-
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
/r/k12sysadmin and the API protest
I'm not blacking out the sub. The sub is useful to the members and it only hurts the members to black it out. In addition, I think a short term boycott is the wrong approach and ultimately, while temporarily satisfying, will not change the actions of Reddit's leadership. I don't agree with Reddit's approach to 3rd party access to the API but ultimately that is the tradeoff in using a 3rd party company's resources to host your content. They get to make those decisions and we have to decide if the juice is worth the squeeze.
https://redd.it/147qcwd
@r_k12sysadmin
Free K12 Cybersecurity Risk Assessment Episode
In Episode 122, we mostly spent time taking the K12 Six cybersecurity self-assessment.
Take it here - K12 Six cybersecurity self-assessment.
Listen here (and on all major podcast platforms).
https://redd.it/146itjx
@r_k12sysadmin
Ipadios
Hi,
Just wondering is there any document on Apple's website or elsewhere that contains how long an ipad version will go end of life? I know they release a new version every year but how long do they keep providing apple iOS updates? Just try to make sure we evergreen our ipads correctly. All devices we provide have to keep getting security updates.
Chrome, windows, etc all announce this but I can't seem to find anything.
https://redd.it/1465zx6
@r_k12sysadmin
Spanning or Syscloud
Looking to get either Spanning or Syscloud. I got a quote from both very close. Trying to decide which is better. I am leaning toward the Syscloud. Anyone with thoughts?
Thanks in advance.
https://redd.it/145h52n
@r_k12sysadmin
Retractable Extension Cord for mounting on mobile TV Cart?
I've been searching for a retractable extension cord that I can mount to a mobile TV cart where the MALE end that plugs into the wall is retractable and the reel stays permanently mounted onto the cart. I'd also like it to be at least a little subtle or professional looking. Black or gray, nothing super noticeable or industrial looking.
I assumed that this would be easy, but every search term I put in leads me to the more garage or wood-shop style cables that you usually see mounted from the ceiling. These won't work because they're meant to be mounted near the outlet and then the female end is what's retractable. They're also always bright yellow or orange and super bulky.
This is the closest product I've found after an hour+ of searching. It seems to be close enough but I think it's meant for use in hospitals which probably means it's insanely expensive.
Anyone else have recommendations for something that would fit the bill? I can't imagine i'm the first person in education or even just an office environment that has wanted something like this.
​
https://redd.it/144nm0o
@r_k12sysadmin
Chromebooks using SCEP with EAP-TLS
Is anyone using SCEP for certificate based authentication on Chromebooks for users and/or devices? I have everything setup and working for Intune devices but for Chromebooks I’m getting an “unknown ca” error on our NAC (ClearPass) when they try to authenticate with the certificates. Google has a decent setup guide on the basics but doesn’t really cover each setting and options available. Just wondering if anyone else has this setup and if I’m just missing something simple on the Google Admin Console end.
Note on the setup - Microsoft’s certificate connector adjusts IIS settings to disallow browser-based enrollments. Due to this, I have Google’s certificate connector installed on its own NDES/ IIS server.
https://redd.it/144fp9e
@r_k12sysadmin
Projector Recommendation
I need to replace a projector in my library. I would like something without a bulb and can be used in a lighted room.
The one we have currently we have to turn off the majority of lights for it to be seen. Can't use a BAT or BAIT. Wasn't given a budget but around $1,500ish I'm thinking.
Suggestions?
https://redd.it/144ghz1
@r_k12sysadmin
Google Maps: Age Restriction For Schools (?)
Hello!
A few years ago, (I believe) access to Google Maps was disabled for users beneath the age of 18.
So, at the root OU, Google Maps was turned OFF.
In the Staff OU, it was overridden, and turned ON.
We provided alternative mapping services to staff to use; however, one teacher is pushing back hard, saying he read online that students only need to be 13 years of age or older to use Google Maps.
However, I am skeptical, as I believe I read that unless express parental consent was provided on a student-by-student basis—a scenario I do *not* want to get us into—the age is, indeed, 18 years old.
