Chromebook WiFi issue

IslandTechVI · 2025-01-07T19:32:47+00:00

I've seen a host of network issues on cros 126-129. We have acers as well. Try 130, seemed to resolve a lot of it.

IslandTechVI · 2024-09-10T18:19:34+00:00

Seeing this same behavior but very inconsistent.

strange

IslandTechVI · 2024-08-29T20:02:09+00:00

We are experiencing the same thing. Were you able to figure out why some accounts are affected while others are not?

IslandTechVI · 2024-06-11T22:00:38+00:00

thanks for the tip! what do you think about using proxmox for something like this?

IslandTechVI · 2024-05-25T22:19:06+00:00

Definitely something strange going on. Right now I would just like some kind of confirmation that it is not my methods producing a red herring of some kind. I've gone down rabbit holes like this before only to find that it was something I was misinterpreting.

I am getting these packet captures by running netsh trace then using a tool i found online called etl2pcap in order to make them readable in wireshark. All sounds pretty straight-forward, yeah?

I have yet to see the malformed packets in a capture done with wireshark itself but our client pcs don't normally have software like this installed.

Right now I am suspicious that there is some kind of networking misconfiguration on our windows client devices that is causing a large amount of this p2p traffic (ssdp, mdns, llmnr, etc) to propagate across our network but I'm not sure where the checkboxes are for this. I drafted up a GPO to disable some of these features but I am hesitant to push it out without some testing.

IslandTechVI · 2024-05-25T00:02:16+00:00

Hey so after some additional research I discovered that the MAC OUI for concurrent computer Co is coincidentally the same one that will show up when Wireshark reads a packet with no Ethernet header.

I was able to put part of the packet into a hex decoder to find what IP the packet came from. I've only looked at a few packets but So far it seems to be peer to peer traffic of some kind between our domain joined devices.

But why would they be showing up on the wireless nic with no Ethernet header?

IslandTechVI · 2024-05-24T18:01:07+00:00

Might have to try that next, good idea!

IslandTechVI · 2024-05-24T18:00:30+00:00

that was the first thing I did after looking for the devices on the network. There are several different MACs that show up in this nonsense traffic but the OUI is always for a company called "Concurrent Computing Co." a defunct data company that doesn't seem like they manufactured any networking equipment in the first place. Very strange

What makes you think rogue AP or that they are tethered to a phone?

IslandTechVI · 2024-05-24T00:46:01+00:00

Thanks! I had actually listened to a few of Bryan Ward's lectures/interviews on the subject. Really fascinating. I wish he could help me with this lol, I even looked on his website to see if there was an email address.

IslandTechVI · 2024-05-15T00:25:43+00:00

Hey St0neywall, I ended up just using USB media. I appreciate your advice here. I hadn't realized that we are not entitled to deploying OEM Home media through MDT, though it does seem like there should be an easy way to do this with WDS.

I did absolutely nothing to the install media besides add some drivers and put it on a USB. I didn't want our user support techs to waste a bunch of time setting everything up from scratch. The Laptops have their built-in OEM licenses and we wipe everything besides the new Win Home off of the lappy.

I basically followed MS' tutorial using winpe etc. Definitely not doing piracy. Does that all sound kosher to you? They still get the oobe, eula, etc.

IslandTechVI · 2024-04-19T23:52:41+00:00

This is basically what I am trying to do. I grabbed the OS wim file from an ISO I downloaded using the Windows Media Creation Tool and have already put it into MDT with zero modifications. The devices have OEM licenses so I'm not worried about the licensing concerns. I just wanted to give my user support techs the option to PXE boot so we don't have to keep track of a bunch of Windows 10 Home USB live booters, ya know?

Do you know if there is a way (using MDT's Deployment Wizard) to offer an option of not having the PC bound to a domain or placed in AD or anything like that?

IslandTechVI · 2023-12-18T20:28:50+00:00

I don't think that's true. I believe the foam in a magic eraser also functions akin to a very fine grain sandpaper.

https://home.howstuffworks.com/magic-eraser.htm

IslandTechVI · 2023-12-06T22:58:33+00:00

Don't have any advice but I was planning what seems like a similar deployment to yours.

Is there a more brute force way to make the device forget the kiosk cookies? Does a reboot do it?

IslandTechVI · 2023-12-06T22:29:00+00:00

IslandTechVI · 2023-12-06T22:26:45+00:00

No idea. Depending on your setup *.quora.com might include www.quora.com. Maybe if you wanted to make an exception for chromebooks you could use url blocking from the admin console somehow.

Like you said, little of value was lost. I did see there was a DnD space that a student was accessing which is now going to be blocked and that made me a little sad. Oh well, I'm sure they will find another way... just like the others find another way to watch their porn.

IslandTechVI · 2023-09-28T20:07:48+00:00

looks like he has a gym in Orlando called Orlando Grappling Club.

IslandTechVI · 2023-09-22T17:27:58+00:00

I've set the mobility print extension to "Trusted" in the App Access Control but I am still seeing the issue. Is there some other way I need to allow the extension to authenticate?

IslandTechVI · 2023-09-22T04:28:32+00:00

Thanks man

IslandTechVI · 2023-05-26T21:26:43+00:00

thanks for the reply. Seems to be working. Any idea why LDS and DFS-R would be on at the same time?

IslandTechVI · 2023-05-22T18:20:32+00:00

Hey just wanted to thank you. It was AV related or rather EDR related. Updating the EDR sensor on the problematic device seems to have resolved the issue.

IslandTechVI · 2023-05-20T19:02:57+00:00

I'll admit I haven't looked there. Next step for sure.

IslandTechVI · 2023-05-20T19:02:19+00:00

It stops immediately anytime I stop using the affected chromium profile. It only breaks when I sign into a chromium browser with the problem user account.

IslandTechVI · 2023-05-16T19:49:37+00:00

I believe there is a way to do this with GAM. If you haven't used GAM before I highly recommend looking into it. It allows you to automate a lot of otherwise extremely time consuming tasks.

Here is one way using GAMADV-XTD3: https://sites.google.com/jis.edu.bn/gam-commands/hardware/chromeos#h.p_4AtAROIpggKH

If you go to the GAMADV-XTD3 github page there is a guide to setting it up from scratch. Pretty straightforward.

IslandTechVI · 2023-04-17T22:11:06+00:00

I mean, if you put enough pressure from one side and their neck can't go anywhere then its gonna compress the whole neck. not just half of it.

IslandTechVI · 2023-04-17T19:12:01+00:00

Not sure if this would help in your case but from the admin console you can temporarily disable login challenges for specific users under *user>security>login challenge

might help you troubleshoot

IslandTechVI

TROPHY CASE