17
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Mac Lab with Mosyle Profile Suggestions?
What suggestions do you have to configure Mac mini profiles with Mosyle in a lab environment?
We are new to Mosyle and new to Macs in our district. We are purchasing 2 labs of Mac minis. We are trying to figure out "best practice" for setting up a profile in Mosyle for lab machines. They are not 1-to-1, so obviously a Share Device Group, but we are considering using all "Guest" accounts, so anything the student does would be removed. Has anyone done that before? Or do you have any other suggestions that have worked for you?
https://redd.it/1pvt1fj
@r_k12sysadmin
Chrome sign builder free alternative?
https://support.google.com/chrome/a/answer/16353976?sjid=2598165757223952502-NC
https://redd.it/1pw57tj
@r_k12sysadmin
Advice on Blocking Certain Senders in Google Workspace
Happy Holidays SysAdmins,
I’m trying to create a rule in Google Workspace to prevent emails from specific senders from reaching a particular user’s inbox. My goal is:
* The sender should **think the email was delivered**
* The recipient should **never see the email in their inbox**
* I would like to **keep a copy for auditing/proof**
I’ve tried two approaches:
1. **Routing rules** – replacing the recipient and forwarding to an archive mailbox
2. **Content compliance rules** – matching specific senders and suppressing delivery
However, **Comprehensive Mail Storage** seems to interfere: even when the routing rule “drops” the message, the recipient still receives a copy in their inbox.
Does anyone have recommendations or a workaround for this? Ideally, I want the email **completely blocked from the recipient’s inbox** while still keeping a copy elsewhere.
https://preview.redd.it/jrc1weo5plag1.png?width=2180&format=png&auto=webp&s=72ade903df2dc80c02df6cb188f91534f437c3f2
I can turn off comprehensive mail storage option but wondering if there is any other way
Thanks
https://redd.it/1q0mv5m
@r_k12sysadmin
Server RAM prices on 7-15-24 vs. 1-2-26.
https://redd.it/1q2ce1u
@r_k12sysadmin
Server RAM prices on 7-15-24 vs. 1-2-26.
https://redd.it/1q2ce1u
@r_k12sysadmin
Advice on Blocking Certain Senders in Google Workspace
Happy Holidays SysAdmins,
I’m trying to create a rule in Google Workspace to prevent emails from specific senders from reaching a particular user’s inbox. My goal is:
* The sender should **think the email was delivered**
* The recipient should **never see the email in their inbox**
* I would like to **keep a copy for auditing/proof**
I’ve tried two approaches:
1. **Routing rules** – replacing the recipient and forwarding to an archive mailbox
2. **Content compliance rules** – matching specific senders and suppressing delivery
However, **Comprehensive Mail Storage** seems to interfere: even when the routing rule “drops” the message, the recipient still receives a copy in their inbox.
Does anyone have recommendations or a workaround for this? Ideally, I want the email **completely blocked from the recipient’s inbox** while still keeping a copy elsewhere.
https://preview.redd.it/jrc1weo5plag1.png?width=2180&format=png&auto=webp&s=72ade903df2dc80c02df6cb188f91534f437c3f2
I can turn off comprehensive mail storage option but wondering if there is any other way
Thanks
https://redd.it/1q0mv5m
@r_k12sysadmin
Chrome sign builder free alternative?
https://support.google.com/chrome/a/answer/16353976?sjid=2598165757223952502-NC
https://redd.it/1pw57tj
@r_k12sysadmin
Mac Lab with Mosyle Profile Suggestions?
What suggestions do you have to configure Mac mini profiles with Mosyle in a lab environment?
We are new to Mosyle and new to Macs in our district. We are purchasing 2 labs of Mac minis. We are trying to figure out "best practice" for setting up a profile in Mosyle for lab machines. They are not 1-to-1, so obviously a Share Device Group, but we are considering using all "Guest" accounts, so anything the student does would be removed. Has anyone done that before? Or do you have any other suggestions that have worked for you?
https://redd.it/1pvt1fj
@r_k12sysadmin
Has anyone had issues with students and Flipper Zero’s/ RFID devices?
Backstory. I work in a K-8 and the students and I are buds. They break their devices and I fix them or they’ll need their SIS password reset. They’ll come in and chat for a bit between classes or after lunch and I was asking a few of them what they wanted for the holidays and a few asked for Flipper Zeros. I know I would’ve loved one of these when I was their age, but I’m curious if anyone’s ran into students using them for any malicious purposes.
Happy holidays everyone!
https://redd.it/1pulk2i
@r_k12sysadmin
Microsoft 365 A3 and Blocking Email
We have MS 365 A3 licenses for all users in our school. However, we use Gmail for email. I want to be able to block access to email within 365, or just disable the app completely. It's very easy to do this in Google Workspace. I would simply disable Gmail access for a particular OU. Is this possible in MS 365 with A3 licensing?
https://redd.it/1pu0tyq
@r_k12sysadmin
Self-hosted services for on-campus QoL?
