17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Chrome sign builder free alternative?
https://support.google.com/chrome/a/answer/16353976?sjid=2598165757223952502-NC
https://redd.it/1pw57tj
@r_k12sysadmin
Mac Lab with Mosyle Profile Suggestions?
What suggestions do you have to configure Mac mini profiles with Mosyle in a lab environment?
We are new to Mosyle and new to Macs in our district. We are purchasing 2 labs of Mac minis. We are trying to figure out "best practice" for setting up a profile in Mosyle for lab machines. They are not 1-to-1, so obviously a Share Device Group, but we are considering using all "Guest" accounts, so anything the student does would be removed. Has anyone done that before? Or do you have any other suggestions that have worked for you?
https://redd.it/1pvt1fj
@r_k12sysadmin
Has anyone had issues with students and Flipper Zero’s/ RFID devices?
Backstory. I work in a K-8 and the students and I are buds. They break their devices and I fix them or they’ll need their SIS password reset. They’ll come in and chat for a bit between classes or after lunch and I was asking a few of them what they wanted for the holidays and a few asked for Flipper Zeros. I know I would’ve loved one of these when I was their age, but I’m curious if anyone’s ran into students using them for any malicious purposes.
Happy holidays everyone!
https://redd.it/1pulk2i
@r_k12sysadmin
Microsoft 365 A3 and Blocking Email
We have MS 365 A3 licenses for all users in our school. However, we use Gmail for email. I want to be able to block access to email within 365, or just disable the app completely. It's very easy to do this in Google Workspace. I would simply disable Gmail access for a particular OU. Is this possible in MS 365 with A3 licensing?
https://redd.it/1pu0tyq
@r_k12sysadmin
Self-hosted services for on-campus QoL?
I work at a very small private high school (> 100 students) as the only 'it person' (networking, sysadmin, technician, etc). I serve as the replacement for the last person who left and by the time she left, all CMS, SIS and website operation have been taken over and ran by administration. My domain of responsibility covers all onsite technology-oriented needs, where I find myself quite lucky to be.
I have about 7 yrs of experience in IT, and want to fortify the school's infrastructure. We primarily use Chromebooks, with a small handful of iPads / Macbooks. I have recently deployed a small homelab-style mini cluster from older iMacs which host a DNS sinkhole, a small junk file server, and an AFFiNE collaboration suite.
Admin is very lenient, and usually take my advice as 'the expert'. I want to try and demonstrate to the Admin that I am also capable of overseeing/reducing some of the offsite services as well.
I want to try and host more services to help with things such as network mapping, classroom management, infrastructure automation, and more. Does anyone have any suggestions?
Thankyou,
https://redd.it/1ptmzwj
@r_k12sysadmin
Security Watch 12/19/25
On K12TechPro, we've launched a weekly cyber threat intelligence and vulnerability newsletter with NTP and K12TechPro. We'll post the "public" news to k12sysadmin from each newsletter. For the full "k12 techs only" portion (no middle schoolers, bad guys, vendors, etc. allowed), log into k12techpro.com and visit the Cybersecurity Hub.
Attackers targeting public-facing Palo Alto GlobalProtect through large-scale brute-force and scanning campaigns.
A novel PayPal scam abuses the platform’s legitimate subscription notification system to send authentic-looking phishing emails from PayPal’s own servers, tricking users into contacting scammers.
Heightened scrutiny following the critical React2Shell flaw has led to the discovery of additional React vulnerabilities that can cause denial-of-service conditions.
A critical out-of-bounds memory vulnerability in the Chromium browser engine allows malicious web pages to execute code on victim devices.
https://redd.it/1prj4yf
@r_k12sysadmin
K12 Tech Predictions for 2026?
https://k12techtalkpodcast.com/e/ribs-switches-predictions-k-12-tech-talk-year-end-recap/ and all major podcast platforms
Key topics include the mainstreaming of AI in K12, vendor security scrutiny (PowerSchool and Infinite Campus MFA), continued funding uncertainty, device cost, student data privacy, and looming screentime debates. Predictions? AI, screentime, vendor accountability, tighter budgeting, and more!!!
https://redd.it/1pqxah9
@r_k12sysadmin
CodeHS, Repl.it, and the like
How are you all addressing students creating/using these platforms to play games or host proxies when we cannot directly block them as they are used in instruction?
https://redd.it/1pquww4
@r_k12sysadmin
Whats the point of Clever?
