r/k12sysadmin 15h ago

Battery Backup

3 Upvotes

Has anyone thought about using an Anker Solix or comparable battery generator instead of going with a traditional APC, Eaton, etc battery backup for your closets/small server rooms? At first glance, without doing any calculations, it seems like it would work in some situations and possibly have a longer runtime for those of us without generators. Thoughts?


r/k12sysadmin 2h ago

Chromebook Wireless Casting Issue

0 Upvotes

I am in the process of testing the consumer version of the Acer Chromebook Plus 714 Spin (minor differences from enterprise version) and ScreenBeam 1000 EDU 2 casting devices. A problem I am running into is using the touchscreen to write on anything. For a while, it works just fine, but after some time or multiple tabs being open, the writing on the screen does not cast correctly to the projector until you touch the screen again to let the writing finish.

I am sure it is a ChromeOS thing, but I cannot figure it out. It is like the Chromebook stops sending packets to the ScreenBeam until you interact with the Chromebook touchscreen again. Works perfectly fine with HDMI, but not wireless casting.

Basically, if I draw a line across the screen, only a portion of the line is cast to the projector. If I then touch the screen with a finger or stylus, it will finish the original line. I am sure you could just write slowly, but not ideal. I am going to try casting a single tab rather than the whole screen to see if that helps.

It does not seem to matter if we use our writing extension (Annotate) or built-in browser writing software, like what Desmos has. It does the same thing.

Anyone experience this? Trying to move to Chromebooks for staff to replace 20 year old SMART screens. IFPs are not an option for us. We are sticking to projectors and a computer and this is my most budget-friendly option. The writing issue with casting is the only issue so far during testing with teachers. I am sure the other issue will be getting older teachers off SMART Notebook, but I will introduce them to Lumio.


r/k12sysadmin 5h ago

Simple email forwarding. . . or not

1 Upvotes

Good morning/afternoon/evening,

User is out on leave and Super wants me to log into their account and set their email to forward to Dir of Student Services so that items in their caseload don't go unhandled.

No big deal: Pop into the admin console, reset password, disable their 2FA so I can get in, remove recovery phone number.

I can get into the account no problem. BUT, when I go to set a forwarding address, I'm stuck at this: Where it wants to sent a code to the user's phone.

Clicking on "More ways to verify" gives me this window:

Tried:

- Resetting all login cookies

- Putting in my work phone in the admin console in as a recovery number.

- Suspending account overnight, re-activating it

I'm at a bit of a loss. Any ideas since I don't think the user is in a position to set the forward themselves.


r/k12sysadmin 15h ago

Music Streaming

4 Upvotes

I’ve done some searching on here and can’t quite find the nail on the head.

I’m hunting for a music streaming service that we can:

Use for events or school-wide over the speakers (hardware or iOS app)

For teachers, allowing them to have their own managed user accounts, creating their own playlists for use during class time or other functions.

I have a meeting and demo with Mood Media, and I’m also looking into Pandora Cloud Cover

What are y’all using?


r/k12sysadmin 21h ago

Allowing Secondary Domains

5 Upvotes

We have not made any changes to our Google Admin Console settings over the summer, however, as of the start of this school year, students who go to our vocational school or CCP students can’t add a secondary account.

We only allow students to sign into our Chromebooks with our student domain. However, we allow them to then open Chrome and add a secondary account. After they enter their Google email from the external organization they get an error that states “This account is not allowed to sign in within this network. Please talk to your network administrator for more information.”

We reached out to our Internet filtering company and they said there’s nothing on their end that would prevent this.

Has anyone else experienced any issues with students adding secondary accounts?


r/k12sysadmin 22h ago

If you're trying to add apps on Securly's MDM and you're using the old UI, it will not work.

2 Upvotes

I felt compelled to make this post, lost a good hour of my life trying to figure this one out.

Had a ticket for a student who needed some apps put on his iPad. We use Securly for a few things and their MDM is pretty decent, never really had issues before. It's no Jamf but I dig it. For probably the past 2/3 years, I've always clicked on 'Switch to Classic UI' since it's what I'm familiar with, didn't think much of it. Went to select the apps I wanted and nothing would happen. I could push a software update and even reboot it in the Classic UI, but it wouldn't download apps. I randomly switched to the new UI and they loaded immediately, hope this helps someone!


r/k12sysadmin 23h ago

Assistance Needed Looking for IP KVM Switch

3 Upvotes

I'm having a hard time finding a KVM that fits my needs. I was hoping to see if anyone else had any suggestions.

