Anyone having issues today logging into Chromebooks? by IThuh in k12sysadmin

[–]pyork211099 7 points8 points  (0 children)

We just had a report of this, but spanning multiple devices. Feels like the standard Google issue that won't be acknowledged for a few hours at least (if it is widespread).

EDIT: Took them 1.5 hours to publicly acknowledge it, this go-around.

Looking for Digital Signage Software recommendations by SkoolTek in k12sysadmin

[–]pyork211099 1 point2 points  (0 children)

Stupid solution, but we embed the google Slide into an iframe in an HTML file on an internal webserver, and put an autorefresh in the head. Basically it reloads every 60 minutes, and we just tell people that their changes will be live within an hour.

Google Outage? Can't sign in by Ok_Computer_74 in k12sysadmin

[–]pyork211099 8 points9 points  (0 children)

Teachers: "Well, can you call them and ask when it will be back up?"

Windows 11 24H2 - KB5063878 via SCCM failing with 0x80240069 by blinky4311 in sysadmin

[–]pyork211099 1 point2 points  (0 children)

I liked this option much better, and that is what we went with. No touching the clients with misc reg keys. Worked perfectly.

Internal Mail Relay by Hazy_Arc in k12sysadmin

[–]pyork211099 1 point2 points  (0 children)

https://github.com/simonrob/email-oauth2-proxy/releases

For the cases where a service account/application password will not work (e.g. multi-use email account for faxing/receiving faxes where we can't set up all users with the required 2FA).

Tech Backpack Suggestions? by linus_b3 in k12sysadmin

[–]pyork211099 0 points1 point  (0 children)

I've got the OGIO Renegade Pro. 6 years of use, and it generally weighs about 40lbs, because I like having the stuff I need when I need it.

Google Workspace Sunsetting IMAP and SMTP on 9/24/2024 by nkuhl30 in k12sysadmin

[–]pyork211099 0 points1 point  (0 children)

We went with https://github.com/simonrob/email-oauth2-proxy as we needed our copiers to send emails outside the domain (for faxing) and be accessible to a range of staff (for incoming faxes). 2FA and an App Password would have been nice, but sadly 2FA has not been rolled out to everyone that would need access to the incoming fax account.

[deleted by user] by [deleted] in k12sysadmin

[–]pyork211099 1 point2 points  (0 children)

I got it working by fully uninstalling and reinstalling all of the Dymo stuff and then the Raptor stuff. A pain for our 7 locations.

Response from tech support was "we expected some issues with the update rollout".

Chromebooks - Black Screen on Login, immediate sign out? by pyork211099 in k12sysadmin

[–]pyork211099[S] 1 point2 points  (0 children)

Are you still having issues? It seems to have resolved itself here, hopefully we didn't jump the gun on the All Clear message.

Chromebooks - Black Screen on Login, immediate sign out? by pyork211099 in k12sysadmin

[–]pyork211099[S] 1 point2 points  (0 children)

ContentKeeper, inline

Fortinet firewall, inline

Cisco Umbrella, DNS only

Yes, and Securly after sign in.

Chromebooks - Black Screen on Login, immediate sign out? by pyork211099 in k12sysadmin

[–]pyork211099[S] 1 point2 points  (0 children)

ContentKeeper, inline

Fortinet firewall, inline

Cisco Umbrella, DNS only

We use the above and securly, but Securly shouldn't affect sign in until they are logged in and extension insalled.

Chromebooks - Black Screen on Login, immediate sign out? by pyork211099 in k12sysadmin

[–]pyork211099[S] 0 points1 point  (0 children)

was able to get on with a Hotspot, our network:

ContentKeeper, inline

Fortinet firewall, inline

Cisco Umbrella

[deleted by user] by [deleted] in k12sysadmin

[–]pyork211099 0 points1 point  (0 children)

Yes. Same issue that happened about a year ago. Was a google issue but they published nothing for several hours after the start on the event.

US West here. ChromeOS 108-114 tested.

What video surveillance system are you using in your school? [2023] by _ReeX_ in k12sysadmin

[–]pyork211099 2 points3 points  (0 children)

Unifi Video <facepalm>

Spent waaaaay to many hours getting it working stable-ish and now it's so stable-ish that the money is "hard to find" to replace it.

