-
Reddit’s r_k12sysadmin Credits: @r_channels @reddit2telegram
Recommended Summer Maintenance with Dell Chromebook 3100's?
I'm a long time Windows & Apple tech, new to ChromeOS & Chromebooks. I'm planning ahead for this summer. I work in a small school, about 250 three year old Chromebook 3100s. We will be collecting them from the 1-to-1 students in June. My question is, what is best practices to do with them over the summer? I plan on cleaning them since the students are filthy. I was thinking of Powerwashing all of the devices. Is this needed? Necessary? A good or bad idea? Should I update the ChromeOS? What's the best way to do this? I assume there is a way to push it out from the Admin Console, but won't I need to power up all the Chromebooks for the update to be pushed out? Is this push process 100% no-touch automated? Or will I need to manually reboot them? Do you have any other suggestions on what I should do with them over the summer?
Thank you all for your time and assistance!
https://redd.it/1bil0et
@r_k12sysadmin
Dukane bell system phone stopped working
We've been using a Dukane bell system phone for over 20 years to do the daily bells at our elementary school. It no longer powers on, and the principal is asking if we can use something else. I've seen a few older threads on this topic, but I'd love to hear some options that will be versatile and feature rich while hopefully minimizing fuss. Thanks in advance!
https://redd.it/1biir4c
@r_k12sysadmin
Disabling split-screen functionality on Chromebooks?
Recently found out that kids can get around our classroom management software by opening a second browser tab and then splitting their screens between the two. Does anyone know what the setting is to disable that functionality? Google support, my vendor for the software, nor does my Google-fu seem to be helping here. Anyone have that info by any chance?
Google's Response
https://redd.it/1bhwvco
@r_k12sysadmin
What Would You Ask Your New Principal?
I'm part of the interview panel for selecting a new principal at our high school, what question(s) would you ask a potential new boss to gauge their compatibility with your campus?
https://redd.it/1bhzrpd
@r_k12sysadmin
FreePBX - Purchase Orders
Anybody have experience purchasing licensing for FreePBX using a Purchase Order and mailed check?
Whether direct with Sangoma or using a reseller?
https://redd.it/1bhxwis
@r_k12sysadmin
Gyms are for PE, not the SAT.
https://k12techtalkpodcast.com/e/episode-158-gyms-are-for-pe-not-the-sat/ and all major podcast platforms.
The guys discuss a security bulletin from Papercut, the launch of the digital SAT, and the release of an artificial intelligence framework for district leaders by ILO Group. They also address listener emails, including a question about parental access to web filters. The main topic focuses on tips for preparing for online testing season and large-scale assessments, prompted by a listener's story about a failed testing attempt in a cafeteria.
https://redd.it/1bhuwsm
@r_k12sysadmin
Chromebook Cases for Taking Home
We are looking to purchase a bulk order of Chromebook cases for our students this coming year as we did in the past. We went with UZBL the first time, which included a pocket for the charger. The case isn't bad, but the quality is fairly poor. The zippers break very easily and fray along the stitching. Some of them had the charger pocket on upside down, Some had our logo upside down. It was just poor quality. The handles also seemed to break fairly quick as well.
We are looking at the Higher Grounds Datakeeper 2.0 right now, but I wanted to get other people's thoughts. Any recommendations?
https://redd.it/1bhorhs
@r_k12sysadmin
Acer laptops advice experience?
We're having to get quotes on our device rotation. Acer is coming in strong with something we want. I have no experience with Acer. Any advice? good bad?
Thanks in advance.
https://redd.it/1bh7zit
@r_k12sysadmin
Should I feel guilty?
Would you feel guilty applying for another job in the middle of a major project you're headlining and in charge of?
https://redd.it/1bftlmu
@r_k12sysadmin
Has anyone tried Starlink for a backup connection?
My boss asked me to investigate options for redundant internet connections after a car accident took out a telephone pole near our school. Since all the wired options come through the same poles, I was wondering if Starlink might be a viable alternative. I've seen articles about it being used in rural schools and it seems to be robust.
Does anyone have any experience with Starlink in a school?
https://redd.it/1bfdt3q
@r_k12sysadmin
Be on the lookout: Reddit's new paid ads look exactly like user posts
If you aren't aware, there are paid advertisements that can now look like user posts.
