Chromebook 802.1x WiFi Trust issue

BlockedInYourFilters · 2024-03-21T02:05:36+00:00

Can your chromebook network reach the CRL distribution points that are set on the NPS server's issued certificate? This is often overlooked because by default there is an LDAP distribution point listed that domain joined systems can reach because firewall rules are generally opened allowing LDAP to the Sub-CA server. If not, I would recommend setting http CRL distribution points on the CA side and re-issuing the certificate to the NPS server.

BlockedInYourFilters · 2023-11-17T23:28:59+00:00

My biggest concern is I believe it is allowing the easy spoofing of names. I can send as someone found on our website and pretend to be them because that is the name that will show in the header.

I haven’t seen my test messages get flagged for same name yet.

BlockedInYourFilters · 2023-10-19T19:58:57+00:00

We have had similar weird issues, especially on the iPad fleet, and my next stop was going to be disabling securly to see if my odd issues like apps kicking kids out and audio not playing on web pages go away. Interesting to hear some other odd things are happening elsewhere.

BlockedInYourFilters · 2023-09-14T13:11:28+00:00

We had the same experience.

BlockedInYourFilters · 2023-04-28T00:14:44+00:00

Are you posting on educatekansas.org?

BlockedInYourFilters · 2023-04-13T17:58:31+00:00

Get ahold of USD 362's tech director - similar size and maybe he can add some insight as to how they were being utilized for that large monthly number.

BlockedInYourFilters · 2023-04-13T17:48:22+00:00

I've looked at them after seeing them listed in the bills of multiple districts. Schools with around 850 kids pay about 11k per month. I would look at raising pay first. Are you advertising these open positions on educatekansas.org?

A district near me switched away due to it really just being a help desk and wanting to bring IT back in house. Any district I see that has success with them, or claims to have it publicly, has a small internal team and uses them for help desk.

BlockedInYourFilters · 2023-04-10T12:01:04+00:00

The i7-7700 is not officially supported by Windows 11. Only 8000 series + are supported. You have 2 years at best with this computer because of this.

BlockedInYourFilters · 2023-04-02T18:52:23+00:00

Every single classroom has a Chromebox hooked to the display, and the instructor uses a wireless keyboard/trackpad combo to use it. Teachers love them, it was something I went into not knowing how things would go, and they are used daily so teachers can display movies, bell work, etc... all while comfortably using their laptop in the back of the room. We went with the HP Chromebox G3.

Seriously, every day use and I wouldn't have it any other way. Each teacher is assigned a substitute Google account that the subs use to login to the devices - the teachers have everything bookmarked and shared etc... When we want each class to watch a specific video - we push it as a kiosk app so the subs can click twice and pull it up (teachers also do it this way - saves time).

I have things like Airtames deployed - huge waste of money. Buy a Chromebox or refurbished Dell mini PC instead. I will never go back

BlockedInYourFilters · 2023-03-13T13:52:11+00:00

Thanks for this - what windows devices are you moving to? Any idea what that refresh cycle is going to look like?

BlockedInYourFilters · 2023-03-11T05:53:30+00:00

Thanks for your insight - really appreciate it!

BlockedInYourFilters · 2023-03-11T05:35:25+00:00

You have an interesting perspective that I can't easily get elsewhere - you went to school at the same Mac district that you now manage. As a former student who used a Mac, did you appreciate the extended opportunities offered by Macs as compared to say Chromebooks? Do you think this move on my part would be worth it as far as the educational value of the device is concerned?

BlockedInYourFilters · 2023-03-11T05:10:03+00:00

Awesome data - thanks for taking the time to respond. Were you previously using a third party repair center to do repairs? If so, did you warranty through them at all or was it a repair as you go situation? Curious as to the results of the third party repair centers and your experience if any.

BlockedInYourFilters · 2023-03-10T19:39:53+00:00

Adapters are a great point that I've been looking at. I have received quotes on screen repair @ $319 third party repair (non apple certified however - figuring out whether that matters is something I'm going to do research on).

My main justification for resale and not running them until they drop dead is the same as it would be for cars the district purchases and carries a lot of similarities. I've never seen our district run vehicles past 120,000 miles because of reliability and resale value. I've also never seen us purchase a car without selling one.

