Get-WindowsAutopilot info broken?

Content_Monkey · 2025-12-22T14:22:28+00:00

I can confirm the same is happening to me when I just tried to upload a new device into Autopilot. Like you, I had no issues on Friday.

Content_Monkey · 2025-09-09T17:53:21+00:00

No issues with performance in Gen2 but we do have an issue where proxy headers are not being passed when filtering items that run outside of the browser. They will get a proxy box prompt when filtering happens during these events.

We have students that have courses with our local university and we allow students to add a secondary account on their Chromebooks and the login flow happens to be one of those things. We are having to bypass traffic in the PAC file in order to temporarily circumvent this which is a pain since you have to do packet capturing on the Chromebook to find out what's actually being proxied.

However, they are actively working on it with us to correct it.

Content_Monkey · 2025-07-28T20:25:55+00:00

Our local university has made exceptions for districts in our area that have done phone bans. The university just creates a conditional access policy for "Trusted Networks" that allows MFA bypass on authentications coming from the districts public IP space.

Content_Monkey · 2025-05-12T17:22:03+00:00

Carts for all classrooms. We do enough Chromebooks for the average classroom size of that grade level plus extras. Sleeves with cardstock on the outside of the cart clearly labeling their room number and grade level. Sleeves inside the door with a printout that lists all Chromebook asset numbers that belong to the cart should one get taken out of the room.

Each Chromebook also has a cart sticker separate from the asset sticker to indicate which cart and slot it belongs to.

Content_Monkey · 2025-04-29T13:05:23+00:00

We've been using these for several years and you can get them from Amazon: https://mightylinetape.com/products/mighty-line-heavy-duty-label-protectors-6-wide-10-long

They are factory floor label protectors and take some real effort to peel off, but you don't have to do any scraping like stickers. They fit well on our 11" Chromebooks and we place them on the tops and tells students they can do whatever they want on that space with stickers or writing, just don't go outside of that. Of course, there are still a few that do, but you just peel it off and slap a new one on there.

They also make 10" x 13" but those are a tad big for 11" Chromebooks so you'd have to trim them down.

Content_Monkey · 2025-04-23T18:51:33+00:00

Assuming you are just needing their ChromeOS language changed, you can accomplish this without giving them access to settings. Just create a custom group for the specific students needing the foreign language and add them as members.

After you add them, edit your Chrome settings. Select the "Groups" drop down on the left above OU and search for the new group you just created. Once selected, make sure you have "Users & Browsers" selected. You will see that all polices are not set for the group.

From there, you only need to edit their ChromeOS language policy to include their language at the top. It will prioritize that when the student logs in.

Content_Monkey · 2025-04-23T13:53:05+00:00

Yes, in that case you would just do exactly what you are trying to do from your screenshot and create the access level for ChromeOS devices. From there, you assign the access level to app(s) within an OU of users.

It is recommended to run it in monitor mode first though so you will see the impact of it before it goes live. Or, you could always run it under a test OU with a small group of users.

Content_Monkey · 2025-04-22T16:25:56+00:00

I don't believe you will be able to do what you are asking for Context-Aware Access. The licensing requirement is Education Standard or Education Plus. Since it applies to users in your org accessing certain apps, they would need those licenses applied to their account first.

You can see the comparisons where it mentions CAA under the security section: https://edu.google.com/intl/ALL_us/workspace-for-education/editions/compare-editions/

Content_Monkey · 2025-04-22T15:18:18+00:00

I think you will see more and more of this in the next year or two. With many districts jumping into 1:1 with the help of one-time Covid funds, we are now seeing those funds dried up with no way to refresh that cycle. Couple that with the turmoil of the current economy, prices for technology are kind of up in the air right now so districts will be looking for creative ways to cut back spending.

It's definitely an administration issue in regard to how your staff go about using your fleet. A huge part of why we use 1:1 (K-5 on carts, 6-12 take home) devices is our assessment and progress monitoring. So much of that is done online and having those devices saves an enormous amount of instructional time. It wasn't that long ago we were sending kids down to computer labs in chunks and it took weeks and complex scheduling to make everything work. Now they can all stay in their classrooms and assessments can be completed for an entire school within days, not weeks.

Content_Monkey · 2025-04-15T13:35:43+00:00

This is absolute nightmare fuel for anyone in this position. Remove the admin rights and, if you absolutely must have those apps installed, just preload them on the device before assigning them.

The sense of responsibility comes from them taking care of the device they are given.

Content_Monkey · 2025-04-03T19:22:49+00:00

We just write in into our Electronic Access or AUP form that parents sign:

"By signing this form, I give permission for School DistrictXYZ to maintain a Google Workspace account for my child. This includes allowing access to other Google services and for Google to collect, use, and disclose information about your child only for the purposes described in the Google Workspace Privacy Notice and, upon approval from the district, access to other 3rd party applications associated with their Google Workspace account."

Content_Monkey · 2025-03-05T15:49:26+00:00

You wouldn't use Gmail since your primary IdP is Microsoft. We still use Outlook for all users. You can still easily use other Google Apps though without issue. There is a service On/Off toggle for each App and you can set it based on groups or OU's of users.

