17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Running Cables Through the Wall for IFPs
I am about to have a major wiring upgrade done at my school for ethernet (we moved into a building with no ethernet, and I am having over 100 drops put in) and at the same time I want to run HDMI and USB through the walls from the teacher's desk to the Prometheans we have in each classroom. Running HDMI over fiber through the walls is clear to me. We can definitely do that without issue, and even have HDMI wall plates at each location. But what is unclear to me is the USB piece. The Prometheans require a USB connection to enable touch capability.
If you have done this in your school, how did you do it?
https://redd.it/1tkmoub
@r_k12sysadmin
Phishing attempt beat our 2FA
Just wanted to share a situation we just had. We had 76 staff members who were shared a document from a user at a school in Tennessee, Wild, that was the first hack. It had our superintendent’s name on it talking about a payroll update. We had a user click the link in that doc that took them to a Google login window. The user couldn’t get logged in of course but at that point their password was stolen. Now the 2FA. The user assumes they will get a 2FA message now. And of course they did. But it wasn’t them. They clicked yes on allowing from their Google app.
Obviously the most secure for them would be yubikeys or passkeys. We haven’t gone that direction yet. But I know that sms messages is frowned upon due to lack of security. However in this case I’m not sure the user would have been duped to somehow give up the code because they would have never got the code or known who to give it to.
Careful out there everyone.
https://redd.it/1tk58aa
@r_k12sysadmin
Is anybody using AIPhone for door entry? Need tablet app help...
We have AIPhone for our sites, and one of the needs is for our SACC programs to use tablets to verify and unlock the door for parent pickups. The AIPhone app has been absolutely horrible- laggy, drops connection, etc., to the point that we switched over to Cisco Jabber to receive the calls. That's been a great solution, but due to an aging system and costs, we're switching over to GoTo for VOIP.
We've been told that GoTo Connect does not do video calling, but some research I've done disputes that (but it's mostly the AI summaries). Our door stations are SIP compliant, which ~~should~~ work with GoTo. I really, really, really do not want to revert back to using the AIPhone app and have the same headaches that made us switch to Jabber.
AIPhone support has been okay, but they always want to try to blame it on the network instead of their app. Does anybody have a solution that works outside of Cisco VOIP, or have experience with GoTo and video call boxes?
TIA
https://redd.it/1tjusv5
@r_k12sysadmin
Music Streaming - The Spotify Equivalent for Students?
We have 1:1 devices (iPads) and are looking for what the Spotify equivalent is for schools? It's always an ask.
We look the other way for Spotify on the web for now. We don't allow the app to be pushed to end devices for a lot of reasons.
Have you done anything in your district for this? Anything that lets you deploy to students where they don't have to share an account and mess up each others' playlists, etc? A few options out their for parents but not schools yet.
https://redd.it/1tjuy82
@r_k12sysadmin
Help with a Proposal - Get 2 people for summer help
Greetings!
This is the first time I've ever had to create/write a proposal to have 2 summer helpers this year. As you can guess, I'm very new to writing proposals to the CFO to get approved. I was hoping you could help me out. I've listed a few topics that I'll be writing in my proposal and was hoping you can help me add to it just in case I forgot about something important. Bonus points ff you have a template I could use.
Here are the topics I currently have and will begin creating. If I miss anything or you think I should add anything please let me know. I really appreciate any help I can get on this. Please keep in mind the topics below I'll be explaining in depth. The topics listed just helps me with the layout of the proposal.
1. Layout of the work and what day the summer helpers will start
2. Hourly wage will be $ an hour
3. How many hours the summer helpers are willing to work and what we’re looking for hour wise
4. What days will they be working such as Monday-Friday or Monday-Wednesday, etc.
5. How will this benefit the tech’s time and what would tech work on
6. How will checking in with the summer help work to make sure it's of quality work and their not slacking
7. What are the tasks the summer help would be working on
8. If Techs go on vacation, will that hinder the summer help/position
9. Proposal will have to go through an internal process at "School" where we’ll do interviews for the positions
10. Create the job application for internal users to apply that will insist of the following:
1. Job responsibilities
2. Hours to be worked
3. What days would you be working
4. Experience will intune process
5. Experience with the Chromebook interface
11. Will the summer helpers have the same schedule as each other or will they be independent of each other
https://redd.it/1tjsjo7
@r_k12sysadmin
Student Bypassing Schoology Lockdown Browser?
