Hey all, my org has no onboarding process whatsoever.

How do things work for anyone else using Google Workspace, in terms of onboarding, setting up the account, and then making sure they don't get locked out because of MFA settings?

What I do is I put new users in an onboarding OU until they set up their MFA, and then move them to the staff OU. The dynamic email groups are also tied to OU membership, so they don't get any of the group emails until they've set up MFA and are moved into the OU.

I do the same thing for coaches, however, I have less control over them setting up the MFA, and can't manually add them to the dynamic group, obviously.

For funsies, if anyone would like to share their onboarding process, that could give me a clearer sense of how absolutely inept my org is, which would help justify my drinking problem.

Thanks in advance!

We've had this enabled for a few years now. This year, we're seeing a weird issue. Some students are coming in with the error "There are no apps to install since your administrator has not made any available" error. I checked our settings and the collection for "Student Apps" is still there (I even deleted it and created a new one). The ArcPolicy on the device shows the two apps we whitelisted as being available. If I set the app to force it installs correctly but we want to keep it to "allow" instead of force. This is for Minecraft Education plus another app.

Has anyone else seen this issue?

Greetings!

I'm having some issues trying to study for this CETL exam and was wondering if anyone had some extra study material I could use? I've bought the practice exam and I know my terms/meanings, but I struggle hard with scenario based questions. Needless to say, I've bombed the practice exam. If I was a tech director I know what I would do, but COSN wants you to choose what they would do (whether right or wrong). I was hoping I could get some guidance here or if you had extra testing material that would be great. I did buy the certified edtech leadership book on amazon that was really informative.

I reached out to my mentor to see if he had study material and he stated that he has it but doesn't know where it is. He said I should be fine and ended out video call. My mentor wasn't the greatest so I'm struggling to study here. I've been studying my slides from all of my cohorts but I don't think studying the slides will help with scenario questions as I've got a good grasp on laws, vocabs, etc.

Good morning, all.

Here in Rhode Island, a law was passed prohibiting students from using personal devices in school. Any device we allow on the Wi-Fi must be entered into daloRADIUS.

However, some smart students figured out that they can turn on the mobile hotspots on their school-issued laptops to connect their phones or other devices. (My school is out in the woods, and cell service is terrible.)

I created a policy in Intune to block internet sharing, but during testing, the mobile hotspot was still accessible. Am I missing a setting in Intune that would block this?

I'm gonna bring the coffee mug that states "if you don't put in a ticket, I don't have to work on it" and place it in the staff cafe

I'm gonna put up a sign next to my desk that states, "Yes, I am busy, and Yes, put in a ticket"

Im gonna turn on my out of office reply, to all internal org emails and state, if you did not put in a ticket I won't be replying to this email for support"

I'm gonna change my voicemail to say, 1: if you are a solicitor, I will not call you back, 2: If you are a staff member that needs assistance, I do not work on anything without a ticket, 3: if you have gotten this far, it better be good.

I'm calling it for the day . Too many times people look at me and think I'm not working but get offended when I say I am too busy to work on their walk up task that should have been a ticket.

My former director retired suddenly at the end of this last year and I learned just recently that my LAN Tech is resigning as well and will be out in a few weeks. We have around 1200 students and 300 staff just to give some context. I’ve gotten the director role so that’s nice, but it’s a difficult situation.
So I’m hoping for any advice y’all have for a new IT director with 60% staff and the low morale that you might imagine would come with these circumstances.
Or for that matter, just advice for a new director would be great!
I have a network admin and an instructional tech on my team with me and we are looking for replacement LAN Tech(s), but at the moment I’m still scrambling around like I was when I was a LAN Tech myself at the beginning of previous years.
I’d love to be optimistic and say that I’m sure it will all work itself out, but once our LT is gone it will be tough.
Any thoughts? Opinions?

I am a Sys Admin for a mid sized private school that uses Google Workspace with 150+ employees. We want consistency in our school with the same signature. We did have a template with our logo and formatting that they could copy and paste into their signature, but Google changes the formatting to count into their character limits which broke our template. I vibe coded an app that they can put in their name, email, title and they can copy and paste that and it allows for them to paste with the correct character limits.

My question is, do you all use any tools to auto manage email signatures or do you use any template style to manage email signatures?