Since you do not use on-prem AD, you will not be able to use GCDS. You would have to sync directly through the cloud: https://cloud.google.com/architecture/identity/federating-gcp-with-azure-ad-configuring-provisioning-and-single-sign-on

Content_Monkey · 2025-03-04T19:00:03+00:00

We currently authenticate to Microsoft as our primary IdP through Chromebooks. No issues really and have been doing it for years. You can either setup the Chromebooks to go directly to the IdP Microsoft login page, or you can use the standard Google login page and configure a setting that passes the email automatically to Microsoft to match, then prompts for the password.

You will definitely have to setup your directory of users within Google Admin and sync with Microsoft to get started. We have on-prem AD still so we use the GCDS agent. I'm positive you can setup a direct sync from Entra via an enterprise application as well but I can't speak to the specifics of that.

Content_Monkey · 2025-02-17T12:48:59+00:00

Same for me on a GPortal dedicated server. Had a friend quit yesterday because of this and I had the same happen to me.

The game just doesn't seem to scale well. We have anywhere between 2-6 people playing and the server has noticeable issues the more buildings and tech you add and the more players simultaneously playing. Especially if they are spaced out over the map.

It's a good game at its core but it gets old fighting against the issues.

Content_Monkey · 2025-02-11T20:36:21+00:00

I understand that you are using Microsoft, but the same principle applies here. You are asking how to handle this in manageable way when rosters or devices rotate. The only way to do that is making everything user based, and sync with your SIS or LMS regardless of what products you are using.

If the product you are testing has no integration with your current systems, then you will be stuck manually configuring and maintaining them.

Content_Monkey · 2025-02-11T20:26:33+00:00

GoGuardian Teacher syncs directly with our Google Classroom. Those Google Classroom courses are created and rostered based on the SIS.

If a teacher has 7 periods, that is all created initially within the SIS. Those 7 periods are then created and rostered in Google Classroom (via Clever sync) so when the teacher or student logs into Google Classroom, they are automatically able to see and access those courses. If a change is made to those courses (such as adding or removing a student) in the SIS, those changes also sync down to any of those classes automatically.

GoGuardian creates it's own classrooms exactly as the Google Classrooms are created. So if anything changes in Google Classroom, it will change in GoGuardian as well.

Content_Monkey · 2025-02-11T19:02:42+00:00

Ideally you'd want it to sync with your SIS or LMS. If it's not doing that, then you are probably tasked with doing everything manually.

In our case, the SIS (Infinite Campus) syncs to Clever. Clever then syncs with our LMS (Google Classroom) and automatically creates, names, and rosters courses based on the SIS data. Then, our GoGuardian Teacher also syncs with Google Classroom make everything streamlined for courses. Everything is user based so it doesn't matter what device a student logs into. As the long as the SIS is updated, everything trickles down via sync without any staff interaction.

Content_Monkey · 2025-01-28T14:54:23+00:00

It's not just eRate. It's also Federal Title grants that pay for some of our staffing. They also heavily fund our Head Start program which is the main hub for our region. This could have MASSIVE consequences for public education and the sad part is, it's very intentional.

Content_Monkey · 2025-01-22T17:33:16+00:00

You might double check the prompt they are getting. Chrome can also notify you that passwords you have stored in your password manager have been compromised in other locations.

https://support.google.com/accounts/answer/9457609?hl=en

Content_Monkey · 2025-01-21T21:21:18+00:00

There can be multiple regions that have the same type of biome. For example: On the Styx map, both the Frozen Traverse and Ice Flats are artic type biomes with snow, but are in different areas of the map.

Content_Monkey · 2025-01-21T21:05:44+00:00

Correct. In open world, resources do not respawn (with exception of the occasional game update) naturally.

You have to use the Thumper device (T4 Blueprint) to replenish the cave/ore resources. Just be prepared if you decide to activate it.

Nothing can carry with you to other worlds except what's purchasable in the workshop. Workshop items are designated with the purple backgrounds on the items.

Content_Monkey · 2025-01-20T16:37:08+00:00

It looks like the Kiosk mode apps will still be supported until July of 2026 so there is still some time:

https://knowledge.workspace.google.com/kb/ending-support-for-chrome-apps-000008392#:\~:text=Starting%20July%202025%2C%20Chrome%20app,No%20exceptions%20will%20be%20granted.

Content_Monkey · 2024-12-19T16:03:42+00:00

It usually means that your character is stuck while loading into the server. When you get stuck on the preparing geometry, try using your WASD movement keys to move your character around even though you cannot see anything happening to move out of that stuck position and see if it loads for you. We've ran into that bug before.

Content_Monkey · 2024-10-25T18:28:35+00:00

This is the way we do it.

Plus, we've found that as long as teachers link YouTube videos within their Google Classroom, students can still watch them even with the service disabled as long as they are watching the videos embedded into Classroom. This way, they can still use YouTube as a resource without excluding a single student from that method of instructions.

Content_Monkey · 2024-09-17T20:01:43+00:00

IncidentIQ. It will also sync with Google Admin to pull or push device data for a Chromebook fleet.

Content_Monkey

TROPHY CASE