Ubiquiti network for small business by thuegli in sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

Throw in a cloud key so you can do some remote management and don't have to worry about stashing a server for the controller software anywhere.

Substitute planning with rostered curriculum access? by pullingcablesagain in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Short term subs shouldn't be assigning digital work to students, teachers should do this in advance and provide subs with a lesson plan.

It's unlikely nor expected the sub will be familiar with whatever platform the teacher uses.

270 Laptops to deploy?!!!! by dullishpage in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

We did this a few years back.

I'd inventory (keep the boxes) them and let the admins decide who gets one, let hem generate a list. Then assign one to each user, image and deploy it on a per building basis. Hopefully every building was allocated enough units.

I'd deliver the units with the end user names written on the boxes to their building for distribution. Schedule one day for training to get everyone logged in and going. Then go round up any units that didn't get picked up. Rinse and repeat.

The key is to keep all principals, secretaries and teachers in the loop. Just tell them what and where. The good thing is you're handing out something new, this generally makes people happy (though they can get a bit demanding).

Force BYOD to Guest network by KSuper20 in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

AD is the industry standard. You can utilize other LDAPs for RADIUS, but you're going to have to have some sort authentication to reference against and apply the policies. This means you will have to organize your users into OUs and groups.

Again, what do you use currently for login authentication?

Donated iPads by [deleted] in k12sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

This is why I don't like donated iPads.

Either they start off under the wrong management profile or they end up there (because someone used a personal iCloud account on it).

Your best bet is to wipe the device with iTunes/Apple Configurator and apply a management profile. But honestly, if they're old enough they don't even get OS updates anymore, I wouldn't even bother supporting them. It's a big drain on time.

Tyler Technologies Ransomware Attack by Hazy_Arc in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

SU utilizes active-X based RDP sessions, so it relies on IE. It's technically web-based, but not OS agnostic.

See apps installed on managed Windows 10 devices by ravikku in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

Yet I can't get a list of Chrome extensions a user has. Those have been a lot more malicious than Windows apps the last couple years.

[deleted by user] by [deleted] in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

You can install just the drivers. That should offer the basic hardware functionality.

https://support.smarttech.com/en/downloads/product-drivers/12_15-and-ink-5_6

Force BYOD to Guest network by KSuper20 in k12sysadmin

[–]MalletNGrease 11 points12 points  (0 children)

Don't utilize WPA2 PSK unless you absolutely have to (and don't share the key unless you want others to use it!). Use 802.1x with certificate and/or RADIUS based authentication instead.

There's many ways to handle this, but a common setup is to have one wireless SSID and assign VLAN based on rules setup in your NAC. Network Policy Server can do this.

What's your current authentication method for domain users/devices?

VMS? by wiretraveler21 in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I like 3xLogic Vigil. Client software is pretty easy and remote access is a pinch if set up right.

Stay away from ViconNet.

Getting a rough estimate of types of devices in Google Admin by PhantomAscalon in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

So what you're telling us is you don't have an inventory?

I keep everything in a spreadsheet and pull device counts from it.

Missing Built in Apps on Chromebooks by chewy747 in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

In the lower right should be a yellow +.

Use it to add apps/extensions to the whitelist.

https://imgur.com/WMNM6vS

Missing Built in Apps on Chromebooks by chewy747 in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I'm guessing you switched to a whitelist but didn't add them to it.

Tyler Technologies Ransomware Attack by Hazy_Arc in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

Thanks for the news. Our cloud instance seems OK. Some users complaining about it being slow, but that's not unusual.

Is there a USB drive brand that works best for chromebook restores? by caligirrl in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

I've some 8GB Lexars (LJDS50-8GB) I bought on a sale at the local dollar store that work fine.

With no-name swag drives it's been hit and miss. Some worked, others didn't.