We use FACTS/Renweb SIS and we have a vendor tied to simplfying attendance who wants us to adopt Clever to access SIS. From the academic/student computing piece, I don't get the point of it. It seems like it doesn't eliminate the need for managing a Google Admin console to still adjust settings and users. Google classroom is often offered for easy rostering. We don't have anyone under 2nd grade really logging in or utilizing tech. Everything I see on here is from 5 years ago. Everything ChatGPT gives me is from Clevers marketing. Can someone working in an independent K-8 shop explain whether it is really worthwhile for academic or other uses?
https://redd.it/1pqpvzo
@r_k12sysadmin
Intermittent Wi-Fi Disconnects – Request for Insight
We’ve been investigating an issue for the past couple of weeks and would appreciate any insight or guidance from the group.
**Environment:**
* Microsoft campus
* Ubiquiti UniFi switches and access points
* SonicWall firewall
* Mix of Lenovo and Microsoft Surface student devices
* Lenovo staff devices
We are receiving ongoing reports of both student and staff devices intermittently dropping from Wi-Fi throughout the day. At this point, we have not been able to identify a consistent pattern related to specific access points, switches, or device types.
To troubleshoot, we have:
* Updated infrastructure firmware and also reverted to known-good versions
* Reviewed firewall rules
* Verified domain controllers, DNS, and DHCP services
* Checked for co-channel interference and adjusted AP configurations accordingly
Despite these efforts, the issue persists and we’re struggling to identify the root cause.
Has anyone experienced a similar issue in a comparable environment? If so, we’d greatly appreciate hearing what ultimately resolved it.
Thank you in advance for any insight you’re willing to share.
https://redd.it/1pqoe8g
@r_k12sysadmin
Apple devices in a non-Apple District
We are a 100% Windows and ChromeOS district. We have gotten a few requests to purchase an iPad, but have no way or time to manage the device. What do you say in these situations? That we have to factor in the training and setup in the cost? Or do you just let the department use the device unmanaged, free rein.
https://redd.it/1pq30s1
@r_k12sysadmin
Cloudflare Project Cybersafe Schools - anyone have success signing up?
Has anyone had any success signing up for Cloudflare Project Cybersafe Schools? If so - does anyone have a contact I can reach out to about this program?
I submitted the form here a month ago and haven't heard a peep from them (although I have been now receiving all their marketing email). I've tried following up several times with no luck. Since it's the holidays maybe I'm just being impatient.
https://redd.it/1ppvfs4
@r_k12sysadmin
Digital Student Portfolios
I did a cursory search on here and noticed some discussion regarding digital student portfolios in the past but most of those threads are at least 3 years old. I'm curious to know, for those who have implemented this, what are you using? What have you tried? What worked well and what didn't?
Thanks in advance!
https://redd.it/1ppqk5j
@r_k12sysadmin
Chromebook policy suggestions
I am looking for recommendations of policies to change before I roll out the Chromebooks at our school. So far, I have disabled USB ports, blocked developer tools in Chrome, blocked dev mode in Chrome and blocked sensitive internal Chrome URL's. Thanks!
https://redd.it/1pp124u
@r_k12sysadmin
Skyward/Qmlativ performance issues
Anyone else impacted by the issues ISCorp is having with their Skyward SMS and Qmlativ hosting?
Despite going on for 5 days now, they have provided little information about what's happening and what they're actually doing to mitigate the issue. Wondering if anyone has gotten more information out of them about what the issue is.
https://redd.it/1poz89k
@r_k12sysadmin
Confused Between Verkada, Lumana, and Coram for Video Surveillance
Hey all, I’m a K12 sysadmin trying to figuer out which video surveilance system to go with: Verkada, Lumana, or Coram. I’m stuck becuase all of them seem to have pros but also some cons.
