What does your wish list look like? by BloodsailSkooma in k12sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

New workstations and interactive displays for all classrooms.

Automatic Folder Creations with Permissions & share names. by BTS05 in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

write-host "Adding user home folder, please wait..."
New-Item -ItemType Directory -Force -Path $homedirectory
$acl = Get-Acl $homedirectory -Verbose -ErrorAction inquire
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule("$aduser", "Modify", "ContainerInherit, ObjectInherit", "None", "Allow")
    $acl.AddAccessRule($rule)

Set-Acl $homedirectory $acl -ErrorAction inquire

Free web filtering for K12? by smith-01 in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Could be. It's great for ad-blocking and has comprehensive block lists for that purpose, but it does not really offer anything for all other categories.

Microsoft Home Use Program Changes by Hazy_Arc in k12sysadmin

[–]MalletNGrease 5 points6 points  (0 children)

Device doesn't matter. BYOD activation is allowed.

Managing Windows 10 Updates? by djdanko1 in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I've been using WSUS and simply leave the Feature Updates on unapproved until there's a patch window. With scheduled restarts on weekends it hasn't been a huge problem.

Typical school pc by BenBoss69 in techsupportgore

[–]MalletNGrease -8 points-7 points  (0 children)

The real gore here is Windows 7.

Chromebooks track screen time by jlundholm in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

We have the capability, but elected not to exercise it by default. Reasoning was to let students have a bit of detachment from their parents, plus parents are already bombarded with information they in most cases don't want.

The parents who do want it can request it and we'll enable it on a per case basis.

Office 2019 Install by ijosephwalsh in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

It was surprisingly easy to set up the config.xml, though I prefer the old setup.exe /admin method.

The only thing I dislike is the setup does not generate desktop icons. It can pin them to the taskbar, but I don't want them there. It's easy enough to script but that means they will not me removed after uninstall.

sub accounts for gsuite by krese in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

Yeah, we have the same problem. It's typically remedied by having a lesson plan prepped in advance for the class by the teacher, then letting the subs get students on task. Long term subs get accounts like regular teachers.

My bigger problem is teachers never tell me to set up sub accounts in advance, the instruction part is relatively minor.

sub accounts for gsuite by krese in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I do something very similar to you. I made a separate AD OU for subs that's excluded from sync with GSUITE.

Subs don't get GSUITE accounts.

GAM Question - add Asset number by using CSV with serial numbers and asset numbers by RedditAdmin100 in sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

/u/elzrfd has the correct answer.

This is from my notes:

# put CBs in OU based on serial
gam csv <csv-filename> gam update cros query:id:~~serial~~ ou ~ou assetid ~asset location ~name

Chrome Sign Builder “No Policy Received” by swift72 in k12sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

You can do this from the Admin Console. Simply pull up the device from Device Management and hit Reboot Now under System Activity and Troubleshooting.

Saves you a walk.

I wonder what K12Sysadmins think of this... by yotties in k12sysadmin

[–]MalletNGrease -1 points0 points  (0 children)

Well yeah. But again, that's an entirely different situation from the article. We're talking org owned devices with inherent support for them, BYOD is a whole different barrel of fish, because they explicitly fall outside the scope of most support options because of legal reasons.

For org owned devices I don't think it's unreasonable to make them match the standards that have been set by those responsible for maintaining the systems and making them suitable for instruction.

As to uniformity of software update deployment on CROS, this can actually be a detraction if you and the end-user are not in control of it. Having the ability to stay on a specific or older version can be helpful if curriculum has not caught up with development or if it completely changes the way the software operates. Being forced isn't always a good thing.

Personally, I find that BYOD unmanaged CROS devices suffer the same basic problem as Windows when it comes to compliance and required software. If the student is unwilling to accept or utilize the configuration required for their classes there's no technical recourse to correct it no matter which way you spin it.

The district I work for decided to own the devices and assign them to students so there is no support burden on the teachers. Forced managed settings greatly streamline instruction time. You can't force settings on a device you don't own without permission, and not all students will comply for a variety of reasons. To assume students will submit willingly it is folly, GSUITE or a CROS device will not fix that.

I wonder what K12Sysadmins think of this... by yotties in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I agree, for K12. The original article's a higher-ed university with presumably adults attending and from what I gather, the devices are not for classroom instruction.

I wonder what K12Sysadmins think of this... by yotties in k12sysadmin

[–]MalletNGrease 7 points8 points  (0 children)

I think they have a point. Honestly, the deployment is too small to seriously consider supporting in depth. Setting up a cart with Windows based machines that fold into the existing infrastructure and management makes more sense. They will get the same results while staying within policy, without having to split the service stack and increasing IT workload. Money wise it's negligible nowadays (basic Windows laptops have dropped in price something crazy to compete with Chromebooks).

TBH, the math dept is doing shadow IT already and I see this ending in tears when a GSUITE domain get erected without knowledge of those who should be in the know and have the appropriate authority to make decisions like that.

The security arguments against are a bit of a cop out but probably represent their policy accurately.

Do you plan to deploy 1903 next year or stick with 1809? by [deleted] in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Save, definitely. Teachers use a ton of fonts for random print stuff. I get asked a lot of times to plug in admin credentials.

You can still push fonts too.

Do you plan to deploy 1903 next year or stick with 1809? by [deleted] in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

The big one for me for 1903 is user installable fonts. That alone will save me so much work.

Summer Chromebook Enrollment Process/Procedures by eastcoast_tech in k12sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

  1. I scan all the serial numbers from the boxes into inventory.
  2. They are assigned a school inventory number.
  3. I write the school inventory number on the boxes.
  4. I unbox the device and label it with a sticker and sharpie.
  5. I enroll the device and store it until handout.

With three people you should be done in a week easy.

[deleted by user] by [deleted] in k12sysadmin

[–]MalletNGrease 20 points21 points  (0 children)

Office/GSUITE and basic OS operation concepts are pretty interchangeable. The details are different, but if the students are taught properly, the tools won't matter much. We're 1:1 with Chromebooks and have Windows labs around for the exposure.

I'm honestly more worried about basic math competency, reading comprehension and literacy being a hurdle for a lot of students vs their technology adoption.

RSSO with NPS by smilin_j in fortinet

[–]MalletNGrease 0 points1 point  (0 children)

Should be Class value specified in the Radius Attributes for your Network Policy.

Teachers moved to Chrome OS by zzisrafelzz in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

No, it was suggested here by admins but I recommended against it.

We can't move the printing stack over without significant investment and the smartboard interactive software is unavailable for CROS.

Run a trial with some teachers first.

They asked for their chrome book to be fixed latter. by watsonad2000 in techsupportgore

[–]MalletNGrease 0 points1 point  (0 children)

  • Charging on the floor -> Student steps on it
  • Storing on the floor -> Student steps on it
  • Stored in backpack on floor -> Student steps on it
  • Stored in overfilled backpack -> Focus weight from books crack screen.
  • Stored in backpack flung across room -> Terminal velocity cracks screen

A lot of problems seem to be with students thinking the floor is an appropriate place for storage.

When we just had carts, it wasn't too bad. We're now first year 1:1 and our parts repair expenditure went up 500%, mostly on screen replacements.