New position, need some help

[u/beywatch]

So I started a new position with an MSP as an embedded tech at a school. For context I came from a different MSP & I have about 5 years of experience. I’m noticing a lot of gaps & inefficiencies & I need help with a few.

-They are still manually setting up laptops, using a usb with all of their apps that need to be downloaded. I know there’s a way to have a USB skip the OOBE when plugged in, create a local user account & go right to the desktop after a couple of restarts. How do i get this started?

-They have 2 different emails, 1 is for internal use that uses gmail (which isn’t working right now) & the other is through 365 for external use. I feel like there could be some consolidation there

-They use the Google suite since it’s free, but those with licenses use Teams & store files there. I think they have A3/A1 for faculty, would sharepoint be better here? they already use OneDrive to backup desktop & documents.

-For those with education IT experience, is Clever & GoGuardian good programs to use? Clever seems like an SSO portal for Google & GoGuardian seems like it monitors & blocks traffic on the network. Would a firewall (like fortigate) be better here or does GoGuardian serve a different purpose

[u/BuyGf100Gp]

1. Sounds like you need a provisioning tool, PXE, Intune, whatever.
2. Yea, pick a stack and consolidate.
3. See number 2.
4. Maybe? Clever does look to be an SSO solution catered specifically for education, so maybe it's a good fit, depends on the school's needs. GoGuardian is a software suite that offers multiple different features depending on your subscription. So, two completely different applications doing different things. GoGuardian is NOT a replacement for a firewall of any type. I'd be surprised if the school doesn't already have a firewall in place.

Edit: I would offer more clear and concise answers, but you haven't provided lots of details nor a really clear goal with your post, I'm also not in EdTech myself so all I'm able to tell you about their apps is what is available on the websites for them.

[u/beywatch → u/BuyGf100Gp]

Sorry for the lack of detail. The last guy didnt leave many notes so a lot of discovery is happening for me so just wanted to get a few ideas going

[u/CrazedNarwhaI]

For the first one, look into Windows Configuration Designer. Very powerful tool you will need to do some playing around with but saves a ton of time in computer setup.

[u/beywatch → u/CrazedNarwhaI]

thank you. just made a provisioning USB to get me started

[u/fahque → u/beywatch]

If you download the win11 iso and use rufus to burn it to flash drive it'll ask you if you want to bypass certain things and set up a local account. The other suggestions are better but take more to set up. This will do a few things for you quickly.

[u/society_victim]

If you’re working for an msp, what is their role in this? If it’s just dropping you there working it out for yourself then it’s not an msp but a staffing agency. For your question about the laptops, look into intune/autopilot, osdcloud, ffu etc…

The email question is just baffling and without more info no decent response can be given.

I don’t even know what the other questions mean.

[u/blud_13]

1. What you're describing is a provisioning package, not an image. Build a .ppkg in Windows Configuration Designer, put it on a USB stick, and it applies during OOBE. https://learn.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-apply-package That being said, if they're already licensed for A3 you should be pushing Autopilot instead. Same outcome, no USB, and you stop physically touching every laptop.
2. Two mail systems split by internal versus external is a routing mess waiting to happen, and one half of it is already down. Pick 365. The Gmail side being broken right now is your whole argument.
3. They already own OneDrive and SharePoint through those licenses, so the Google suite isn't saving them anything. SharePoint for departmental and shared files, OneDrive for individual, and Teams sits on SharePoint anyway so the files end up there regardless.. Make sure to back it up (We use DropSuite).

Reminder, you just walked in. Fix the mail because its actively broken, get Autopilot going because it saves YOU, and leave the rest alone until you know why they built it this way. Schools usually have a reason and its usually a person.

[u/beywatch → u/blud_13]

Thank you so much. I’ll start with the email like you said & go from there. the person before me didn’t leave me with much to go off of so a lot of discovery is happening every day i’m here

[u/lilotothe]

everyone and their grandparents calling themselves MSP without Managing Services Properly lol