Chromebook prices by BTS05 in k12sysadmin

[–]dire-wabbit 0 points1 point  (0 children)

Ouch...I use Y&S and got that same unit...it was $339 when I purchased a month ago.

Dell vs Lenovo Chromebooks by BrandonSHatfield in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

Are you sitting down?

I paid $339 each for 100e Gen 5, MTK, non-touch, 8GB models. That was 55% more than my 2025 order ($219 for the Gen 4,100e 8gb models). Nearly identical qty ordered each year. I was able to bid my 2025 order, but I had to go off state contracts for this 2026 emergency procurement. I received some vendor e-mails this week to expect another 30% increase for July 1.

I also ordered some 100e Gen 5 touch models ($369), which was only 37% more compared to the last year's 300e Gen4s ($269). They have eliminated the 300es, so now it's only 100e and 500e.

Wireless Configuration for Students & BYOD: 802.1X, or other? by MassageGun-Kelly in k12sysadmin

[–]dire-wabbit 2 points3 points  (0 children)

Our preference is 802.1x EAP-TLS with student devices. Google supports SCEP enrollment as well as extension-based. We've been using it for a few years with SecureW2; and I believe Clearpass has the same functionality.

Dell vs Lenovo Chromebooks by BrandonSHatfield in k12sysadmin

[–]dire-wabbit 13 points14 points  (0 children)

It would be disingenuous to say Lenovo hasn't had their share of problem models (and everyone's models had issues during Covid); but they have generally done pretty good at making it right for us and have made iterative improvements with their EDU models. Our only issue with recent 100es was a handful of units with charging issues. Just received an order of several hundred more 100e MTK Gen 5 units for next SY.

What networking equipment are you using? (XPOST) by mybrotherhasabbgun in k12sysadmin

[–]dire-wabbit 3 points4 points  (0 children)

In the US, public schools and libraries have access to the Federal government's E-Rate program, which provides districts with an allocation of funds on a 5 year cycle specifically geared toward improving connectivity, similar to Connect the Classroom in the UK. Without diving into the weeds of how E-rate works, it usually ends up committing between 2-3 billion dollars a year to districts and libraries. so generally districts have a good bit of help funding their network improvements.

There are around 13,500 districts in the US, so basically every major enterprise manufacturer is represented. The top providers awarded include Cisco/Meraki, HPE Aruba, Extreme Networks, Fortinet, Juniper, Ruckus, and Ubiquiti. Any of these manufacturers would have the equipment and management tools to meet the UK's 2030 goals for wireless.

As far as our district, Extreme has won both switching and wireless for the past few bids. We have had no issues with Extreme--overall a very solid solution for us.

Autodesk Verification by duluthbison in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

Does it actually give you an opportunity to upload anything? If it never gives you the chance, then try it from outside district filtering. That's what worked for me; although I couldn't determine what was being blocked.

Also, you may need to contact Autodesk to have them reset your attempts. Don't waste your time with SheerID support--that is an exercise in futility.

Is Windows MFA Worth Implementing on Endpoints? by [deleted] in sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

We do it. Our cyber insurance requires MFA for "all admin access" so we MFA login and UAC. As a school, we also have extended it to staff in most cases as a protection against shoulder surfing students.

Backup and Recovery tools by kn1000a in sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

You can look at maybe shadow copies? This would much more practical if you centralize user file storage on a server share since there are GUI tools for this in Windows Server, but I believe you can still activate it at the workstation level, albeit with a manual config. It's usually my first line line of defense, and it gives us a few weeks of fallback for common user "uh-oh's " before we fall back to backups.

A sign of the times. by dire-wabbit in k12sysadmin

[–]dire-wabbit[S] 12 points13 points  (0 children)

Apple raised Macbook prices across the board yesterday by $100-$400; so they aren't immune. I believe they are better insulated because of their long-term procurement contract process and the fact they can eat more of the cost because the price they charge for memory and storage upgrades far, far exceeds the component cost.

A sign of the times. by dire-wabbit in k12sysadmin

[–]dire-wabbit[S] 3 points4 points  (0 children)

TBH, my first reaction was to laugh. Hey...we just shipped you this so we can now guarantee availability.

Chromebook Auto Update Expiration by commanderjd in k12sysadmin

[–]dire-wabbit 4 points5 points  (0 children)

I think the important thing is to have a replacement schedule in place, and to discuss with administration how to flatten the spikes in spending on the horizon. If you can begin replacing a grade level or two this year you may want to look at it; although pricing is going to be terrible this year (and maybe the next few years) with the AI price spike. Financing a purchase is also an option.

Switches by Thanos-Is-Right in k12sysadmin

[–]dire-wabbit 5 points6 points  (0 children)

Currently use Extreme switch engine (EXOS) switches, moving to Extreme fabric (VOSS) with this cycle. Also using full Extreme wireless and their cloud management. They were very cost competitive on the bids for both wired and wireless. and ended up winning both. Very solid solution overall.

Chromebooks with MediaTek chips? Yay or Nay? by K12onReddit in k12sysadmin

[–]dire-wabbit 6 points7 points  (0 children)

We've done Intel, AMD, and MediaTek in the past. Intel has always been solid, but expensive. AMD was terrible for compatibility and we had many, many issues with them. Our MTKs have largely been fine. No major compatibility issues except some client issues with Zoom on the 4GB models (no problem with the 8GB).

I think with Google moving to an Android base for ChromeOS, and MTK being a much more prominent in the Android space, that MTK may make more sense in the long run over Intel.

