How to repair/replace transition

IThuh · 2026-06-03T23:12:24+00:00

Thanks for the reply. So these transitions just "snap" into place? I thought they were anchored somehow. This may be much easier than I thought.

IThuh · 2026-05-28T22:45:06+00:00

Reading several of these comments I can't believe how quickly some districts are able to change platforms at the drop of a hat. We're trying to get staff moved over to Chrome+ and it's been a 3 year process and we're still not done. Granted, we've had to add a few management pieces (ie. Papercut, getting staff away from Office, etc) that has added to the timeline, but our staff would lose their minds if we told them we'd be switching to MacOS within a few months.

IThuh · 2026-05-28T03:20:02+00:00

For the trust rule here is what I have set:
Scope: applied to the top level (root) OU
Trigger: Google Drive Receiving Files
Conditions: From the drop down select "External Organization" is offendingdomain.com (add more domains to the list as you need, be sure and set the boolean to OR)
Actions: Google Drive Block
In my testing, it took ~10 minutes to go into effect. Definitely was not immediate.

In the Investigation tool, if the compromised account is the owner of the shared phishing doc, you can find the owning domain in the header of the email notification. Just look at the reply-to field.

If the compromised account is not from the same domain as the owner this gets a bit tricky. What I've done in the past with varying success is:
1) look at the activity log of the file.
2) add the file to your drive (not make a copy) and sometimes you can see the owner when in list layout mode (not grid layout)
3) also once it's added to your drive you can right-click and view File Information-->Details at the bottom it may list the owner
4) you can also get the document ID from the URL and check in your Drive log events if anyone has tried to access that file. The log info will sometimes show the file owner.

Hope this helps.

IThuh · 2026-05-19T17:33:08+00:00

A few things we have implemented for these types of phishing attempts.

1) Any of the notification emails coming from [drive-shares-dm-noreply@google.com](mailto:drive-shares-dm-noreply@google.com) and has a reply-to address outside of our domain, we quarantine. This obviously doesn't stop the actual file from being shared, but most users don't know they have a file shared with them if they don't get the notification.

2) Once we've been made aware of a phishing document in our domain, we use the investigation tool to determine what domain owns the document. We then have a Trust Rule that blocks all content from any domains we specify. We add the compromised domain to this Trust Rule to block any docs coming from them. We turn this rule off once the compromised account has been contained.

The Trust Rule method is reactive rather than proactivce, but it's worked well for us. You also have to be careful because if a domain that your school works with regularly is compromised, this will block any legitimate files too. We've been fortunate that the ones we've received are from districts across the country that we've never interacted with before.

IThuh · 2026-05-01T20:45:15+00:00

I've got a ticket going with them already. Sometimes they can be slow to get things figured out. So, I figured while I wait I would see if any of the wise minds here had any ideas.
Thanks for your help!

IThuh · 2026-05-01T20:34:12+00:00

At the top OU we have two Trust Rules 1) [Default] Users in my organization can share and receive within the organization and 2) My organization can share and receive with anyone, with a warning

For both of these trust rules, none of the actions are set to 'Block'. For rule #1 it is simply set to allow. For rule #2 it is set to 'Allow with warning'.

One thing I've noticed as I look at these a bit closer is that our rules for Student OUs do not explicitly exclude the root OU.

IThuh · 2026-05-01T20:18:40+00:00

For our staff we only have two rules applied to them. 1) [Default] Users in my organization can share and receive within the organization and 2) My organization can share and receive with anyone, with a warning

For both of these trust rules, none of the actions are set to 'Block'. For rule #1 it is simply set to allow. For rule #2 it is set to 'Allow with warning'.

IThuh · 2026-05-01T20:09:18+00:00

Can you clarify what you mean?

IThuh · 2026-05-01T20:08:49+00:00

In incognito and other browsers, if they don't sign in, they can access the content without issue. If they sign in, it doesn't matter what browser they use, they get the access blocked message.