Have a teacher that suspects some students are bypassing the Schoology Lockdown browser and using some kind of AI program. Has anyone heard anything similar to this?
Students are using Chromebooks with Chrome OS 144 long-term support.
https://redd.it/1tjmty6
@r_k12sysadmin
Filling the Gap on Chromebook Filtering
I've posted this extension on here before, but it's evolved quite a bit since then and I thought it might be worth mentioning here again for those who haven't seen it.
It allows you to use RegEx patterns in the Google Workspace policy to do things like
* Block use of all Chrome:// URLs you do not explicitly allow them to access.
* Close pages such as about:blank immediately, UNLESS they are opened by a site you explicitly allow. These protected sites aren't managed by filtering vendors and classroom management tools can't see them.
* Purge and prevent the saving of JavaScript bookmarklets. Which allow students to execute JavaScript on pages without the use of developer tools or inspection mode.
* Prevent the use of offline html-family files for things like eagle craft without blocking other local files or access to the camera.
* Prevent use of base64 encoded sites to load WASM applications into a tab.
I know SOME of these are covered by various classroom management / filtering vendors, but I don't know of any that get them all,. It's also just really not convenient for people to switch vendors because they're tired of complaints from teachers about how they can't see when the students are playing games in the middle of class.
Everything is controlled by the RegEx from your installation policy in Google Workspace. A default template for getting started is posted on the store page.
Feel free to DM me if you have questions.
[https://chromewebstore.google.com/detail/regex-tab-manager/icohaaiapabbaoohdadjmfccppedkkfm](https://chromewebstore.google.com/detail/regex-tab-manager/icohaaiapabbaoohdadjmfccppedkkfm)
https://redd.it/1tjjqqv
@r_k12sysadmin
Schools out!
Well, school is out for the summer. I survived another year of constant complaints from administration, teachers, and staff—not to mention endless chromebook repairs and internet outages. (Of course, none of it caused by me.)
welcome to summer!
https://redd.it/1tj0zzq
@r_k12sysadmin
To go home or not to go home, Chromebooks
Good day all! I am finishing up provisioning a load of Chromebooks that were originally purchased to stay at the school and just used by students each day. I set the wifi policy accordingly to prevent students from using their hotspots and other networks. Now, I am faced with an executive decision to go 1 for 1 and allow them to go home. I am worried that if I remove the network policy, we will be regressing back into the same issues we have had before with BYOD. The students abuse everything and used their hotspots and vpn's a lot to get around our filters and such.
I am just curious if I am being too paranoid. Do you all open up the network policy for 1 to 1 devices? Should I protest against allowing them to go home? Just need some outside recommendations. Thanks!
https://redd.it/1tipvz7
@r_k12sysadmin
Thoughts on cost effective computer lab equipment for grades 1-4
I've been working for the past two years for my school, private and independent, to upgrade the equipment that was originally purchased in 2019.
We are 100% Windows. I've been told class size should be 23 students. They plan to implement some graphic/video editing software as well. The lab would interact with a total of 200 students over each academic year.
My original plan was to purchase 24 units so that there is a quick replacement if needed. I also was looking at micro form factors to reduce footprint.
Challenge is cost.
At the start of this school year I presented this project to my new leadership my cost at the time was 22k. Leadership pushed back on it until 3 weeks ago. When they gave me the go ahead they mandated I had to make this happen at the quote I gave them almost 6 months ago. That quote was also for 2 less units.
My quote today is 30k.
I've revised the quote to not have new keyboard,.mice, and monitors. It also went from 24 units to 23 and I took the warranty from 5 years to 3. I was able to get it to 23,500k. Every other quote I've worked is 24k or more.
I'm reaching out to see if maybe someone has an idea that I'm just not thinking of.