This community in particular, where access to post is vetted could be manipulated because of this. There are no moderator tools for advertisements and unless I am missing something, it would be trivial for vendors who previously had no access to simply pay for an advertisement targeting the community that looks like a legitimate peer post.
​
https://redd.it/1bevwd3
@r_k12sysadmin
Snipe-IT inventory & Google Ldap.
I was told at my District the "Main" inventory charges by user and to just keep spreadsheets and hand them in every once and again for changes, I know its stupid so that's why I spun up a snipe-it instance on a old machine and a backup on another old computer and put it in another network closet. Anyway I have been attempting to integrate our google users with LDAP, I made the service enabled it allowed user read, imported the Cert and Key, and made credentials in the service to use in the snipe-it ldap.. But I keep getting a invalid credentials message!
What do?
https://redd.it/1benqet
@r_k12sysadmin
Rammerhead and Interstellar Proxies- How are you handling these
Hello All,
I have been looking at some YT videos and that are listing all of these proxy addressed to get to these 2 browsers and normally, if it is a random weird domain I just put the domain in (apps.dj) for example to be blocked. One of the urls was 11-10-24.apps.dj. I assume they just make a new one each day. Does any have a good way of dealing with this. Anybody have a compiled list of sites. I am not wanting to check out the links because who knows where they go. If you have not looked at these you may want to. Our filter gets a few of these already but certainly not all of them. Any suggestions and sharing would be welcomed!
​
Thanks
https://redd.it/1bel4nd
@r_k12sysadmin
Dameware Alternatives - Remote Support
Hello all!
Was hoping to get some feedback from everyone as far as what they use as remote support within their district as well as maybe some recommendations that might line up based on some requirements we have in place.
Right now we use Dameware Mini Remote Control. While this program looks like it is still stuck in the early 2000s. It still works perfectly the way we like. We do not have to require a user to give us an access code or anything along those lines. As long as the device is on our network and is seen by dameware in active directory with the agent installed on the client computer, we can get to it without any issue.
We want to move away from it for a couple of reasons.
Agent/Software doesn't get updated as often as we'd like and has some issues with Windows 11 installs from time to time.
Unless we install the fully fledged server version and set up a Proxy/DMZ we can't remote help anyone outside of our network. (Unless theres a newer version I haven't seen)
SolarWinds support is spotty at times but overall useless in our experience.
SolarWinds sales literally drives me up a wall and has resorted to some weird "threatening" tactics that we will lose some very important things (literally they aren't) if we don't renew soon.
Are there any remote support tools that meet the following requirements?
Lightweight agent
Cloud or OnPrem
No access code required to connect to a device (obviously our current setup warns users when we connect)
Can connect to devices outside of network (obviously domained with an agent)
\Bonus* Integrated with IncidentIQ?
Any feedback is great feedback, so thanks in advance!
https://redd.it/1be56dq
@r_k12sysadmin
want to quit.
\- Get a standing desk, and save yourself from a life of unnecessary back pain and insomnia and insulin resistance.
Interpersonal Relations and Networking
\- Ask tons of questions if you actually want to know the answers. Most people love talking about stuff that they do, so ask away. Don't, however, keep asking the same questions over and over. People will stop answering your phone calls and emails, and you deserve it if they do. Write down the answers.
\- If you ask someone for help—specifically, someone who you know knows how to do what it is you want to do—don't be a jackass when they give you an answer that doesn't make sense. Remember, you're the idiot in this situation, not them. You don't get to tell them that they're wrong until you've given an honest shot at their advice...gift horse in the mouth and all that, whatever that means.
\- Follow Schwarzenegger's advice and always be useful. Don't wait for someone to ask you for help. Assume they do, and let them tell you they don't.
Industry Insights
\- IT is an incredibly broad, interconnected, and ever-changing field. You never know which skill that you currently think is stupid will bail you out of a bad situation 10 years from now.
\- Imposter syndrome is real. Be humble, be gracious, work hard, and it will go away (until you start a new job).
\- A system administrator is a jack of all trades, master of none. A great system administrator is a jack of most trades, an expert in one or two of them, and a master at dozens of small tasks. They know enough to know when they need help, and they have a network of experts to call on.