I work at a very small private high school (> 100 students) as the only 'it person' (networking, sysadmin, technician, etc). I serve as the replacement for the last person who left and by the time she left, all CMS, SIS and website operation have been taken over and ran by administration. My domain of responsibility covers all onsite technology-oriented needs, where I find myself quite lucky to be.
I have about 7 yrs of experience in IT, and want to fortify the school's infrastructure. We primarily use Chromebooks, with a small handful of iPads / Macbooks. I have recently deployed a small homelab-style mini cluster from older iMacs which host a DNS sinkhole, a small junk file server, and an AFFiNE collaboration suite.
Admin is very lenient, and usually take my advice as 'the expert'. I want to try and demonstrate to the Admin that I am also capable of overseeing/reducing some of the offsite services as well.
I want to try and host more services to help with things such as network mapping, classroom management, infrastructure automation, and more. Does anyone have any suggestions?
Thankyou,
https://redd.it/1ptmzwj
@r_k12sysadmin
Security Watch 12/19/25
On K12TechPro, we've launched a weekly cyber threat intelligence and vulnerability newsletter with NTP and K12TechPro. We'll post the "public" news to k12sysadmin from each newsletter. For the full "k12 techs only" portion (no middle schoolers, bad guys, vendors, etc. allowed), log into k12techpro.com and visit the Cybersecurity Hub.
Attackers targeting public-facing Palo Alto GlobalProtect through large-scale brute-force and scanning campaigns.
A novel PayPal scam abuses the platform’s legitimate subscription notification system to send authentic-looking phishing emails from PayPal’s own servers, tricking users into contacting scammers.
Heightened scrutiny following the critical React2Shell flaw has led to the discovery of additional React vulnerabilities that can cause denial-of-service conditions.
A critical out-of-bounds memory vulnerability in the Chromium browser engine allows malicious web pages to execute code on victim devices.
https://redd.it/1prj4yf
@r_k12sysadmin
K12 Tech Predictions for 2026?
https://k12techtalkpodcast.com/e/ribs-switches-predictions-k-12-tech-talk-year-end-recap/ and all major podcast platforms
Key topics include the mainstreaming of AI in K12, vendor security scrutiny (PowerSchool and Infinite Campus MFA), continued funding uncertainty, device cost, student data privacy, and looming screentime debates. Predictions? AI, screentime, vendor accountability, tighter budgeting, and more!!!
https://redd.it/1pqxah9
@r_k12sysadmin
CodeHS, Repl.it, and the like
How are you all addressing students creating/using these platforms to play games or host proxies when we cannot directly block them as they are used in instruction?
https://redd.it/1pquww4
@r_k12sysadmin
Whats the point of Clever?
We use FACTS/Renweb SIS and we have a vendor tied to simplfying attendance who wants us to adopt Clever to access SIS. From the academic/student computing piece, I don't get the point of it. It seems like it doesn't eliminate the need for managing a Google Admin console to still adjust settings and users. Google classroom is often offered for easy rostering. We don't have anyone under 2nd grade really logging in or utilizing tech. Everything I see on here is from 5 years ago. Everything ChatGPT gives me is from Clevers marketing. Can someone working in an independent K-8 shop explain whether it is really worthwhile for academic or other uses?
https://redd.it/1pqpvzo
@r_k12sysadmin
Confused Between Verkada, Lumana, and Coram for Video Surveillance
Hey all, I’m a K12 sysadmin trying to figuer out which video surveilance system to go with: Verkada, Lumana, or Coram. I’m stuck becuase all of them seem to have pros but also some cons.
We need something that’s easy to manange, secure, and can integrate with existing school IT systems. Our goal is to monitor hallways, classrooms, and enterances to keep students and staff safe, but also be able to review footage quick if needed.
Here’s where I’m at:
* Verkada looks good for its cloud-based managment, but I’m not sure about data privacy. Being in the cloud means there are concerns about who has access to the footage.
* Lumana has solid local storage, but it feels like it might be more complex to manage and scale. It’s good for areas with strict privcy concerns but can be hard to trouble shoot remotely.
* Coram is appealing because of its AI features for detecting suspicious behavoir and hybrid storage but I’m unsure about how reliable their support is and if the AI is really effective or just fancy tech that doesn’t deliver.
Any expeirences or advice? We need something that can be easily managed by a small IT team, won’t break the bank, and most importantly, won’t comprimise on security or privacy.
https://redd.it/1pw1fde
@r_k12sysadmin
Bluebook - Verified Mode
College Board Bluebook has stated we need to enable Verified Mode on our Chromebooks by 2026 or the kiosk app will break. We deploy Bluebook to all our student Chromebooks so we’re a little hesitant to just roll this out.