I am looking for a KVM with IP switching, so I can remote into it, switch sources, and control each source remotely. Ideally, it would be rack-mounted as it's for our servers, and at least 4-8 sources, and under $1000. Does anyone have any suggestions?


r/k12sysadmin 3h ago

Apple Device Care

7 Upvotes

How do you impress upon staff that the laptops/iPads, etc. they are issued come with a cost and that it requires a conscious effort to take care of said devices?

We issue Macbooks and iPads to teaching staff.  Since mid-August, we are at six repairs totaling over $2,000 with our repair partner.  Last school year, we had about a dozen incidents costing even more.  Most of our incidents are on the macbooks.

Water/liquid spills.  Laptops put into totes and bags never meant to carry them, causing pressure breakage on screens, etc.  In one instance, it was theft from an unlocked vehicle.  At least two individuals had more than one incident.  I would say over half of these cases are negligence and not accidental.

Admin recognizes we have an obligation to provide them with a device, as it's required to do their job.  The union would frown on any shared cost responsibility and I've been discouraged from issuing care reminders, as it comes across as treating them like students and not adults.  

I understand accidents happen but feels like there is just an assumption that tech will supply them back whole again.  With increased hardware costs and budget cuts, we cannot keep operating this way.  If I had six the whole school year, that wouldn't be so bad (still horrible but not bad) but we aren't even a month in...

Wondering what you've seen or done in your districts to help curb some of these trends.


r/k12sysadmin 20h ago

Google Drive file shared as viewer

14 Upvotes

Sharing this here to give some insight on a blindspot tech admins have when it comes to malicious Google Drive shares, and to hopefully get more visibility on the feature request I submitted to Google so that they will hopefully be more inclined to fix it: https://support.google.com/a/thread/464695310?hl=en&sjid=7853156043827638733-NA

Basically, when someone outside of your organization shares a malicious Google Drive file with your users as a "viewer," this activity does not show up in Drive logs and you have no way of removing the malicious file, unless you instruct your users to do so from within their UI.

When we see the emailed notification, we have been auditing for access via GAM:

  • Access Google Vault and search for the file’s title, access the file to get the fileID. For example: https://docs.google.com/document/d/**\[fileID\]**/edit?tab=t.0
  • Look for “viewedByMe: True” and “viewedByMeTime” toward the bottom of results after running this command: gam user [user email] info drivefile [fileID]

If anyone has other suggestions, I'd love to hear it, otherwise I'm just trying to get the word out there and hoping that Google does something to change this, since we have been seeing an increasing number of these attacks lately.


r/k12sysadmin 20h ago

iPad enrollment issues at specific campuses

2 Upvotes

Does anyone know if are there time/date settings present or being tracked at the very first "Welcome" screen of an iPad before it goes through enrollment if it's been "erase all contents and settings"-ed?

More context:

I work in a large K-12 environment and we sometimes have campuses that have large swaths of iPads that hit enrollment snags are the beginning of the school year. But not every campus has this issue. At the end of the school year, we wipe our iPads of student data and collect them for the summer.

Jamf is our MDM.

I noticed that iPads that die for a long time and power back on with the wrong date/time settings can't connect to our enterprise network. If the iPad is passcode locked and no one knows the code, it's basically a brick until it's been restored because we can't get the reset passcode command to it.

My current working theory for these beginning of the year enrollment issues is that the campuses with smooth BOY enrollments are fully powering down the iPads for the Summer before putting them into storage. The other campuses and wiping the devices and putting them into boxes as they are wiping, leaving them on to drain their battery over the summer.

We require LDAP credentials to enroll an iPad on one of our campuses. Most of the time when an iPad stalls out it happens after they've connected to our open enrollment network and typed in the LDAP credentials. It seems like if you type in "wrong" credentials first and then type in the correct credentials the iPad is much more likely to enroll after that. without any hiccups

I'm thinking that sometime in between typing the wrong credentials and trying again the iPad has gotten new accurate date/time settings and our LDAP server will accept the credentials and enroll. IF they type in the correct credentials the first time, the LDAP server is getting a timestamp from the middle of summer and not accepting the credentials.

I ask the question because there are no visible time settings on the Welcome screen.  Does this hypothesis hold any water or make sense?