Final share, yes I know they should not of used a quote that was 6 months old, they've been told every week prices are going up. However this cost avoidance isn't stopping my two leadership from purchasing 3k apiece Mac pros.....
https://redd.it/1til436
@r_k12sysadmin
Chromebooks, Android Apps, and Security
Whats everyone doing for Android apps on Chromebooks?
We've always had a hard no for past security issues, but we're starting to get push back from a few who want to or are already using Labster. They're having performance issues on Chromebooks and Labster's support is saying that we need to allow Android apps to fix that as the app just runs better that way.
So, what's the deal in 2026. Are we allowing it? I'd assuming whitelisting only the apps we need. Is it still a big security threat bypassing filters and what not? Anyone have experience with Labster?
What are everyone's thoughts?
https://redd.it/1ti0h9y
@r_k12sysadmin
Need a few old IP cams
I’m on an extended medical leave (spinal fusion) and I need a Linux project before I go crazy (don’t worry. My wife is helping with any lifting. I’m mainly on the software side).
I was wondering if anyone perhaps just had a major security cam overhaul and would be willing to part with 5-7 older IP cams. I can pay for shipping. I’ve been running my own Proxmox environment at home to prepare for the inevitable move and now I’m curious about the viability of a Linux-based cam system with web and windows clients. I’m the kinda guy who needs to run this stuff before I dive in professionally.
https://redd.it/1thn8o0
@r_k12sysadmin
School Districts Without 2FA on Staff Email Accounts - Why?
Over the last several months, I am constantly having to reach out to school districts all over the country because my users are being spammed with compromised emails originating from staff accounts from other districts that have been compromised.
The latest SPAM email that I just dealt with was even worse, the account that forwarded it was from School District X meanwhile the form that it was linking to in its email was from School District Y in completely different states.
When this occurs, I reach out to the school district that the compromised account originated from to let them know of it and nine times out of ten, I get zero response back from that district. I even reach out to multiple people listed on the school district website as I know from experience that districts often do not keep their district webpages updated.
Multi-factor authentication could prevent at least 99% of these issues from even occurring so if your school district doesn't use it, why not?
https://redd.it/1tgra08
@r_k12sysadmin
Mosyle to Intune for Mac and iPad?
Has anyone done this move? Intune was brutal five years ago when I last tried it, and you’d have to install so many custom profiles, but I’ve heard it’s come a long way. Intune is included in our E5 licenses…. Mosyle is extra….
Before we test it out, I thought I’d see if anyone else has any experience with it. Pros? Cons? Flags? Lost features?
https://redd.it/1tfxzvb
@r_k12sysadmin
Can't use Codex with ChatGPT for Teachers plan
This is the plan I'm using: ChatGPT for Teachers (https://chatgpt.com/plans/k12-teachers/)
I've installed codex on both Windows 10 and Windows 11. I get the same error: "To use Codex with your ChatGPT plan, upgrade to Plus: https://chatgpt.com/explore/plus."
I have enabled Codex for my workspace as I am the ChatGPT/openAI admin for my company: https://chatgpt.com/admin/permissions?tab=general
All my research says this should work, but it doesn't. Any ideas?
https://redd.it/1tf48rh
@r_k12sysadmin
Lenovo Chromebook Selection: Duet 9 vs Chromebook i
Hey everybody, I've read a few of the older posts about the Lenovo Duet line of Chromebooks. They seem rather positive.
I was wondering if anybody has had experience with both the 'standard' clamshell types (we've been using the 300e) vs this detachable keyboard style.
Am I overthinking that they will be prone to more breakage due to it being detachable? Or maybe less due to no hinges breaking?
We like Lenovo so we'd like to stick with them but unsure on the Duet vs Chromebook i selection...
Grades 7-12 is the environment.
Thanks for any feedback!
https://redd.it/1tkl0og
@r_k12sysadmin
Anyone using Open Source for document management and storage?
A few years ago, while "we" were drunk on ESSER money, we took our archives digital with a commercial solution that was way oversized and even more overpriced. Now "we" are trying to find another solution.
So, I run across PaperlessNG and a few other open source references and I wonder if anyone has any experience with them.
If not, what else do you guys use to keep, store and search digital records?