College Board directions are very simple:
https://bluebook.collegeboard.org/technology/devices/chromebook/verified-mode
However when you look up how to properly set up Verified Mode from Google, it appears there is a bunch more involved:
https://support.google.com/chrome/a/answer/7156268?sjid=1055704996685098588-NC
Has anyone successfully implemented this? Was it just a matter of following Bluebook directions? Did anything else break? Any gotchas?
Thanks
https://redd.it/1pzmlyc
@r_k12sysadmin
How do you handle storing and transporting large equipment for school installs?
We have a warehouse for storage, but here’s the challenge:
* Most of our equipment comes in bulk on pallets.
* Our current warehouse vehicle can’t transport pallets (or even one comfortably).
* We also can’t move a pallet jack to the schools—most schools don't have one.
For context, installs usually happen in the summer, but we often have to order months in advance due to pricing and their fiscal-year deals. Most of our schools schools don’t have adequate storage space, so pallets end up sitting in open areas for weeks/months, which isn’t ideal for aesthetics or safety.
How do you all handle this? Do you break down pallets for transport, rent vehicles, or have a dedicated solution? Looking for ideas that are practical and cost-effective.
https://redd.it/1q2afgw
@r_k12sysadmin
K12 Tech Predictions for 2026?
https://k12techtalkpodcast.com/e/ribs-switches-predictions-k-12-tech-talk-year-end-recap/ and all major podcast platforms
Key topics include the mainstreaming of AI in K12, vendor security scrutiny (PowerSchool and Infinite Campus MFA), continued funding uncertainty, device cost, student data privacy, and looming screentime debates. Predictions? AI, screentime, vendor accountability, tighter budgeting, and more!!!
https://redd.it/1pqxah9
@r_k12sysadmin
How do you handle storing and transporting large equipment for school installs?
We have a warehouse for storage, but here’s the challenge:
* Most of our equipment comes in bulk on pallets.
* Our current warehouse vehicle can’t transport pallets (or even one comfortably).
* We also can’t move a pallet jack to the schools—most schools don't have one.
For context, installs usually happen in the summer, but we often have to order months in advance due to pricing and their fiscal-year deals. Most of our schools schools don’t have adequate storage space, so pallets end up sitting in open areas for weeks/months, which isn’t ideal for aesthetics or safety.
How do you all handle this? Do you break down pallets for transport, rent vehicles, or have a dedicated solution? Looking for ideas that are practical and cost-effective.
https://redd.it/1q2afgw
@r_k12sysadmin
Bluebook - Verified Mode
College Board Bluebook has stated we need to enable Verified Mode on our Chromebooks by 2026 or the kiosk app will break. We deploy Bluebook to all our student Chromebooks so we’re a little hesitant to just roll this out.
College Board directions are very simple:
https://bluebook.collegeboard.org/technology/devices/chromebook/verified-mode
However when you look up how to properly set up Verified Mode from Google, it appears there is a bunch more involved:
https://support.google.com/chrome/a/answer/7156268?sjid=1055704996685098588-NC
Has anyone successfully implemented this? Was it just a matter of following Bluebook directions? Did anything else break? Any gotchas?
Thanks
https://redd.it/1pzmlyc
@r_k12sysadmin
Confused Between Verkada, Lumana, and Coram for Video Surveillance
Hey all, I’m a K12 sysadmin trying to figuer out which video surveilance system to go with: Verkada, Lumana, or Coram. I’m stuck becuase all of them seem to have pros but also some cons.
We need something that’s easy to manange, secure, and can integrate with existing school IT systems. Our goal is to monitor hallways, classrooms, and enterances to keep students and staff safe, but also be able to review footage quick if needed.
Here’s where I’m at:
* Verkada looks good for its cloud-based managment, but I’m not sure about data privacy. Being in the cloud means there are concerns about who has access to the footage.
* Lumana has solid local storage, but it feels like it might be more complex to manage and scale. It’s good for areas with strict privcy concerns but can be hard to trouble shoot remotely.
* Coram is appealing because of its AI features for detecting suspicious behavoir and hybrid storage but I’m unsure about how reliable their support is and if the AI is really effective or just fancy tech that doesn’t deliver.
Any expeirences or advice? We need something that can be easily managed by a small IT team, won’t break the bank, and most importantly, won’t comprimise on security or privacy.
https://redd.it/1pw1fde
@r_k12sysadmin
Chromebook WiFi / network settings
I noticed that in Google Admin Console - I have nothing configured under DEVICES->NETWORKS. Yet I have hundreds of ChromeBooks that correctly login to WiFi when started up.
Can someone confirm that the WiFi credential entered when I first turned on the ChromeBook and ENROLLED sticks with the device - and that’s where it’s getting the correct info to login?