We need something that’s easy to manange, secure, and can integrate with existing school IT systems. Our goal is to monitor hallways, classrooms, and enterances to keep students and staff safe, but also be able to review footage quick if needed.
Here’s where I’m at:
* Verkada looks good for its cloud-based managment, but I’m not sure about data privacy. Being in the cloud means there are concerns about who has access to the footage.
* Lumana has solid local storage, but it feels like it might be more complex to manage and scale. It’s good for areas with strict privcy concerns but can be hard to trouble shoot remotely.
* Coram is appealing because of its AI features for detecting suspicious behavoir and hybrid storage but I’m unsure about how reliable their support is and if the AI is really effective or just fancy tech that doesn’t deliver.
Any expeirences or advice? We need something that can be easily managed by a small IT team, won’t break the bank, and most importantly, won’t comprimise on security or privacy.
https://redd.it/1pw1fde
@r_k12sysadmin
Chromebook WiFi / network settings
I noticed that in Google Admin Console - I have nothing configured under DEVICES->NETWORKS. Yet I have hundreds of ChromeBooks that correctly login to WiFi when started up.
Can someone confirm that the WiFi credential entered when I first turned on the ChromeBook and ENROLLED sticks with the device - and that’s where it’s getting the correct info to login?
So why would I be using/configuring the NETWORKS menu item? Would it allow me to direct WIFI SSID per OU, for example?
I don’t want to fiddle with additional configuration if everything is fine.
THANKS!
\-jeff
https://redd.it/1put0kz
@r_k12sysadmin
accounts on IFPs
looking for feedback on the following subject.
What do you do in your schools in terms of having accounts on the boards versus no account, locking the board down and basically having it as a second screen to your computer?
We have Promethean AP seven boards which, according to Promethian does not have the ability to lockdown the guest account without removing all other accounts i.e. just having the admin account available.
My principal is complaining that students are accessing the guest account (which has no password because that’s how Promethean does it.) to watch YouTube on the smartboard. The issue is that currently teachers sign in the board with their own unique password and utilize the board and some of them utilize it to watch YouTube in their classes. I don’t really see any other option to otherwise say absolutely no YouTube or you’re gonna just have to suffer the consequences of YouTube.
https://redd.it/1puco8j
@r_k12sysadmin
Has anyone made the switch to soft-phones?
Our district has been using a VOIP PBX for quite some time and have recently been charged with looking at other options. Our PBX ties into the school intercoms for all-calls and access control system (unlocking the door for visitors via phone). Has anyone else made the move to soft phones? Which solution did you pick? What were the challenges, user feedback, and how did you solve these problems? Any input is greatly appreciated!
https://redd.it/1pqtp3y
@r_k12sysadmin
Do you use MFA to protect staff computers? Why or Why Not?
Our district has Duo rolled out to our Windows fleet, and staff more-or-less got used to it. We've had some changing of the guard in our tech leadership, and the question came up: Do we *need* MFA on our staff computers? Versus just servers and cloud services (Google, Microsoft, Adobe etc).
I'm generally of the mindset of "MFA ALL THE THINGS!" But I can also see some counter arguments:
1. From a convenience standpoint, Duo prevents us from using Windows Hello / Biometric authentication (which I think our teachers would love)
2. Regarding the possibility of a student gaining access to a teacher's device, we're more concerned about a teacher leaving a computer unlocked vs a student obtaining their password (not saying it couldn't or hasn't happened, just what's more likely).
So I'm curious to see what other orgs do. I'm trying to be mindful of the balance between security and convenience and as we do some healthy evaluation of our strategies. Not sure if there's a shift in mentality that's happened that might challenge "conventional" wisdom.
I'm also cognizant of the possible insurance requirement, I'm not sure what our policy says regarding MFA. Possible the policy requires it which renders other considerations moot.
https://redd.it/1pt3365
@r_k12sysadmin
YouTube shorts.
