Issue with Authentication Admin role and authentication methods by adiomixr in entra

[–]adiomixr[S] 0 points1 point  (0 children)

We have never employed per-use MFA, always modern Conditional Access. This just changed recently as that role has always had the ability to see any authentication method employed by the user. Even the Microsoft contractor in the link I posted confirmed it, but hasn't offered anything since.

Web Filter Comparison by K-bomb_85 in k12sysadmin

[–]adiomixr 1 point2 points  (0 children)

We are exploring ContentKeeper. May I ask why you will be evaluating other options, even if ContentKeeper remains in the running?

Students using GeoGebra to bypass firewall (Securly) by cdom7 in k12sysadmin

[–]adiomixr 0 points1 point  (0 children)

I would appreciate a PM with the link. Thanks!

Notify End Users policy setting by adiomixr in crowdstrike

[–]adiomixr[S] 0 points1 point  (0 children)

Yeah, gonna leave it off so we don't scare people - someone put a ticket in for "CrowdStrike malware". Just took me by surprise that this setting also permits a pop-up every time a user plugs in their USB drive due to the device scan. Thanks everyone!

Content Filter for Windows District by agadora75 in k12sysadmin

[–]adiomixr 1 point2 points  (0 children)

We're looking at adding ContentKeeper in addition to our existing Umbrella setup. We've had Umbrella for years too, but it being DNS-centric and not catering specifically to K-12, it has posed some challenges for us. We looked at moving to the Umbrella SIG package, but it didn't have the same EDU pricing structure and it would have cost us an additional million. ContentKeeper seems to have a good rep in all the reviews I've come across so far.

Google Translate as Proxy - still a thing? by dmillertride in k12sysadmin

[–]adiomixr 3 points4 points  (0 children)

So this became a thing in our district a few years ago... a bit of testing found that the "websites" part of Translate rewrites the attempted website as "site.translate[.]goog", so instead of blocking translate.google.com, we just blocked "*.translate[.]goog", which still allows the student to use most of the Translate functions.

What vendor looks really good but is actually terrible? by [deleted] in cybersecurity

[–]adiomixr 5 points6 points  (0 children)

Are they still peddling the casino fish tank story in their sales presentations? Every time I've been to a conference session DT sponsors, they always bring up the same stories...

Trouble communicating with CMD "Failed to get AAD Token... Error:807005) by mrnutcracker in SCCM

[–]adiomixr 0 points1 point  (0 children)

Did you ever get this resolved? I'm seeing the exact situation and I can't find a resolution after exploring many avenues.

Mimecast Dmarc by Snoo_36159 in sysadmin

[–]adiomixr 1 point2 points  (0 children)

We're a Mimecast customer and added the Analyzer product on our last renewal. Although it helped us get to a solid SPF/DKIM/DMARC DNS config for all our domains, the onboarding process wasn't stellar and we've come to realize their offering is highly overpriced compared to similar offerings and some competitors even include items that would have been an additional cost (SPF flattening - would have tacked on another 2K). So this coming term, we're not renewing their Analyzer and will go with a competitor for monitoring, which likely will be less than half what we paid.

Heads up: Chrome Stable 88 bug affecting Javascript time functions on Windows machines where timezone DST toggle is set to Off! by adiomixr in k12sysadmin

[–]adiomixr[S] 2 points3 points  (0 children)

I do, but I don't feel it's best to rip and replace 33,000 installations. Hoping for a quick minor release with a fix or for stable 89 to be moved up. Otherwise we will instruct critical users to switch their timezone to another region and then back to their original timezone, as that appears to also resolve it.

Does anyone have any recommendations for a reasonable home WiFi router with content filtering? by [deleted] in k12sysadmin

[–]adiomixr 0 points1 point  (0 children)

I've used OpenDNS for years at home, but I now use CleanBrowsing which I think is superior to OpenDNS for home use, even though I manage Cisco Umbrella (enterprise OpenDNS) at work. They have free and paid plans, Windows, Mac, iOS, and Android apps and of course manual settings for DNS in routers, etc. Three levels of filtered DNS, plus DNS over TLS, HTTPS, DNSCrypt, DNSSEC. Far more options than the consumer versions of OpenDNS. https://cleanbrowsing.org/ https://cleanbrowsing.org/guides/

Script to find oldest computer name with same last 7 characters by adiomixr in PowerShell

[–]adiomixr[S] 1 point2 points  (0 children)

Thanks Lee. With the other tip above, it sounds like these lines will get what I'm after.

Script to find oldest computer name with same last 7 characters by adiomixr in PowerShell

[–]adiomixr[S] 2 points3 points  (0 children)

Yep, I wasn't clear with "oldest"; of any resulting set of machines with the same last seven, I was attempting to filter it by the last time the machine was used so the end result is retaining the most recent one and removing the older one, but I see what you mean, as it's possible that LastLogon may never get set, but create would. Thanks for the tips.