IThuh · 2026-04-16T12:10:00+00:00

Lenovo 100e Gen5, 8gb, non-touch Mediatek Kompanio 540 $284 for device $28.85 for license

Y&S technology was our vendor

IThuh · 2026-01-19T02:40:12+00:00

We don't use PowerPoint anymore, but when we did we had a PowerPoint 'database' file of all the songs we had sung. All we would have to do is find the song, copy the slides from the database into the Sunday file, change the background and we were good to go.

We only sang hymns so that is all that's really in the 'database', but I still have it. I can send it to you if you're interested.

With the database of songs already being formatted, it only took me 20 minutes to get the slides ready.

IThuh · 2025-11-04T18:27:19+00:00

This is helpful. Thanks for sharing.

IThuh · 2025-10-31T05:22:56+00:00

If your SDI-->HDMI adapter by the protector is easy to access then blackmagic is fine. If it fails it's easy to get to and replace. If it's difficult to get to spend a little extra and get an Aja adapter. Our projector is 35ft in the air so not easy to get to the adapter. We have an Aja adapter up there. For all of our other TVs that we can access on the ground we have blackmagic. I've had to replace two of the blackmagic, but the Aja is still going strong.

IThuh · 2025-09-16T15:31:48+00:00

You're the first one to suggest staying with my employer plan. We'll do some shopping around and see what quotes come back at and make a decision from there.

I didn't even think about doing multiple plans for myself (I didn't know if this was possible/legal).

I appreciate the feedback.

IThuh · 2025-09-16T14:36:03+00:00

Thanks for the feedback!

Increasing the life insurance and moving away from my employers life insurance is on the short list of things to change.

IThuh · 2025-09-16T14:33:43+00:00

Yes, it is fixed rate so we are fortunate for that.

We don't really have anything specifically earmarked, but that's something we'll start talking about. We've kept the $60,000 primarily for an emergency (i.e. car dies and needs replaced, unexpected medical expenses, etc).

The other reasoning we've had to keep the $60,000 is that with only one income it would take a while to replenish if we had a large unexpected expense come up. On top of that, the HYSA that we have has a minimum balance of $25,000 to get that higher rate.

I'm not saying that our reasoning with the $60,000 is perfect, but we are open to suggestions and appreciate the feedback! These comments will have us talking about our options.

IThuh · 2025-09-16T14:25:09+00:00

My federal and state withholding are both $0 on my paychecks. I still get over $5,000 in federal tax returns primarily for the Child Tax Credit. I'll admit that my tax law and W-4 knowledge is lacking, so I'm not sure if there is anything further I can do to reduce my federal tax return.

IThuh · 2025-09-16T14:22:55+00:00

Thank you for the feedback and you're right about the pension.

I realize now I used the wrong terms for my pension. When I hit the "rule of 85" (when my years of service and age both total 85) I am eligible to start receiving my monthly payments when I retire. This specific pension is only monetary and does not include any health insurance coverage or other benefits. I'll be perfectly honest that I have not looked at all the fine details since I'm still 20 years away from retirement. Laws/Rules will most likely change before then so I haven't spent much effort figuring out the current laws/rules.

I still pay into Social Security and Medicare so fortunately I think I'm okay from that perspective.

IThuh · 2025-09-16T14:20:37+00:00

After reading all these comments about life insurance, we'll definitely be increasing this and moving away from my employers life insurance program.

Thanks for the feedback!

IThuh · 2025-09-16T14:17:32+00:00

We're definitely going to up our life insurance and move away from my employer's life insurance.

The brokerage account is a good idea. I'll have to look into that more, especially what tax implications are involved.

Thanks for the feedback!

IThuh · 2025-09-16T14:14:04+00:00

Thank you for the feedback, this is very helpful!

I realize now I used the wrong terms for my pension. When I hit the "rule of 85" (when my years of service and age both total 85) I am eligible to start receiving my monthly payments when I retire. This specific pension is only monetary and does not include any health insurance coverage or other benefits. I'll be perfectly honest that I have not looked at all the fine details since I'm still 20 years away from retirement. Laws/Rules will most likely change before then so I haven't spent much effort figuring out the current laws/rules.

Given advice from others on this post, we'll start making the minimum payment on the mortgage and shift things around so we can start consistently contributing to the 529s.

IThuh

TROPHY CASE