\- If you want to know what the job is really like, go to the sysadmin subreddit, or k12sysadmin. It's a pretty good representation of the good, bad, and ugly elements of the job.
\- I like being a sys admin because it feels like an exponential idle game...you're basically in the business of manufacturing time; like "Cookie Clicker". When you start, you're running around to computers, manually fixing tedious problems (you're clicking). After a while, you add a tool that lets you get to those computers remotely to save you a trip; same results faster. Then you figure out how to monitor for that problem, and create an event trigger that notifies you when it happens before the end user even knows. Now you're 10 times more effective than you were. After a while, you get so good at fixing the issue that you write a script that fixes it automatically, once the event trigger catches it. Now you're 100x more effective. Eventually, you might get so good at fixing this specific issue that you design and develop a tool that other people in your field can use to fix the same problem. Now, you're 1000x more effective.
\- Most of your colleagues who aren't your immediate peers, won't know what you're talking about when you get into details. They also don't want to hear any of the jargon. They only care about what is affecting them. This is a hard lesson that has taken me almost two decades to figure out. Save yourself a lot of trouble; if you want someone to care about your problem or project, take the time to put it in terms they understand and pain points they can feel, and get to the point as quickly as possible.
\- You can make however much money you want as a sys admin. You can see what I make online if you want. Objectively, it's on the low end of the nationwide average, but it fits my life, which is what is most important to me. When I want to make more money, I take on side projects (working for the school district gives me the flexibility to do that), and I routinely charge a rate anywhere from 3-5x what I make here. If you get good enough, your income is only limited by your ambition.
\- Stuff doesn't "just break". Error messages don't "just pop up" for no reason. Everything in IT happens for an objective reason. The million-dollar question is, is it worth finding out? Rabbit holes make for fun adventures, but learn how to triage effectively so you don't die in
Device refresh is going from desktops to laptops. What problems am I not thinking about that will be unique to laptops?
Our 5 year, more like 8, device upgrade is here and I am getting procedures written up(feel free to share if you have a template or example of those. I just asked ChatGPT to make me a basic one), finding apps we need to standardize, inventory, the whole shebang. I just feel like I am missing something when it comes to the difference between laptops and desktops...
Will I need to make a local account specific to that teacher if they are going to be taking it back and forth from school and home? Are there certain programs that we should think about adding that make more sense on a laptop? Am I going to have to delete dozens of copies of USB printers from them plugging and unplugging it since my director doesn't want networked printers? If I am missing anything obvious let me know. If I do it right the first time then I only have to do it once, ya know?
https://redd.it/1bikafg
@r_k12sysadmin
Examview -> Echo360?
Has anyone here migrated from examview to now echo360? From what I’ve read, echo360 must have bought out EV and EV will go EOL June 30th. Has anyone migrated to Echo360? Were you able to use your existing EV test banks? And what kind of cost is there (ballpark, but didn’t notice pricing on the site). I just learned of the EOL of EV tonight from one of our faculty members…
https://redd.it/1bi912b
@r_k12sysadmin
Downloading Music for IEP/Specific Student Use
Welcome to another round of IT gets dragged into promises made by another department.
I'm still waiting on the full details myself but the short of it is we have a student that gets music as a reward. This will be provided, theoretically, by an mp3 player that they've already acquired and I'm hoping will be compatible with one of my ideas. I've also dug out a brand new cd player so if we can somehow wrangle a disk that will probably be my back up plan.
My main issue, equipment compatibility aside, is would this use case be subject to being outside the normal terms and conditions for options such as Youtube Music or Spotify? My current thought is to have them pay for a premium account and use that to download the mp3 files. This use case is directed towards one user and is sort of along the lines of personal use, though we have another student that may benefit. Another thought would be to buy the music directly via Amazon Music or iTunes but then we'd have to keep that account around rather than just ending a subscription when it isn't needed anymore.
Has anyone else had to set up something similar?
https://redd.it/1bhxdyp
@r_k12sysadmin
How many days do you work?