My Questions as Follows:
1. For Google Maps in public education as managed via Google Workspace, is the age to be able to use the service without restriction 13 or 18?
2. Am I totally off-base here; or, is it indeed the case that any/each/every student below that cutoff, either 13 or 18, requires individual consent from their parent/guardian to turn Google Maps ON?
3. Can someone please point me to a link which documents this so I can share it with the high school teacher?
4. What else, if anything, am I missing here in The Bigger Picture...?
Thank you!
https://redd.it/144de7b
@r_k12sysadmin
What laptop do you use?
We've had some staff changes and I'll be a more mobile tech. Any recommendations?
https://redd.it/144a07o
@r_k12sysadmin
HP self-maintainer how do I join?
We have been repairing HP Chromebooks in house for the last 5 years . We wanted to take it a step further and start getting brand new boards directly from HP.
I can't seem to figure out how to register or apply for this since every time I do it asks me for reseller information. Which we don't have since we're at school. Just wondering if anyone out there has figured out a way to join. Would love to get step by step instructions on how to do this.
We have a company that satisfies our warranty repair but after the warranty is over were left high and dry with all these HP G8EE. We're hoping if we become a self-maintainer we would be able to get ourselves a shimm to fix the issue and learn more about the devices we fix...
Thanks
https://redd.it/143kcwi
@r_k12sysadmin
Alternatives to Follett Destiny?
Does anyone know of any good alternatives to Follett Destiny Library Manager?
https://redd.it/142ucjc
@r_k12sysadmin
Network Monitoring Program
Does anyone have a network monitoring tool they display on a TV in their office or a 2nd monitor? Basically, I'm looking for something that I can either input the addresses to all of my switches in the district and I can see the up/down status of those devices.
https://redd.it/142j5ja
@r_k12sysadmin
Online Transcript Requests/Payment
Does anyone use an online transcript request platform to process requests and collect payment? We’re looking at Parchment. The other option is just create an online payment form and manually process requests as we do now.
https://redd.it/141zr09
@r_k12sysadmin
GoGuardian Teacher Scenes allowed websites list
Our teachers are evaluating classroom management tool options and have asked a question I can’t answer.
When a teacher uses GoGuardian Teacher to create an allowed websites scene, what happens to browser tabs that students already have open? I know they are blocked but are they sent to a block page or are they just not clickable somehow?
And what happens when the teacher removes the scene? Do those tabs just start working again or do students need to refresh?
Thank you!
https://redd.it/13zq2w1
@r_k12sysadmin
Suspended GSuite accounts and purged data
Not finding this yet in the search here or online - it's Friday and my Google skills may be falling short.
When a staff member leaves and we suspend the account - how long until Google purges the data? Or does it purge it?
As a test, I went to Vault, and pulled up drive data for a staff member that I know has been gone for over a year, and it actually brings me a list of current drive files unrelated to that user (created by others after this staff member left). I tried another past staff member account, and I'm getting similar results, but different files. Looking at the filenames, both are general lists of files, and these two staff members are not the owners. In fact, several files were created today and would never had been shared with either one of these staff members. Files should be there based on the retention policy for data - we are within that window of time.
It looks like Archived User licenses are not an option for K12.
The thought is - if I suspend a user when they leave, but they come back in a few months, maybe as a sub, or under contract part time, and we'd then re-activate them, would their files still be there, and if so, for how long?
Thank you for any assist!
https://redd.it/13yjt9x
@r_k12sysadmin
Parent asking for all of their child's emails
How do you handle these situations? Also, what do you do when you see a ForwardAll rule from a student account to a parent?
https://redd.it/143b3hj
@r_k12sysadmin
Google Cloud Directory Sync & gMSA
Hello All,
Is anyone succesfully running Google Cloud Directory Sync with an Active Directory Group Managed Service Account (gMSA) using Task Scheduler ?
I know the process of creating the task in Powershell with the gMSA.