So why would I be using/configuring the NETWORKS menu item? Would it allow me to direct WIFI SSID per OU, for example?
I don’t want to fiddle with additional configuration if everything is fine.
THANKS!
\-jeff
https://redd.it/1put0kz
@r_k12sysadmin
accounts on IFPs
looking for feedback on the following subject.
What do you do in your schools in terms of having accounts on the boards versus no account, locking the board down and basically having it as a second screen to your computer?
We have Promethean AP seven boards which, according to Promethian does not have the ability to lockdown the guest account without removing all other accounts i.e. just having the admin account available.
My principal is complaining that students are accessing the guest account (which has no password because that’s how Promethean does it.) to watch YouTube on the smartboard. The issue is that currently teachers sign in the board with their own unique password and utilize the board and some of them utilize it to watch YouTube in their classes. I don’t really see any other option to otherwise say absolutely no YouTube or you’re gonna just have to suffer the consequences of YouTube.
https://redd.it/1puco8j
@r_k12sysadmin
Has anyone made the switch to soft-phones?
Our district has been using a VOIP PBX for quite some time and have recently been charged with looking at other options. Our PBX ties into the school intercoms for all-calls and access control system (unlocking the door for visitors via phone). Has anyone else made the move to soft phones? Which solution did you pick? What were the challenges, user feedback, and how did you solve these problems? Any input is greatly appreciated!
https://redd.it/1pqtp3y
@r_k12sysadmin
Do you use MFA to protect staff computers? Why or Why Not?
Our district has Duo rolled out to our Windows fleet, and staff more-or-less got used to it. We've had some changing of the guard in our tech leadership, and the question came up: Do we *need* MFA on our staff computers? Versus just servers and cloud services (Google, Microsoft, Adobe etc).
I'm generally of the mindset of "MFA ALL THE THINGS!" But I can also see some counter arguments:
1. From a convenience standpoint, Duo prevents us from using Windows Hello / Biometric authentication (which I think our teachers would love)
2. Regarding the possibility of a student gaining access to a teacher's device, we're more concerned about a teacher leaving a computer unlocked vs a student obtaining their password (not saying it couldn't or hasn't happened, just what's more likely).
So I'm curious to see what other orgs do. I'm trying to be mindful of the balance between security and convenience and as we do some healthy evaluation of our strategies. Not sure if there's a shift in mentality that's happened that might challenge "conventional" wisdom.
I'm also cognizant of the possible insurance requirement, I'm not sure what our policy says regarding MFA. Possible the policy requires it which renders other considerations moot.
https://redd.it/1pt3365
@r_k12sysadmin
YouTube shorts.
Just wondering if there’s a way to block the YouTube shorts section specifically. For reference we have the free version of google enterprise and for content filter we use a sonicwall. Admin grants restricted access to YouTube but I’m wondering if there’s a permission I’m missing on the google admin side to block kids from just mindlessly scrolling the shorts section specifically
https://redd.it/1pre8hr
@r_k12sysadmin
Printing blocked on Chromebooks after adding wildcard
I was instructed to block all URL's on our chromebooks however, that now caused the printing features inside of Chrome to stop functioning even though chrome://print and chrome://resources were added to the whitelist. Any ideas?
https://redd.it/1pqsw1i
@r_k12sysadmin
iReady Testing on iPads Locking the device
Has anyone been doing iReady testing on iPads recently? Last week we did some iReady testing and about 3-5% of our iPads at campuses completely locked up in the middle of testing. They Locked-up to the point where campus techs were claiming they wouldn't event take a reset with the power/volume buttons. The assessments were running fine until some random point in the test, and not the same question for each device.
It seems fairly random.
Interestingly enough, at least one Chromebook was affected with a similar lockup behavior last week as well.
For the iPads, They're all:
* 11th Gen iPads (a16)
* Running some flavor of iPadOS 18 (supported per iReady's documentation)
* In Logitech keyboard and mouse cases
* Have the same configuration profiles
Just wondering if anyone has experienced any similar behavior recently with this platform on mobile devices.
https://redd.it/1pqp1xa
@r_k12sysadmin
Anyone seeing a dramatic increase in Calendar phishing?
We've had to field 4 separate Calendar invite phishing events in the past month. We're locked down so the primary Calendar viewer can't see the invites but whom ever has share/edit access to that Calendar can see it and interact with it. Format has been a link to something plus a PDF file that also contains the link. So far, the primary domain's hosting these are: *[.]cruwaisho[.]sa[.]com they like to make multiple events spanning a week to a month. It's a spray campaign as well, sometimes though a BEC, that's usually a small subset of the district personal, around 30-60, %1.25 of the whole.
https://redd.it/1pqqxmo
@r_k12sysadmin