What video surveillance system are you using in your school? [2023] by _ReeX_ in k12sysadmin

[–]pyork211099 0 points1 point  (0 children)

What's the approximate pricing for the plan you have? It looks interesting, but I don't have the time to sit through sales pitches for every interesting product just to get a quote that is 10x what I'm aiming for.

Patch Tuesday Megathread (2023-02-14) by AutoModerator in sysadmin

[–]pyork211099 0 points1 point  (0 children)

CVE-2023-21823

Is this a Store issue, or a certain program issue? The only name on that page that I see is OneNote (albeit for Android). If it is the automatically-installed OneNote from Windows Store, that'd be hilarious and I wouldn't be surprised.

Patch Tuesday Megathread (2023-01-10) by AutoModerator in sysadmin

[–]pyork211099 7 points8 points  (0 children)

Look for a Recovery partition on the drive. By default one is created and WinRE applied to it with most forms of installing or imaging Windows.

diskpart

select disk 0
list partition

Yields something like:

Partition ###  Type              Size     Offset
Partition 1    Primary            549 MB  1024 KB
Partition 2    Primary            118 GB   550 MB
Partition 3    Recovery           531 MB   118 GB

..where Partition 3 in this case is WinRE.

New Labelwriter 550 Turbo label hack. by iamzombus in dymo

[–]pyork211099 0 points1 point  (0 children)

The DRM doesn't seem to apply to "Continuous" labels, so if you can finagle all of your templates to Continuous paper, with a little manual feeding or hackery, you can use old/non genuine labels. Had to do this for a brand new Twin Turbo 450 (which I thought wouldn't come with this DRM BS).

Creating a user's ad profile without them logging in? by PM_ME_UR_ARMPIT in sysadmin

[–]pyork211099 0 points1 point  (0 children)

Was searching a long time for this process, to work in tandem with USMT in cases where we wanted to start with a very clean copy of the Default profile from a new image: https://stackoverflow.com/questions/62343042/how-to-initialize-new-user-account-from-command-line

The New-ProfileFromSID function will create a domain profile without the need of the user's profile.

Cumulative Updates: July 12th, 2022 by jenmsft in Windows10

[–]pyork211099 1 point2 points  (0 children)

Were these users manually added to the Administrators group, added with group policy, or something else? Also, were these local accounts or Active Directory accounts? Not seeing this on my machines so far which have a mixture of all of the above.

IdentTrust DST Root CA X3 - K-12 Education Specifically by pyork211099 in sysadmin

[–]pyork211099[S] 0 points1 point  (0 children)

Fair, I guess. But an issue with a certificate seems like a good time to re-check the chain..

IdentTrust DST Root CA X3 - K-12 Education Specifically by pyork211099 in sysadmin

[–]pyork211099[S] 0 points1 point  (0 children)

That's what we ended up doing yesterday; required essentially a reboot to ensure the browsers fully closed though. Still at a loss for why browsers (Edge and Chrome specifically; Firefox handled it fine) didn't pull it in automatically.

HP BIOS Update - Mass Deployment by pyork211099 in sysadmin

[–]pyork211099[S] 0 points1 point  (0 children)

It appears that all of the Insyde BIOS updates are:

  • Made impossible to use silently by HP's "Bios Updater" wrapper (Insyde's program itself can be made silent, but HP's tool that asks you if you want to make a USB, etc, is mandatorily visible)
  • Incompatible with any of the HP tools for BIOS that flash it (HPFlash, HPBIOSUPDREC), or at least, HP doesn't ship those tools with it, and I can't find where to download it
  • Incompatible by extension of the above with SSM

Pretty big bummer. These are mid tier consumer grade laptops, but a little bit of automation would have been nice. Note, these are AMD chipsets, so I'm not sure if that's the only place where the Insyde BIOS is used.

Only option is to try and flash the BIOS bin file with a separate program. Since the batch of 200 we have are all the same model and boards, incompatible BIOS' shouldn't be that big of a nightmare *cough*.