Obligated reminder, we are one small school, not a district.
https://redd.it/1tjsavr
@r_k12sysadmin
School-safe Google AI overview blocker?
So last August I was made aware that Gemini was going to become a "default ON" Core Google service on a specific date. I told my director about it and told him I would switch it to Default OFF for students. He agreed and the matter was closed. Fast forward a week or two and I discover that he decided to pre-emptively change it to default ON for everybody. Sigh. So I just said "Well, you're the boss" and moved on.
Fast-forward a year later and teachers are bellyaching that they want the AI overviews turned off. He was digging in Workspace and saw the Generative AI section, looked at it, and said to me "Well no wonder, this is all turned on!" Facepalm. I don't know if this particular Google service is solely responsible for those AI overviews, I think it might be something else.
So now I want to know if there are any good, school-safe (won't collect data or send anything across the web) Chrome extensions I can use to squash the overviews and whatever else won't break anything to disable. I know there are some extensions out there that will take care of this, I just want to make sure there's no data changing hands. Thanks!
https://redd.it/1tjs38r
@r_k12sysadmin
Raptor versus CrisisGo
Anyone use these platforms for both visitor management and emergency response/notification? We have Raptor Visitor Management at the moment and it's ok- very cumbersome on the event side of things, but it's working. We need a new emergency response platform this summer, so we looked at Raptor first, as well as CrisisGo.
Our indifference with Raptor VM makes us wonder if indifference is better than the alternatives that are currently out there - specifically, CrisisGo.
https://redd.it/1tjulzr
@r_k12sysadmin
Kansas City Public Schools switches to MacBook Neo
kcpublic schools switch to MacBook Neo
"Over time, we will replace more than 30,000 Windows PC and Chromebooks with the more secure, durable, and reliable Apple devices."
More secure, durable, and reliable? Perhaps over Windows PCs, my biggest question for everyone who is, how long will the MacBook Neo be viable because it's running a two year old Apple A18 Pro Chip that came with the Apple iPhone Pro 16.
https://redd.it/1tjq3u5
@r_k12sysadmin
Removed by Reddit
Removed by Reddit on account of violating the [content policy. ]
https://redd.it/1tjm09o
@r_k12sysadmin
Ubiquiti APs
Hi all, long time lurker here and just wanted to say thank you to everyone in here as this sub has been really insightful for me in my career.
I was wondering whether anyone has had any experience working with Ubiquiti APs before?
I have used them in small environments a few years back but my current school has 90 APs and from what I’ve read, it’s not as good in an enterprise environment. However, I’d love to know if anyone thinks different.
We currently have Aruba IAP-315s which are now EOL and I need to plan a refresh. School is in a bit of a deficit right now so I am thinking of ways to save money. I had to question our suppliers when they sent over the Ubiquiti pricing!
What are the main drawbacks of using Ubiquiti? And for any UK sysadmins, would it be fully compliant with DfE standards?
Also, what about their switches? Never worked them before so not sure about them and their robustness and longevity. The Aruba switches and APs were installed 8 years ago and have been running strong (kinda sad to get rid of them) but it’s now time for a replacement. I only started a few months ago and this was one of my first concerns.
Any experiences, alternatives and advice are appreciated!
https://redd.it/1tj7q07
@r_k12sysadmin
Follett Destiny SAML config?
We've had Google SSO set up and working for Follett Destiny for a while, until some time in late November when we found it no longer working. We contacted Follett support and they told us it was a Google issue. I've had a case open with Google support since then (yes, over 6 months!)
Google support now says we need to populate the Start URL (which was never populated to begin with). So I contacted Follett support again. This time they told me that they don't support the App Waffle shortcut and can't provide a Start URL.
So, long story short I'm hoping anyone uses this can confirm it's working? Or alternatively provide the Start URL if one does in fact exist.
Long shot, I know but I appreciate any help!
https://redd.it/1tiub43
@r_k12sysadmin
Keeping pc updated
/r/Intune/comments/1tip28e/keeping_pc_updated/
https://redd.it/1tip2h7
@r_k12sysadmin
Disciplinary action for staff that give up credentials?