Just curious if its possible before I spend too much time this week working on it as I've already spent a little time with no success so far.
https://redd.it/146d5u6
@r_k12sysadmin
Print management software?
Hi
At this moment, we use Papercut to manage our printers, follow-me printing, etc. Our staff and students can print, copy, etc.
Problem: we want to charge the students exactly the amount of prints they received, either self printed or prints a teacher made for them.
Now we have different 'accounts' in Papercut, 1 for each class. The problem is we have a lot of classes that are combined for different lectures, or some people in a class go to Christian lectures, other to Islam lectures (that don't have the same amount of prints)
At this time, a student can be part of 5-6 different accounts. And student tend to change classrs troughout the year. It's a real PITA for our accountancy dep.
How do you solve this?
https://redd.it/145hwgp
@r_k12sysadmin
I need to do an emergency edit to FACTS / Renweb based site. How?
I don't work with our website on Renweb, but the people who do are unable to be reached and we need to make a quick change.
I am a renweb administrator. I'm not sure my full powers, but I can get to most anything and could probably grant myself the powers if needed.
I have lots of experience with html, so that's not an issue and I've worked with lots of systems in the past.
I see the regular editor only has the Customization Kit permissions, and I have that too.
So, where do I start to edit a paragraph on a single page?
https://redd.it/145ferz
@r_k12sysadmin
Migrating DNS from Bind -> Microsoft DNS
We have a number of linux servers in our district running bind that we want to move away from. Our district is for the most part all macs so we dont run active directory. Our plan is to replace these servers with Windows Servers that run Microsoft's dns service. Im not well versed in bind and I was hoping someone could offer some guidance on how this is done. Is there a process for promoting a new dns server? What about the process to decommision the bind server?
​
Thanks
https://redd.it/144d916
@r_k12sysadmin
2FA and Interactive Panels/USB Video
Greetings everyone,
​
For those running 2FA (for Google specifically in this case) and interactive panels what authentication methods are you using? At the moment my district only allows Yubikeys but so far we haven't been able to get them to work on an interactive panel without having a separate chromebox or PC connected to it, and even then it has to be directly connected. No pass through. I am mulling over the idea of loosening the 2FA to allow other authorization methods because it seems like it would defeat part of the purpose of the panels if my teachers can't pull up files directly without relying on a external computer. I've asked both Promethean and Newline, my top two contenders at the moment, and have gotten responses ranging to "we can't guarantee it will work" to "we aren't planning on implementing yubikey support". The last particularly confuses me since 2FA is increasingly becoming a requirement and Yubikey's are one of the top solutions...
​
Bonus question: Is anyone running video to a computer screen via USB-A to whatever video port? With my current planned config, partially due to budget constraints, I may not be able to have two screens on the desk for teachers that want it without either a USB-A converter or somehow figuring out a daisy chaining method without having to buy new computer screens with USB-C in/out. This is assuming one video out is dedicated to the interactive panel (or projector in some cases).
https://redd.it/144fs2j
@r_k12sysadmin
Anyone done the Google professional certs? Are they worth doing?
So apparently most of my pay comes from my states extra cybersecurity money. My director said they may be changing what the money can be spent on, including salaries. It may be easier for me to just grab a quick cybersecurity certification so I will still be eligible to get paid out of that, otherwise they may say they don't have the money for me and cut my position. I have looked at some of the other Google certs and wouldn't mind doing some as long as they are worth it. Anyone have any experience with them?
https://redd.it/144feqj
@r_k12sysadmin
Cold visits now?
So instead of cold calls from vendors now we have to deal with cold visits? Had a vendor come by completely unannounced. They had sent cold emails but I deleted/ignored them as we were not interested in their product. He decided to just come by instead....
https://redd.it/144bhlp
@r_k12sysadmin
Spanning by Kaseya
I was wondering if any Google Schools is using Spanning by Kaseya. Looking for thoughts and concerns. I am considering purchasing it to help backup our Google Drives at school. Any other ideas?
