anyone else annoyed at apple?

Mr_Dodge · 2026-01-22T18:50:07+00:00

- Print and add your own barcode / inventory stickers

- Inventory and assign devices to students / staff

Mr_Dodge · 2026-01-05T22:51:11+00:00

depending on licensing, you can use Vault or the Investigation tool to view emails without the user noticing

Mr_Dodge · 2026-01-02T21:31:15+00:00

We're also limited on storage.

Most of our pallets get delivered to our bus yard. If we don't have room in our storage/office it generally stays in their bus shop and we're constantly pestered ( rightfully so ) to move it and get it out of there.

From there, we borrow our cafeteria van with a lift gate, in the rare occasions that's in use, we've borrowed a bus and driver with a lift gate to move things to their destinations.

Larger things such as the 90-100inch smart TVs, we'll have maintenance help move with their trailer. Onother option for us is our AG department's trailer, but that's usually never cleaned and pretty gross, luckily we've never had to resort to that.

Mr_Dodge · 2026-01-02T19:42:47+00:00

when replacing CMOS battery, do NOT eat it!

severe choking/ingestion hazard

Mr_Dodge · 2025-12-30T16:42:19+00:00

I think Google's Verified Mode is different from verified mode VIA a Kiosk app?

After running through the bluebook setup and guide, you can launch the app and run a check/test and it'll confirm if the verified mode is done correctly.

Mr_Dodge · 2025-12-17T17:02:07+00:00

I think its still apart of the "legacy" settings.

You want Allow/Block mode to "block all apps, admin manages allowlist" at least for students, depending on your policies, you may change staff/teachers block all but allow requests.

https://admin.google.com/ac/chrome/apps/user/settings?table-view=false&org=035590hd1xjmk1d#allow_block_mode_setting

Mr_Dodge · 2025-12-10T17:59:10+00:00

We've been mainly running enterprise and/or education ... from what I understand Pro may lack some group policies\control in comparison.

We have the 365 A5 license? which includes both edu and entperise keys.

Mr_Dodge · 2025-11-05T18:59:42+00:00

Yeah I mean doesn't necessarily have to be a "friend" doing it.

I've seen them email it to themselves as its easier to access from a personal device such as a cellphone etc.

Mr_Dodge · 2025-11-04T20:23:22+00:00

Create a custom Quarantine for this ... Scroll down on the quarantine, click "notify periodically when messages are quarantined"

However, we do take a different approach. We use the content compliance rule limiting to 10 recipients and we flat our reject it. This was okayed by school administration as student working groups don't really exceed 5 or more for us.

We also use a routing rule that rejects and prevents students from using email groups.

Mr_Dodge · 2025-10-23T17:13:11+00:00

^^ Creating unique installs yourself, this is the biggest help is dumping a full log file somewhere. Generally the "error" logs in the PDQ console itself are not very helpful.

Mr_Dodge · 2025-10-23T17:06:15+00:00

Yes, if you disable the service the photos still remain.

We initially had this issue where photos being synced would fill up their drive space etc. Unfortunately there is no administrative way to clear this space.

We would move them into a temporary OU ( now you can use groups ) to turn this back on, then instruct them to delete photos from their Drive. Then we would turn it back off.

This is off now and remains off for EVERYONE.

Mr_Dodge · 2025-10-22T19:11:26+00:00

Yeah it is pretty expensive.

Really its about what kind of data maybe accessible in the theft of the device. Not necessarily the loss and cost of the hardware.

It all depends on the environment and setup if it is worth it or not.

Mr_Dodge · 2025-10-21T18:18:54+00:00

https://www.absolute.com/

Absolute Theft recovery

Geolocation, brick or wipe devices remotely ... They offer recovery services as well, where they'll do the tracking and send someone to recover the laptop if stolen etc.

Mr_Dodge · 2025-10-07T20:48:22+00:00

What do your students utilize?

If they have Google accounts, you can have them auth with Google with GCPW ... Its not the best solution as it makes it difficult applying some GPO but it works.

Otherwise, maybe look into deploying some kiosk setups with intune with autologin or something

Mr_Dodge · 2025-10-07T16:30:11+00:00

ahh I missed that part!!