I currently in a sysadmin role at a school district and work year round on an hourly rate. I will potentially be taking the IT Director position for the next school year. I was wondering what position do you work and how many days are you contracted to work? I am thinking about negotiating down to less days even if it comes at a lower salary. Having a kid soon and would like to have more time at home than at work.
https://redd.it/1bhz9kj
@r_k12sysadmin
K12TechPro Community Membership is FREE
The K12TechPro Community is free to join thanks to sponsorships (click sponsorship on the last page when signing up). We're currently at 600+ vetted k12 techs in 48 states and beyond. Join for private message boards, chat, article discussion, podcast discussion, weekly vitals calls, swag, special Google licensing pricing, and more.
Go to https://k12techpro.com/ and click Community and "sign up."
https://redd.it/1bhuzfp
@r_k12sysadmin
Google Admin - Any possible way to see who signed into a chromebook when the device and user are on different domains?
We have a unique situation in my district where, for reasons beyond our control, our chromebooks are in one domain, and the users signing into them are in another. In GA, we can see that *somebody* signed into the device, and at what time, but not the specific user. Is there any way to be able to see the exact user who logged in, even if it's a paid service?
https://redd.it/1bhpth7
@r_k12sysadmin
No cell phone policies and MFA
It only takes one bad video and then the district bans cell phones during the day for students. On the edge case with juniors/seniors taking college credits and the local universities are requiring MFA for all and pushing Microsoft MFA/Duo mobile/Okta Verify (some are still allowing voice/sms but it’s the same issue), how is your area/region handling this scenario?
https://redd.it/1bhlhy3
@r_k12sysadmin
Do you give staff admin rights to their work issue device?
A few years ago I did a domain migration for our local college domain to the shared dioceses domain and as part of the process staff were NOT given admin rights as the previously had on the local college domain.
I explained that this was for security reasons and that staff had access to Workspace ONE (our MDM) and could download all they needed from there and if there was anything that wasn’t on there to submit a request and it could be made available. I also explained that it would mean that staff and students would have the same user experience and so that if staff could do something (other than content filter) that they could be assured that students could do the same thing.
I feel that this has worked well and has caused only minimal issues (I think I have only had one staff member request to be able to install a home printer and they never got back to me to arrange a time for me to do a remote session with them to get this installed).
Fast forward and with the start of a new member in leadership the topic of local admin rights has come up as the new member of leadership was unable to install something on their device during a training day and is being told that other schools in the dioceses allow staff to be local admin of their college issued device and that not having admin is “the old way of doing things”. The requested software was already available in WS1 and was available for install by all staff and once I issued the install command it was installed in a matter of seconds all remotely (I don’t blame the staff member for not checking to see if it was available to them and to be honest I had forgotten that I had put it on WS1).
While I know that the dioceses does in fact recommend that staff have local admin rights I disagree with this suggestion but also wanted to do a sanity check to see if things have indeed changed and that not giving admin rights is “the old way of doing things”.
So the simple question with a complex answer, do you give staff admin rights to their work issue device?
View Poll
https://redd.it/1bgmcf0
@r_k12sysadmin
MFA on shared accounts
I am currently in the process of activating MFA across our Google accounts and have ran into a possible issue.
We have generic shared accounts, things like communications@xxxxx.org, that all school communications come from. Several people have access to this account so it's kind of hard to lock it to a specific phone number.
Does anyone else have emails like this and if so how did you handle it?
https://redd.it/1bfgm39
@r_k12sysadmin
Apple iCloud Private Relay and School Netowors
So I am fixing our guest network and planning on working on the other networks soon.
I ran across Apple's iCloud Private Relay when testing our Securly and found it would allow the users to bypass filtering on our guest network.
Question I have is, are you blocking the 2 urls to stop the private relay or are there better methods?
I am mainly looking to make sure people can't use our guest network maliciously if they get on it.
https://redd.it/1bevymd
@r_k12sysadmin
Certication (vetting) process for apps/extensions/websites
Has anyone developed a useable process for vetting online "products" (edtech or otherwise)? We constantly get requests to allow and/or add apps/extensions/Google Admin-blocked websites. We are finally starting to take certification seriously, but the process to verify security and privacy compliance, valid business use, etc. is VERY time consuming. We have a prototype process, but it has 8 decision points and is, in my view, over-complicated. Wondering how others deal with this? How do your faculty/staff submit requests, what is the approval process, and is there a timeframe for submissions and timeline for completing the process?
https://redd.it/1benfof
@r_k12sysadmin
Forced Password Changes
Would like to see where everyone stands with forcing password changes at a timed interval. In having a conversation with a collogue he believes that passwords should be force changed every 90 days. I pointed out this goes against current NIST guidelines.