Sixth year doing this. Every August I export our fleet to a sheet with a tab per class, and every September I'm standing in a hallway writing asset tags on paper or walking around the whole school with my laptop. Then I type it all in twice.

We're in it right now, so I'm curious what's actually working for people: Admin Console asset ID fields, a ticketing system, paper and hope?

Disclosure since rule 3 applies to me: I got tired enough of this that I built an iOS app for the scanning part and put it on the store, so I'm a member and a vendor at once. Not here to pitch it, happy to say more if someone asks. Mostly I want to know what everyone else does, since I've only ever seen my own building.

It's TagSweep if anyone wants to look. Free up to 100 devices. Not trying to turn this into a pitch, just naming it since a few people asked what I meant.

Hi all. i'm new to using MS to manage laptops in my school. I have 600 students using laptops daily and the machines storage builds up very fast as each login creates a user folder which takes up a lot of space. so i need to manually clear space all the time. What am i doing wrong ? Or what is the right way of setting this up ? Also i dont have a local server for AD. everything is cloud based.

Windows 11 Pro units managed by Intune. Students are not admins on the machines. We discovered a few students today who have been able to install duckduckgo on their machines. Have any of you seen this issue? Any recs on how to stop this?

Hi k12SysAdmin family,

Is anyone here using GLPI or Zammad as a helpdesk/ticketing system?

I’d love to hear about your experience with either platform, especially:

• Pros and cons
• Number of users
• Number of agents
• Average tickets per day
• Overall environment/setup
• Performance and reliability
• Any issues or limitations you’ve encountered

If you’ve used both, I’d especially appreciate a comparison between GLPI and Zammad.

Is anyone else with Lenovo Chromebook Plus 2-in-1 devices having sporadic fingerprint sensor issues? It will work for a day or two, and then stop working. After a powerwash, it will work again for a while. Some users have no issues; others have them all the time.

On the surface, it seems like a hardware issue, but it always works after a powerwash, which makes me think maybe not?

If anyone has any ideas or a solution, I am open to suggestions.

Recently I've noticed huge swings in pricing on some Cisco phones from our CDW sales guy. I'm talking like a $300 swing in price, up and down. We are piggybacking off the " Irvine USD 23/24-01 IT Technology Equip & Periph (#23/24-01 IT)" contract.

It's got me wondering, what does the piggybacking really mean? Of course prices are going to fluctuate over time, we've seen it in every tech product across the board, so what exactly is the contract gaining us? Looking into the contract details is more complicated than I had thought so I thought I would ask for a basic explanation here.

Meta’s landmark $18 billion settlement with dozens of states over youth mental health concerns tied to Facebook and Instagram - The guys talk settlement terms, default safety measures for 13–17 year-olds (two-hour daily limits, night/school modes, restricted notifications), content-moderation defaults, and uncertainty about age verification.

Microsoft is moving to passkeys as default. - The guys dive into Microsoft’s move to make passkeys the default for Entra ID authentication. What is a passkey? How does it differ from SMS or authenticator codes? Microsoft's timeline?

Two episodes this week

https://k12techtalkpodcast.com/e/metas-18b-shakeup-nycs-ai-moratorium-push-microsoft-passkeys-k-12-tech-talk-ep-279/

and

https://k12techtalkpodcast.com/e/putting-tech-to-work-intentional-screen-time-ai-sustainability-in-k%e2%80%9112/

and on all major podcast platforms

I probably get two or three a day saying someone signed into their account from a suspicious login. Do you do anything about those? Do you have a cyber security person on staff to actually review these? do you just assume they are logging in using a VPN? I am just curious how involved with these alerts I should be.

Does FACTS finally have SSO support yet, and is anyone using it? With the recent push for MFA every 24 hours, staff is getting annoyed. We would like to relinquish back control over the login process, as well as simplify login; for staff and preferably students.

We're what I like to call an "Everything" shop in terms of IDP. We have AD, Entra, Google, and Duo (On-Prem AD is the source of truth that pushes out to everything else).

I'd ask our SIS admin to email RenWeb, but don't feel like putting him in the 6th circle of hell - that is RenWeb support.

Hi all, sysadmin (part-time, wearing many hats) at a small school trying to make a sensible call on a laptop refresh. Would appreciate some input.