Thanks in Advance
https://redd.it/143xjc7
@r_k12sysadmin
SeeSaw Alternative?
SeeSaw has significantly changed their pricing model and our school's cost is more than doubling for next year. I'm curious if other people that use the platform are just absorbing the new costs or have you moved on to a different platform? What comparable alternatives are out there?
https://redd.it/142wfwq
@r_k12sysadmin
Respondus Lockdown Browser
I am trying to set up a silent install for their browser. Our ISD runs a Middle College and those students take college classes as part of it. We used to run the Respondus Lockdown Browser but ran into many issues running two organization's Respondus installs simultaneously. We eventually gave up. Now we're trying to use Endpoint Manager to uninstall old versions of our browser and push out the Lab version of the Community College's browser. Respondus support is refusing to work with us since we're not a current customer (we previously were). I was able to get a Respondus document that described making a silent install and uninstall from the Community College tech staff. Their tech staff was also able to send me the .exe of the lab installer. We have to use the lab installer since the students don't have admin rights on their laptops.
​
The issue I'm having is making the uninstall response file. The Setup works correctly - setup /s /fl "%cd%\setup.iss" but the uninstall does not work. After I run the command to capture the file, then rename it to "unsetup.iss" this command does nothing - setup /s /fl "%cd%\unsetup.iss"
I'm desperate for ideas. I don't want to push this out without a reliable way to uninstall it since I made a huge headache for myself pushing out our organization's browser before confirming the uninstall.
https://redd.it/142kntb
@r_k12sysadmin
Stress testing internet connection, beyond just bandwidth tests
We just got a new internet connection and I want to stress test the hardware that we were given, but I'm not sure how we go about doing so beyond running a bunch of bandwidth tests on a bunch of computers connected to it. It's not the bandwidth that I am concerned about, but the total number of sessions that are going through the hardware. Do you all have any recommendations on how to do this? I've found solutions out there such as TRex and WAN Killer, but they seem pretty complicated and I am curious what exactly I point them at (do I need to own an external server to absorb all of the traffic that they would send)? Thank you for any guidance that you all have.
https://redd.it/142c421
@r_k12sysadmin
Network Gear Recommendations
We are a small school (approx 500 students) with of course a small budget. I recently took the position of tech director, moving from the small business world to the education sector. The school is running Meraki APs currently with several beginning to age out. I'm curious what other schools are running for APs and switches as the cost of the Meraki gear and licensing seems excessively high. I have used Ubiquiti at my business and another company I support with zero issues, but have seen mixed reviews from education tech workers. Is there an alternative to Meraki in that is more cost effective while still having reasonable support that works well in school environments?
https://redd.it/141dpgo
@r_k12sysadmin
Freelance/Hourly Tech Support Suggestions
Hello!
I am looking for recommendations for a freelance or hourly-based support platform to help shore up some of my lack of technical knowledge. I am currently working on some AWS issues, to which Amazon recommended nerdrabbit, but I'm wondering if there are any recommendations for more platform-agnostic solutions. I'm not very tech-savvy, and fell backwards into this role, so I'm trying to find pinch-hitters when something comes up that I don't have the slightest understanding on. Any help would be greatly appreciated. Thank you!
https://redd.it/13yi24r
@r_k12sysadmin
Windows "Take a Test"
We're primarily a Google school district so we typically use managed Chromebooks for assessments and we've been very happy with how our current setup performs in that regard. But, we do have a few schools who aren't as heavily invested in Chromebooks and from time to time they need to use Windows desktops for assessments. That used to be somewhat easy to deal with using GPOs to lock things down on desktops to where specific "testing" accounts only launch Word, save to a server share and print, that's it. But now that we're using MS365 on desktops OneDrive is proving to be a bit of a hassle to try and disable in Word.
Has anybody been using Windows Take a Test mode on a large scale via Intune? If so, how has it been working for you? Any tips/tricks to offer?
Thanks!
https://redd.it/13yg73k
@r_k12sysadmin