I am curious what everyone is doing.
View Poll
https://redd.it/1bekbjf
@r_k12sysadmin
Cisco 3105 vs Fortinet 401D
We are a mid-sized school district. Due to EOL, we want to replace our existing Fortinet 600D firewall with a new model. We received two responses for our 24/25 eRate 470 submission. We have been quoted a Cisco 3105 and Fortinet 401D. We are happy with Fortinet experience the last 5 years.
I would appreciate any feedback that anyone can provide regarding the pros / cons of the two models or why we should go with one over the other.
​
Thanks.
https://redd.it/1be5wko
@r_k12sysadmin
one.
https://redd.it/1be0l9w
@r_k12sysadmin
Similarly, if you have to be asked to work on computers, you shouldn't be an IT pro...if my son wanted to be a professional guitar player, but only practiced when I made him, I'd advise against him having dreams of being a professional guitar player.
\- Don't BS people in a technical interview. They'll know you're full of crap, and you won't get the job. Just say you don't know. Then ask what the answer is, write it down to read more on it later. In doing so, you'll show honesty and coachability. You might even know the answer once they give it; several technologies have different proprietary and slang names. You might get to share direct experience that you have with the question that you just "got wrong". I didn't know what ILO was in an interview, but after he explained it to me, I got to educate him on DRAC.
Technology and Tools
\- There's a free and/or open-source alternative to almost every piece of software. It's not always as good, but sometimes it's actually better (I'm currently dabbling in video editing, and Davinci Resolve kills Filmora). If there isn't a free alternative, then the best product out there is usually worth paying for.
\- Don't be afraid that AI will take your job. It might, but in the meantime, your time is better spent making AI work for you. Make it work for you, and others might pay you to make it work for them. On a side note, Google has been around since 1998, and no one who pays me to use it has ever used it themselves.
Fundamentals and Best Practices
\- If you have no idea where to start, you'll never regret learning basic networking. If you think you want to code, but have no idea where to start, try Python.
\- Backup everything you care about. Follow 3-2-1. It sounds overly redundant. Unfortunately, it's not.
\- I struggle to think of a single field in IT where you, as an IT pro, don't have at least some say in security. Don't be lazy. You're going to go back and reset that default password later?...you won't, do it now. Don't skimp on security because you don't want to inconvenience people. People will be way more inconvenienced when their life's work is encrypted by ransomware, and you'll be the one they blame. Your customers don't know what's good for them. You do, so give them what they're paying for.
\- I also struggle to think of any job in IT where testing is optional. Test everything. If you didn't do your due diligence testing a new process or update, it's your fault that everything is on fire.
\- Of course, don't be afraid of starting fires. You will absolutely break things. You HAVE to fail in IT to make progress. It is unavoidable. No one ever is an exception. This is why we have testing processes, backups, and security measures...keep the fires fun...don't burn your house down.
Work Ethic and Efficiency
\- Write stuff down! No matter what you do, take notes. You say, "oh, I've been working on this problem for 13 hours straight in the middle of the night. There's no way I'll ever forget what I did to solve it"...yes, you will. Unless you want to spend 13 more hours three years from now when it happens again, you'll write it down. I've learned this the hard way.
\- If there's something you hate doing in your job, get rid of it. Find a way to make it go away through an upgrade, a process improvement, or outsource it and make it someone else's problem. IT allows you this flexibility more than any other field I know of. If you're lazy, but not afraid to work really hard every now and then, IT is the perfect field for you.
\- Make checklists. Complacency kills. Even if you've done a job 200 times--especially if you have--make a checklist. You don't have to do this with inconsequential processes, but if you care about the outcome, you really should.
Continuing Education and Growth
\- If you're ignorant about something in IT, don't quit because the first day learning it didn't live up to your expectations. Everything will let you down if you think this way. Stick with it until you're no longer making progress, then decide whether or not it's something you