-
https://redd.it/1rq5xxm
@r_k12sysadmin
Chromebook Network Troubles
Hi all. Trying to identify the issue. Having connectivity issues when specific Chromebooks load to sign in. Only commonality is they have been in one classroom. WiFi connects, testing apps have internet. If you powerwash device will provision. The sign in screen just won’t load.
Off the network, no troubles. The oddity is there are many other devices, at the same site, on the same access point that are having no troubles signing in and out. Seems down to one specific model, I’m just trying to pinpoint the change. Firewall? We run a Palo.
Any input would be appreciated.
https://redd.it/1rqyxd2
@r_k12sysadmin
Mobile parade solution
Looking for people who’ve built a mobile audio rig for a community parade to push along with 2-4 speakers , generator, and mixer .
https://redd.it/1s75ys3
@r_k12sysadmin
Has anyone turned EOL computers into a teardown workshop for kids?
I’m stepping out of the IT office for a bit and doing a laptop tear down tutorial with the older kids as a “Computer Science Lab”. Have any of you done this before? Besides going over computer safety and best practices, learning about parts and their roles, do you have any tips?
https://redd.it/1s4tsdl
@r_k12sysadmin
Ringcentral -> Telecenter U help
hey everyone.. I've been stuck few days now and done so much research my brain will explode lol.
Anyway I am trying to get our new ringcentral service to page out through Telecenter U.
current setup:
I have a user in ringcentral (main paging) ext 701
I have a grandstream manually registered to this users successfully on FXO port
I have a RJ11 bridged from FXO - FXS port
FXS port config is pointed to Telecenter U controller.
With this config I have been able to successfully call a zone in Telecenter U and here the connection over speaker for the zone but I can not for the life of me get audio to pass from phone to speaker.
things I have looked at:
codec: this is set to PCMU on both FXS and FXO port
NAT: is set to STUN on both ports
stage method: 1 & 2 both tried on FXS port
tried messing with TX & RX gains
and more...
any help would be appreciated. thanks!!!
https://redd.it/1s5fz9r
@r_k12sysadmin
Usb-c to IFP
looking for ideas and suggestions for those the group that use USB-C connections between their devices IP panels I have been having a lot of cables breaking getting damaged very easily so I’m just trying to figure out a solution. My users have laptops that they connect. There’s no in class computer that could connect HDMI/USB.
https://redd.it/1s5y0m5
@r_k12sysadmin
Infinite Campus Salesforce Breach: What K-12 Districts Need to Know
For more private, K-12-only discussions regarding vendor security and this breach, join the conversation in the **K12TechPro** Community.
K-12 technology directors received an alert on Sunday, March 22, from Infinite Campus regarding a cyber incident. In a subsequent interview on the *K12 Tech Talk* podcast, CEO Charlie Kratsch clarified that the breach was a “smash and grab” by the ShinyHunters group. The attackers targeted the company’s Salesforce ticketing system rather than core student databases. Full article here: https://k12techpro.com/infinite-campus-salesforce-breach-what-k-12-districts-need-to-know/
https://redd.it/1s52cbb
@r_k12sysadmin
Kybergate
Looking into this as a replacement for GoGuardian. Anyone familiar?
Looks to be half the price with all the features, which sometimes is too good to be true.
https://redd.it/1rz5xo3
@r_k12sysadmin
PBX Replacement + Full Paging System Replacement (Bogen) – K-12 Input Needed
**Hello,**
We’re planning a full replacement of our aging Allworx PBX **and** our existing Bogen classroom paging system in a small K–12 district (\~50–150 endpoints). Looking for real-world input before we go too far down a vendor path.
Current environment:
* Allworx VoIP PBX (on-prem)
* Desk phones in classrooms and offices
* Bogen paging system (classroom speakers + bells)
* Basic call routing (ring groups, dial plan)
* No softphones currently
What we need moving forward:
* Modern PBX (cloud, on-prem, or hybrid)
* Softphones (Windows + iOS/Android)
* Voicemail-to-email
* Strong auto-attendant (attendance line is critical)
* Simple admin (low overhead to manage)
**Paging System Replacement (Key Piece):**
We are **not keeping Bogen**. Looking at a full refresh.
Requirements:
* Classroom speakers (IP or analog via adapters)
* Zoned paging (classrooms, gym, outdoors, etc.)
* Bell schedule/tone generation
* Ability to page from:
* Phones
* Admin interface (front office)
* High reliability (must work every time, minimal delay)
Options we’re considering:
* SIP-based paging (Algo, CyberData, Valcom)
* Fully integrated systems (Informacast, AtlasIED, etc.)
* Separate paging system vs tightly integrated with PBX
Concerns:
* Paging latency over VoIP
* Complexity vs reliability tradeoff
* Managing zones and schedules
* Dependence on PBX vs standalone system
* What happens during network or PBX outages
**Questions:**
1. What PBX are you running and would you choose it again?
2. Did you replace legacy paging (Bogen/Valcom/etc.)? What did you go with?
3. Are you using SIP paging adapters/speakers, or a dedicated paging platform?
4. Did you integrate paging into the PBX or keep it separate—and why?
5. How are you handling bell schedules now?
6. Any regrets or “wish we had done this differently” lessons?
Looking specifically for K–12 deployments with classroom-level paging.