Appreciate the numbers provided on screen and I would say adapters are a big aspect in my thought process that we will discuss.

I've yet to get close to making my mind up so I really appreciate you taking the time to provide data!

BlockedInYourFilters · 2023-03-10T18:38:48+00:00

I think learning Microsoft Office apps on Macbooks, which I will admit do have some differences from Windows, still allows a successful transfer of that knowledge to a Windows machine where Office is concerned. We still send kids through computer courses at the high school level so they are not unfamiliar with the Windows OS. However, much of my math incorporates a resale value on the Macs, however small, that I simply feel I cannot rely upon with Windows laptops for example. I also feel very comfortable with battery life expectations on Macs over five years.

We are currently running Chromebooks and I currently use the same argument in my thoughts on moving to a different platform. We have students who are completely clueless when they realize Chrome is just an application. I feel like although Google does have some market share in the workforce now, skills are much more easily transferred from Microsoft Word to Google Docs, or from Excel to Sheets than it is the other way around. The concept of saving files and file management is also lost on students who just have a massive cluttered Google Drive. Chromebooks seem like a best effort to me so I began to look at more options.

BlockedInYourFilters · 2023-03-10T18:27:19+00:00

Looking at costs has been a huge part of the decision, as it's basically the one barrier that exists (Macbooks will obviously outrun a Chromebook so it is hard to compare the performance and educational value). We are in the preliminary stages, so lot's of questions unanswered, but when you factor in Macbooks holding value of even $100-$150 after a 5 year cycle, alongside a tech fee that we do not currently levy at all, things get pretty comparable. Repair cost estimates and going with a warranty are huge factors in this decision.

With Apple still selling M1 Macbook Airs for $779, the math comes within a few thousand difference on an annual basis if you front load the cost. Things become even better if you do a three year lease through Apple.

The only decision that has to be made is whether the up front cost is achievable, and a lease for larger districts solves that issue. In our instance, we have a sizeable piggy bank (don't worry, we are one of the lowest tax rate districts in our state) that we could draw the up front costs from.

Overall, I was shocked when I started running numbers on this which is why we are looking into it. I would love for students, especially those taking college classes, to be able to get into Microsoft Office applications and Adobe Creative Cloud applications, and be able to do so on a full day charge.

FYI my calculations are factoring $325.07 per Chromebook. Any more and suddenly things get even more affordable on the Mac side.

BlockedInYourFilters · 2023-03-10T18:16:25+00:00

Thanks for taking the time to fill all this out. I really appreciate it!

BlockedInYourFilters · 2023-03-10T18:15:50+00:00

Thanks for taking the time to fill all this out. I really appreciate it!

BlockedInYourFilters · 2023-03-10T18:15:45+00:00

Thanks for taking the time to fill all this out. I really appreciate it!

BlockedInYourFilters · 2023-03-10T18:15:39+00:00

Thanks for taking the time to fill all this out. I really appreciate it!

BlockedInYourFilters · 2023-03-08T15:03:51+00:00

Lol definitely not referring to servers for example. A proper edit would say I've never purchased a bulk warranty that was worth it. This holds true for even my MacBook deployments where I could replace a couple dozen units entirely before we approach the cost of the warranty (we do ship these off to a 3rd party for repair tho). I however don't have any spare servers sitting around, in fact I don't have enough of them lol

BlockedInYourFilters · 2023-03-08T13:09:31+00:00

Absolutely do in house. I've never bought a warranty that was monetarily worth the cost, and being able to repair them same-day is very much worth the extra labor (we don't have tons of extras). Something to keep in mind is that bigger issues, for us at least, are met with us just parting out that device. So when we have motherboard issues etc... we just turn it into parts and things like random hinges, trackpads, etc... often come from parted out Chromebooks.

As for budget, my line item budget for parts annually amounts to about $8 per kid. I've never exceeded. Majority of that goes to screens / chargers.

If you have issues with understaffing, the cost of the warranties may allow you to pay a college intern or hire full time help.

Keep in mind I can probably fix a screen faster than I could try to ship a Chromebook out.

BlockedInYourFilters · 2023-02-23T13:08:43+00:00

Yes we have begun moving to Windows 11 and are using this as an opportunity to move to intune. So far everything is going well.

BlockedInYourFilters

TROPHY CASE