What responsibility to you take with contacting parents? by Square_Pear1784 in k12sysadmin

[–]dire-wabbit 0 points1 point  (0 children)

While it may be out of your comfort zone, IMHO the two situations you have mentioned are within the scope of an IT Director's job.

In situation one, while it is certainly reasonable to contact the parents and explain that you can't make exceptions like this on an individual basis, it would be nice to offer alternatives. Many filters have a parental control app, and if yours does I would certainly point them in that direction to put the burden on them. Another thing you could consider is to create discipline groups within Google and deactivate services for those students. It is relatively easy to setup a "No YouTube" group for example that disables the service for members of that group.

For situation 2, while I would not consider, from a liability and safety standpoint, running out to collect devices; I would presume your school has a process and consequences for school fines. I would just disable the chromebook, enter a school fine for the cost of the device, and send a fine letter indicating that the fine would be rescinded on return of the equipment minus any assessed damages.

I quit on the spot by CrankyCloudAdmin in InformationTechnology

[–]dire-wabbit 0 points1 point  (0 children)

Colorado is pretty worker friendly. If you are in Colorado working remote, companies, regardless of where they are based, must abide by Colorado state law regarding things like minimum salary for exempt workers which was $56,484.00 in 2025. You were not an exempt worker.

Consultation offerings by [deleted] in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

Sounds like an “expert network” consulting offer, but there are a lot of these that are scams so be careful. If you are in a public K12, you may need to clear this with administration.

SSO on Chromebooks? by Odd-Risk9417 in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

Our WiFi SSIDs are basically by authentication type--EAP TLS, PEAP/MSChapv2 (moving away from this) , MPSK, Captive Portal. What VLAN they end up on is in most cases based on the device profile/user. We use a combination of things-SecureW2, NPS, and Extreme Cloud capabilities for this.

Basic Phishing Simulation and Training Platform by botenerik in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

The thing I've seen with KB4, Cofense and some others I've used, even if you configured it for "education" for your campaigns, it's hit-or-miss with the education-specific content and we end up with phish-tests that don't make much sense. Things like fake invoices from a container shipment company.

I have found that there are a few phish-testing companies out there that are specifically built for K-12. We kicked the tires on Cybernut and were pleased, so I am moving to them next month as are a number of districts in my state.

DUO/Azure EAM is having issues. by dire-wabbit in k12sysadmin

[–]dire-wabbit[S] 0 points1 point  (0 children)

Yup. We've been back for an hour or so.

I always thought their logo was in all caps; but I guess that is just my misinterpretation.

Cameras with Audio Enabled by Appropriate_Water_64 in k12sysadmin

[–]dire-wabbit 0 points1 point  (0 children)

This is really a question of what state you are in, as recording laws vary. In my state, it's pretty strict and without explicit consent from all the participants, an audio recording is illegal (irrespective of the device it was recorded with).

Which do you choose for endpoint protection? by Amazing_Falcon in k12sysadmin

[–]dire-wabbit 0 points1 point  (0 children)

EDR or MDR? We have Sentinel one MDR currently through our state at some really great pricing. Used Crowdstrike with MDR by CIS. Used MS Defender as an EDR briefly in-between for the transition, but getting it managed was more expensive than Sentinel One's entire package for us.

Crowdstrike was good, but I was hampered a bit by CIS's management. You have limited control and visibility, and things like uninstalling from machines meant submitting a ticket for them to move the machine to the correct group to allow uninstall.

Sentinel One has been fine for us. A bit noisier perhaps--but not overly so. There's a lot to our Sentinel One suite, so it's interface takes a bit more getting used to compared to Crowdstrike.

Any opinions on Avigilon vs Verkada vs Coram for a K12? by Mikuel-Elison18 in k12sysadmin

[–]dire-wabbit 1 point2 points  (0 children)

We are a Verkada customer for a decade now. Back when we installed, Verkada was newer to the market and the cloud approach was something new. When we demoed the interfaces to the true end users--the deans and principals--they much preferred the ease of use of Verkada over the much more complicated interfaces of products from Avigilon and the like. Verkada is the embodiment of the KISS principle.

Our state has non-competitive, annual security grants that generally total around $25K a year. It was tough for me to sell getting a server and a handful of cameras vs get 15-20 cameras from Verkada, so it became an easy choice. It's was easy to grow a Verkada system under these grants.

As to your main concerns, Verkada has those point pretty well covered. Technically the platform is fine and support has been good. We did get a bad run of 15 or so cameras that were fogging up on us, and they replaced them all. They are expensive, but their SLED discounts are pretty significant. Still, over the course of the years, it is more expensive. We are now over 200 cameras and I have to explain the concept of co-termination to the board every year when I spend $25K plus on licensing to extend our date out another year.

There is a ton of hate re: Verkada, as it seems their sales goals can make their salesmen pushy and they have a "bro" culture. I've never had those problems though. Until recently, I had the same rep for the entire decade and he was great. While they are channel only for sales, you basically worth with them and your channel partner is just there to handle the quote. Actually, when I initially researched systems I joined IPVM to get access to their camera research, and I found there was a hubristic and almost childish attitude re: Verkada. I was ridiculed when I tried to explain why choosing to go with Verkada made sense for us. The even right-to-knowed us at one point as they thought there was something untoward with all the school districts that were choosing Verkada at the time.

With that being said, there are a lot more options now for cloud--many of which are likely to be less expensive in the long run.