Good Evening All,
We have organization wide MFA for staff email. Even so, we have staff occasionally fall for scams. They'll give up their passwords AND get scammed into giving up their second factor. OTP code, hit a button on their phone to approve some bogus request, etc. We remind, remind, remind that nobody in the organization will ever ask for any of this. Yet it still happens. Short of requiring hardware keys, we're having a hard time fixing the humans around here. There is Board policy governing this. We're working with our HR department to see if they want to start enforcing it with some sort of disciplinary action.
The question is: do any of your districts enforce such policies? If so, how do you do it? Do you make staff sign something they are responsible for their accounts and there are consequences if they don't? Do they get a written warning first offense? Ever had it lead to something serious like dismissal?
https://redd.it/1ti99l0
@r_k12sysadmin
Classlink Roster Server - any way to provide read-only access to rostering rules?
At my district, we'd like to provide read-only access to the Classlink Roster Server to at least a couple people in Client Services (aka the techs/Help Desk people), so they can view rostering rules. The permissions I've found aren't granular enough to do that, unfortunately. Has anyone figured out a way?
Example use case: There's a ticket saying that Little Jimmy can't access Moose Math, and Jimmy is in 2nd grade, and Moose Math is only available to grades 3-6 in the rostering rules.
If Client Services knows that, they could respond to the ticket saying, "Unfortunately, Moose Math is only available for students in grades 3-6. If you have any questions, please contact the Elementary Math Coordinator, Jane Doe." Then, they could close the ticket.
Classlink Security Roles
https://redd.it/1thn1jh
@r_k12sysadmin
Drive Share Phishing
I am looking to see if anyone has any creative rules for trying to catch more of the drive share phishing attempts? We see a lot of phishing attempts where a docs file is shared with a large group of people, via the drive-shares-dm-noreply@google.com email, which cannot be explicitly blocked. I have played around with a few content compliance rules, none that were great. The idea is I would like to try and quarantine any inbound drive shares that appear to be phishing, whether that is too many recipients, etc. More just seeing what rules others have built to try and catch more of these pro-actively!
https://redd.it/1thlmqc
@r_k12sysadmin
Cambium Assessments stuck on Initializing or "Unsupported Browser" - anyone else seeing this?
State testing going on, our Chromebooks are pushed to 144 for a few weeks now, the ones in question are on 144, but they are getting this error that they're using an unsupported browser. A powerwash fixes it, but is anyone else seeing this or do they have a quicker solution?
https://redd.it/1tgkh3j
@r_k12sysadmin
Googlebook Announcement & Canvas Breach Update
https://k12techtalkpodcast.com/e/google-book-is-coming-what-the-chrome-os%e2%80%93android-merge-means-for-schools/ and all major podcast platforms
On this episode, the guys discuss Google's announcement of the new "Googlebook" (a reported merge of Android and Chrome OS), growing controversy and litigation around iReady and screen time in schools, and a debrief of the recent Canvas/Instructure security incident with guest Michael Klein from the Institute for Security and Technology.
Unofficial demo of AluminumOS: https://youtu.be/dXmFIfv\_tIA?si=Baw0OInBqJf-IkDD
The largest segment is a deep dive into the Canvas/Instructure incident with cybersecurity expert Michael Klein. He walks through the timeline (initial unauthorized activity detected April 29; exfiltration via cross‑site scripting of a free‑for‑teachers account; a later attack that posted extortion notes to some users), the involvement of CrowdStrike, the public claims by the ShinyHunters group, and Instructure’s statement about an agreement with the actor. The conversation covers the technical nature of the attack, impacts on confidentiality, integrity and availability (including disruptions to finals/registrar functions), the downstream consequences for integrations with SIS and other edtech systems, and why many institutions remain cautious to reconnect APIs.
https://redd.it/1tfcpgq
@r_k12sysadmin
Filter advice Securly vs goGuardian
We are switching filters. The current one is just not reliable.
We are down to Securely and goGuardian.
We want classroom control portion, which both have
We want reports that “people other that it staff” can run (parents admin)
We want filter.
Any advise? Any experience with either?
Tyia
https://redd.it/1teukof
@r_k12sysadmin