Just wondering if there’s a way to block the YouTube shorts section specifically. For reference we have the free version of google enterprise and for content filter we use a sonicwall. Admin grants restricted access to YouTube but I’m wondering if there’s a permission I’m missing on the google admin side to block kids from just mindlessly scrolling the shorts section specifically
https://redd.it/1pre8hr
@r_k12sysadmin
Printing blocked on Chromebooks after adding wildcard
I was instructed to block all URL's on our chromebooks however, that now caused the printing features inside of Chrome to stop functioning even though chrome://print and chrome://resources were added to the whitelist. Any ideas?
https://redd.it/1pqsw1i
@r_k12sysadmin
iReady Testing on iPads Locking the device
Has anyone been doing iReady testing on iPads recently? Last week we did some iReady testing and about 3-5% of our iPads at campuses completely locked up in the middle of testing. They Locked-up to the point where campus techs were claiming they wouldn't event take a reset with the power/volume buttons. The assessments were running fine until some random point in the test, and not the same question for each device.
It seems fairly random.
Interestingly enough, at least one Chromebook was affected with a similar lockup behavior last week as well.
For the iPads, They're all:
* 11th Gen iPads (a16)
* Running some flavor of iPadOS 18 (supported per iReady's documentation)
* In Logitech keyboard and mouse cases
* Have the same configuration profiles
Just wondering if anyone has experienced any similar behavior recently with this platform on mobile devices.
https://redd.it/1pqp1xa
@r_k12sysadmin
Anyone seeing a dramatic increase in Calendar phishing?
We've had to field 4 separate Calendar invite phishing events in the past month. We're locked down so the primary Calendar viewer can't see the invites but whom ever has share/edit access to that Calendar can see it and interact with it. Format has been a link to something plus a PDF file that also contains the link. So far, the primary domain's hosting these are: *[.]cruwaisho[.]sa[.]com they like to make multiple events spanning a week to a month. It's a spray campaign as well, sometimes though a BEC, that's usually a small subset of the district personal, around 30-60, %1.25 of the whole.
https://redd.it/1pqqxmo
@r_k12sysadmin
ChatGPT for Teachers
As much as I hate it, leadership has embraced ChatGPT for teachers. Has anyone else set this up and come across invite errors for your users?
https://redd.it/1pq3lm1
@r_k12sysadmin
Bypassing a Security ID to set up email forwarding
We use Google Mail. We want to forward the email for one of our staff members who recently resigned to one of our other staff members in the same department. As soon as I enter the forwarding email, I am prompted to confirm the account identity by eithe comparing the passkey to a passkey on a mobile device(iphone, ipad, etc.) or by connecting an external device that contains the security ID. Is there any way to either disable this option or bypass it so that I can complete the email forwarding process. Thanks!!!
https://redd.it/1ppxpnj
@r_k12sysadmin
Free/super cheap SCEP with Intune?
Does anyone have a recommendation for a free or super cheap way to implement SCEP with Intune? I have a working install on the community edition of SCEPMan with FreeRADIUS, but we're still incurring Azure charges with that. I'm curious if anyone has a self hosted/FOSS/dirt cheap for education alternative to SCEPMan?
https://redd.it/1pps6af
@r_k12sysadmin
Interactive Whiteboard Software
What are your teachers using for interactive whiteboard software? We have a few math teachers that still use the old interwrite workspace, but this is no longer supported and becoming a compatibility issue with newer versions of windows. What are other options people are using in their districts? Thanks!
https://redd.it/1pp0gl0
@r_k12sysadmin
Anyone know the gam time format?
When I do a "gam info cros" command, I get:
Date: y/m/d
ActiveTime: 5791243
Anyone know what that activeTime means? Is it time of day, or amount of time it was active? If time of day, how do I convert that into hours/mins?
Thank you.
Never mind. Looks like that's also the time duration the Chromebook was used, just in milliseconds for some reason.
https://redd.it/1pp1m1l
@r_k12sysadmin
Ubiquiti - Protect & Access
I've been seeing more districts using Ubiquiti for switches and APs, but I wanted to see how many of your are using them for ACS (door access) and IP cameras? If you are using them, could you share your footprint or device count? We currently have about 300 cameras and 330 doors across two high schools and a district office. We are considering Unifi because their pricing is significantly lower than the competition's, and their solutions have become pretty robust, covering about 90% of the competition's features as well. Am I a fool for considering them?
https://redd.it/1poymiv
@r_k12sysadmin