Appreciate any field-tested guidance.
https://redd.it/1rz1e4l
@r_k12sysadmin
A picture into K-12 and vibecoding
As a K-8 school sysadmin, I kind of want to get a feel for where I should be at with AI.
Not much going on here compared to a lot of ambitious people looking for clout on social media. I have not figured out how to make an income stream yet. Not sure if I want to, but I kind of feel pressure-hyped into feeling like I need to do something for side hustle.
Anyway, here is what I have been doing. So far I've built a mini ITSM with just a wishlist of stuff tailored to us and no one else.
Other things have been small utilities like monitoring tools for networks and printers. We used to read our copier company's metering utility, but it's not really tailored for our needs of monitoring inventory and supplies.
Next up is to really try tie in a dashboard that ties in with APIs to our client based security, proxy security and MDM. It always feels like I'm catching up with logging into 12 different services to figure what is on the burner.
Am I in the right ballpark? I already feel like I am behind before I asked.
https://redd.it/1rx7d0j
@r_k12sysadmin
Macbook Air Districts for Staff...are you moving to the Neo?
Hi everyone,
I know we have had plenty of posts about the Neo and if it will replace student Chromebooks, but I am curious how many are considering moving their staff that are currently on Macbook Airs to these? My staff used to get a MacBook Air and then an iPad, but we could not sustain this cost-wise, so when we refreshed to the M2 MacBook Air, they did not get to keep their iPad. Now, looking at pricing for staff, I could get a MacBook Pro (with Touch ID) and an iPad (since we don't have interactive displays, this is how they could use them more interactively) for less than the new M5 MacBook Air.
Are there any current MacBook Air districts considering this shift?
https://redd.it/1rx9e2r
@r_k12sysadmin
Spelling and Grammer Check not working on some Chromebooks
We have all different school types in their own OU as far as students go, High School, Middle and Elementary School. I got a report from elementary teacher today that some kids are bringing her work with tons of spelling and grammatical errors that aren't getting flagged by Docs. When she loads them on her PC, the are red lines everywhere. She looked on a students laptop and there were no red lines on the students screen at all. Why would spellcheck work for some OUs and not others, or certain users in one OU and not the rest? I tried a test user in the same OU and can't duplicate the issue...There are not extensions like Grammarly installed etc Thanks.
https://redd.it/1rxxsq6
@r_k12sysadmin
Raptor Technologies. Just don't
I have a newly imaged computer that was having license scanner issues. I replaced the scanner, changed USB ports and replaced USB cable. I uninstalled the software, rebooted and attempted to reinstall it. Install was "unsuccessful." I tried to contact support, hung up after 10 mins of waiting for my call to be answered. I then tried to call again and was on hold for 20 mins. No answer.
Stay away people.
https://redd.it/1rs1do5
@r_k12sysadmin
Google Workspace and eml filename attachments
Any districts using Workspace for email having luck blocking attachments based on a .eml extension being in the filename? Nothing we are doing in the Gmail Compliance->Attachment compliance seems to work without inadvertently blocking lots of other legitimate attachments.
https://redd.it/1rrufvu
@r_k12sysadmin
Move AD from windows server to intune?
Hello,
Small private school here. Staff mainly uses Windows devices, students mainly use chromebooks. We currently have a windows server handling Active Directory for the school staff. Google Admin takes care of students and CBs. Our windows server is nearing the end of life, so I am looking in to options. I feel like the server is not really needed since all it really does is AD for <50 staff members. We have microsoft education so we should have Intune with that. Unless I am just misunderstanding intune? (never messed with it before.)
Thanks.
https://redd.it/1rq1v35
@r_k12sysadmin
Chromebook Network Troubles
Hi all. Trying to identify the issue. Having connectivity issues when specific Chromebooks load to sign in. Only commonality is they have been in one classroom. WiFi connects, testing apps have internet. If you powerwash device will provision. The sign in screen just won’t load.
Off the network, no troubles. The oddity is there are many other devices, at the same site, on the same access point that are having no troubles signing in and out. Seems down to one specific model, I’m just trying to pinpoint the change. Firewall? We run a Palo.
Any input would be appreciated.
https://redd.it/1rqyxd2
@r_k12sysadmin
Open Preview no longer working in Google Docs for certain users
Hey everyone, got an interesting conundrum for you. Due to the 18+ rules around YouTube, we decided last year to switch to allowing students to only view youtube videos that are embedded, and no longer accessing he Youtube page directly. So far, it has worked well! Usually, a teacher either assigns the video in Google Classroom as a Video Assignment, or they embed the links into a Google Doc, and the students can view the video through preview.
Today, we had a studetn who, when she hovers over the link, no longer sees a thumbnail, and no longer has a way to "Open Preview". We shared the file with out test account, same issue. However, when we access it from our own accounts/devices, we can see the preview without issue.
I would guess it might be a permissions issue in GAC, but its only one user having the issue, so I am not sure.
https://redd.it/1rqzil8
@r_k12sysadmin
