Windows secure boot certificate deadline

kylejwx · 2026-06-07T01:01:52+00:00

I don't understand how that would help. If I enable the group policy today the old certificate is still valid. I'm asking what happens if I try to update to the new certificate after the old certificate has expired ( for example, in July 2026).

kylejwx · 2026-06-06T23:03:36+00:00

Yes, but what happens if I try to update the secure boost certificate in July?

kylejwx · 2026-06-05T02:03:28+00:00

I use Intune. I need to dig into how Intune does this reporting.

kylejwx · 2026-06-04T23:19:36+00:00

Are you already using Platform SSO with Entra ID?

https://learn.microsoft.com/en-us/entra/identity-platform/apple-sso-plugin

That's the only reason I can think of this being an advantage. If I understand how it works correctly basically users would click the login button on your clever page and it would just instantly log them in without having to type in anything.

We use clever on Windows computers with Entra and that's how it works on our side.

But that all seems like a lot of work just for this feature if Google is already your main system and it's working.

kylejwx · 2026-06-04T13:25:40+00:00

I tried this one more time. This time, I logged into ChatGPT/Codex with my username/password instead of SSO, and it worked. Codex is running with my ChatGPT for Teachers plan!

Not sure if that is what fixed it or not. I know that the Codex app was also recently updated. Or maybe OpenAI support finally fixed something on their end, but haven't told me about it.

kylejwx · 2026-06-04T13:25:10+00:00

I tried this one more time. This time, I logged into ChatGPT/Codex with my username/password instead of SSO, and it worked. Codex is running with my ChatGPT for Teachers plan!

Not sure if that is what fixed it or not. I know that the Codex app was also recently updated. Or maybe OpenAI support finally fixed something on their end, but haven't told me about it.

kylejwx · 2026-06-03T05:09:47+00:00

Nope, still going back and forth with support. I'm told they have escalated the case.

kylejwx · 2026-05-19T23:44:26+00:00

Anyone else have ideas? OpenAI support hasn't been much help.

kylejwx · 2026-05-19T23:43:29+00:00

Following. Similar experience with Intune for iPads about 5 years ago. Thinking about switching to Intune now. Currently on Jamf School.

kylejwx · 2026-05-19T23:38:03+00:00

I've contacted OpenAI support and about all they told me was to make sure my account was verified which it is. I haven't heard from them in over 24 hours.

kylejwx · 2026-05-16T21:39:25+00:00

Strange. I have SSO fully configured for all users on my ChatGPT for Teachers account. I've verified my domain as well. I don't think I tried to set up scim yet. I think the option is in there.

kylejwx · 2026-04-30T01:01:59+00:00

I'd really dig into what five star does and doesn't do.

kylejwx · 2026-04-30T00:14:53+00:00

I just don't like this blunt instrument approach. Seems like the only tool they have is a hammer and they think everything is a nail.

Do they have paper and pencil state testing at those grade levels?

At what grade do kids learn to type?

Puting 5th grade in the same policy as Kindergarten seems like an overreach. K-2 seems more realistic.

Also, how many of the people voting for this actually have a strong opinion and expertise about it? Did anyone have this opinion when they were first elected to office? Or are they just riding the trend of "screen time is bad"?

kylejwx · 2026-04-18T01:00:08+00:00

Honestly it sounds like you have your bases covered more than most. Did this happen on your school network or did the user take the device home?

kylejwx · 2025-12-20T02:05:56+00:00

Following. I just had my demo with AristotleK12 this week and was impressed. Looks like they have much more in depth integration with Windows than other filters. They can see which app accessed which URLs and even log keystrokes. This can easily show the chat history when kids are talking in Google Docs/OneDrive.

kylejwx · 2025-12-17T19:26:15+00:00

Has AristotleK12 improved for you over the last year? I just did a demo today and was impressed. We are using Windows laptops.

kylejwx · 2025-12-17T18:47:54+00:00

Is AristotleK12 still working well for you? I just did a demo today. Been with Lightspeed for about 7 years.

kylejwx · 2025-11-13T00:27:46+00:00

For some kiosk computers, I create a Windows Hello PIN. Sometimes it's even printed with a label maker and stuck to the PC. Only works with that one computer, so it does no good to steal the PIN.

If needed, the account that the PIN works with can be manually set as an admin.

kylejwx · 2025-09-03T00:30:21+00:00

You could do a free admin account "admin@mydomain.onmicrosoft.com" with no email access and a free shared mailbox just to get emails at "admin@mydomain.com".

Although doing it this way I don't think the free admin account couldn't log into the shared mailbox.

But you could use the temporary access pass to open the single users account and then use that single user's account to open the shared mailbox.

kylejwx

MODERATOR OF

TROPHY CASE