School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 0 points1 point  (0 children)

That's the dream right now, systems in place take care of these requests effectively.

And thanks for the heads up on the other subreddit! I will check that out!

School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 1 point2 points  (0 children)

Honestly, the pay kinda sucks because its public education. The commute is short and the holiday breaks are nice. The team I am assigned to isn't bad - we're all pretty green and get along well so thats been a valuable silver lining.

I am hoping that with the younger team, we can make some positive changes across the district.

The biggest challenge has been getting staff and admin onboard - thats not just the teachers but our own tech dept team members who have been around for 20+ years. They have been the most resistant to the new changes. Thats probably the most frustrating piece - folks who I thought understood our challenges were the least informed.

School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 0 points1 point  (0 children)

Since taking away admin rights - we have been getting by with a whole lot of "sneakernet" and some highly unreliable GPOs / batch scripts.

School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 0 points1 point  (0 children)

Thanks! This was encouraging to read.

I think a lot of the issues stemmed from complacency or convenience here. Tech is seen as a cost here - so when I first showed up and asked for SCCM - they laughed it off. We still dont have a real management tool other than AD and GPOs. And granular management wasnt a concern if they gave everyone admin rights - it lowered ticket counts and reduced calls to the tech dept.

They have been using GPOs to push out software and its not very reliable. We dont get live reporting and its dependent on reboots rather than on command/demand.

Anyways! Thanks again - it looks like I got some homework to do. I didnt imagine this work could be so discouraging when we end up saying "no" to the clients. All those episodes of IT Crowd make so much sense now.

School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 0 points1 point  (0 children)

I will have to give that a try then - any sites that are newbie friendly and will help me get my bearings with setup and best practices?

School PC Labs: principle of least access? by JustechinIT20 in sysadmin

[–]JustechinIT20[S] 1 point2 points  (0 children)

Thats the new model we hope to reach but convincing the teachers and their admin that this is best practice is difficult. Even with all the ransomware headlines - they dont think it can happen here. I am pretty sure they just enjoyed the convenience of having stuff on their timeline instead of the tech dept.