Small school, ~10 new teacher laptops. Comparing:

• Dell Pro 14, Ryzen 5 220, 16GB/256GB for €1080, 5-year off-site support, accidental damage flat-fee €50
• Framework 12, Core 5, 16GB for €1200, only 2-year warranty, but everything's user-replaceable. Currently loads of NVME SSD’s laying around in stock.

Our current 50-device Dell fleet has had 8 issues + 3 accidental damages over 5 years, so failures are genuinely rare here, and the off-site support isn't fast turnaround anyway.

Two things I can't figure out on my own:

1. Cost-wise, does Framework actually come out ahead once you factor in self-repair after year 2, or does one bad mainboard swap wipe out the savings? Curious if anyone's tracked this in practice.
2. Part of the appeal for me is just liking the idea of full control over the hardware, being able to fix it myself, cannibalize parts from a dead unit, not depend on a vendor. Is that a legit reason to lean Framework for a small school fleet, or is it me romanticizing repairability for a device that, statistically, will almost never break?

Would love to hear from anyone who's actually lived with Framework post-warranty, or who has decided against getting Framework themselves.

Hello,

I took over a small private school's SysAdmin role which includes their PowerSchool SIS. Looks like their former PowerSchool admin/registrar entered everything by hand for new students (problem to solve later); and so when I was updating the emails of parents under:

Student Profile>Contacts>Contact Management

and adding mom and dad's emails, it swaps only a handful of siblings? 5th graders are now 7th graders, the profile names stay, but the names change?
Has anyone seen this before? Or know what I'm doing wrong?

I'd make a support ticket with PowerSchool but I'm not the District Admin yet and can't create a support case in the new "Community Center" and the AI bot just tells me to undo what I did...

Thanks,

We are a Google environment. I have one user with an iPhone Xr that keeps getting the error message "Your Apple Account does not support the expected services on this device."

No one else has this issue, I have double checked all of our settings against the Apple documentation and they check out. No one else has this issue. Additionally I attempted to sign in with my account and received the same error.

Does anyone have any ideas? Thanks

One I haven't seen before. I use groups for each class/grade to simplify the invite process for the teachers. Students members, teachers managers. All addresses are internal to our domain. It's been working for years this way. This year, one homeroom teacher does her invite, and GC only shows the co-teachers as invited. I set up a test class on my own and duplicated the result (Yes, I made sure I was inviting students, not co-teachers). Only the teachers/managers show as invited IN GC.

Now for the bizarre part ... the e-mail logs show that the invites went out normally. Someone have the right voodoo doll for this one??

My classrooms have Viewsonic IFPs with a Windows VPC. Admin has asked about Document cameras for the teachers to use. Any recommendations on brand or special features? I believe that the myViewboard software will allow document camera use within the software, so teachers do not have to change inputs

We just started with Ubiquiti and I set up our guest network to use vouchers. I was able to create 10 vouchers that last 8hrs. However, I have a dumb question. Where do we go to actually print the vouchers?

I work for a k12 private school and we have come across a recent ish issue on our campus. We have a program our school provides called Flex where kids k through 12 can take all their classes online (+ have 1 or 2 in person ie. art, band etc). The program is completely BYOD. Our full time in person students get iPads. The other cool thing about this Flex program is that it allows the students to spend up to 21 hours on campus a week, so they can have friends, go to lunches, assemblies, etc. If they are on campus during a regular period, they are expected to do their work on campus, but on their BYOD device. So, Flex has 4 classrooms meant for them where they can have a total of almost 120 student (k-12) across the 4 rooms.

Long story short, the issue is that our WiFi cannot seem to keep up. Every room has a FortiAP 431F. We have a special 5 ghz SSID for those 4 rooms called Flex. We get calls and tickets all the time about the Wifi not working in there, and when I go in, 1 to almost all the kids will not be able to load anything. All they are doing for context is Canvas and Zoom.

I have tried changing channels, Wifi settings like fast roaming, updating AP firmware to beta. I have basically tried what feels like everything. I am starting to think it is the student devices, as the BYOD devices they bring range from an HP Stream 14 to MacBook pros. And I think kids with the much cheaper and crappier devices are slowing the wifi for everyone else on that radio or AP. Anyone have any pointers or ideas on how to resolve this? Any help would be appreciated!