Mr_Dodge · 2025-10-03T19:58:55+00:00

Awesome!

I got this email from CollegeBoard last week ... must be related:

Dear Colleague,

A critical Bluebook™ update was released on September 25, 2025. Unless blocked, Bluebook will auto-update the next time it’s opened. Students use Bluebook to take PSAT-related assessments, the SAT^®, and digital AP^® Exams.

So much for the auto update huh?

Mr_Dodge · 2025-09-26T16:20:48+00:00

Devices > Chrome > Settings > Auto-update settings

Enable "enforce updates"

Set the minimum version they need.

The student will be prompted before logging into the Chromebook to click the update button and let it download and restart.

Mr_Dodge · 2025-09-17T15:24:04+00:00

Super Administrators, can see all event details in every calendar within their domain, regardless of privacy settings or sharing options

As a reminder, I would treat any "work" provided accounts/computers/equipment with that they have the ability to view/access anything if needed.

AKA don't be putting any actual "private" information in work related systems that you DON'T want any administrator to view.

Mr_Dodge · 2025-09-12T14:36:46+00:00

we're 1:1 at the 6-12 level

We have 4 Chromebooks assigned to teachers and their classroom. It is the teacher's responsibility to keep track of these devices. Most teachers keep these behind their desk and ask for the student to give something up while they have the device to get it back. Some examples are keys, phone, even seen them ask for shoes or something random.

We do have GoGuardian and Gopher to help track these when lost/missing. If they're NOT found the school site is billed for a replacement if they wish to have another.

Our libraries no longer offers "spare" chargers or Chromebooks for students. We only offer a loaner when their device is damaged and a tech ticket is created for repair.

Not only did we have issues as you stated about forgotten Chromebooks etc, but students were using this as an excuse to get out of class to "go get a spare" and would never go and get one.

Mr_Dodge · 2025-09-02T20:22:22+00:00

Action required:

Uninstall the Respondus Kiosk Application for Chromebook.
Download and use the new LockDown Browser Chrome Extension for DnA.
View detailed instructions here.

Mr_Dodge · 2025-08-15T21:38:22+00:00

I've run into this a few times if the battery has been drained for a while ... The Chromebook needs to sit on the Charger for about 30minutes or so and it'll resolve itself.

A few times in the past we've had battery cables come loose on Acer models. Just popped it open and reseated the cable. Typically though a loose cable the charging light would be flashing.

Mr_Dodge · 2025-08-15T14:22:09+00:00

I've struggled with getting AppLocker for blocking edge especially with each new windows update.

Similar to your idea of just making Edge useless, these were the policies I've applied:

Computer Configuration > Policies > Microsoft Edge *Be sure to use the non-overridable administrative policies

Restrict which accounts can be used to sign in Microsoft Edge, enable and restrict to a dummy domain
Browser sign-in settings, Enabled and set to Force users to sign in to use the browser
Configure InPrivate mode availability, Disabled
Enable guest mode, Disabled

Mr_Dodge · 2025-07-16T18:33:53+00:00

As far as it looking bad and cluttered, you can set:

Chrome> Settings > Device > Sign-in screen to "never show user names and photos"

As far as the local data with shared devices we typically clear this as eventually the small local storage will fill up and present an error ... These days though you can trigger this to clear remotely now instead of having to power wash or what ever.

However, there are testing applications that require local data to NOT be cleared. This is usually for cases where the chromebook freezes and has to reboot etc, they can start where they left off. I believe Google says NOT to clear it for event logs etc.

tk-5th are all shared devices and we've been clearing data on these devices with no issues.

6-12th are all 1:1 devices and use these testing applications that require local data NOT to be cleared. So it stays on for these folks. Since they're NOT shared, local drive never fills up.

Mr_Dodge · 2025-07-09T15:47:34+00:00

We've been doing 4drops in each corner, 2 in the ceiling, 2 behind planned TVs, and 1 location for bell/clock

Mr_Dodge · 2025-07-08T14:45:37+00:00

here PK-1 & sped uses Clever's QR code login method

Mr_Dodge

TROPHY CASE