mikeglover

Does anyone know or have a contact for Google that works with IP rate limiting. Basically our school has been getting random Google Captcha Robot when doing google searches and its because Google is putting a temporary ban on our public IP. We've tried load balancing acrossed a subnet of IP's but the problem continues. We are a Google Workspace school but when I've reached out to support for Workspace they won't help me. If anyone knows of anyone at Google that can help, could you please DM their details that would be greatly appreciated. It is a very intermittent issue that started back in February this year.

Thank you all for your replies. It's given me some food for thought. I'm liking the idea of restricting the login to a set of devices, they are going to be given Android Tablets which are intune managed home screens so I'm guessing I could setup conditional access so generic cover accounts can only access those Android Tablets and nothing else. If some one could point me to a guide I'd appreciate that as not something I've covered in intune. If not, getting Yubi key so they have to plug that into the tablet to login sounds like a good idea. Does seem to be an issue that others face which is reassuring that it's not just a unique procedural thing in our school.

I have been asked to setup generic agency cover accounts for Arbor and Microsoft 365 so when an agency staff comes in to cover a lesson they are given an android tablet, given a username and password to access Arbor and Microsoft 365 where powerpoints will be shared with them on the lesson. As they are agency, they will probably be just for that day and we will no longer see them again and another agency will be shared the details. This quite a security concern sharing out login details with agency and one possible solution is automating rotating the password every single day, which I don't find appealing and a hack on a solution. What do other schools do in this situation? Do they get accounts? Do you regular change the password? I'd be curious on peoples thoughts on this. Have a good day.

Your not going crazy. I just logged in. built a boat and quickly found where i originally built my base. It's the same seed as before.

Wondering if anyone has been through setting up certificate based wifi rather than password based wifi on a large collection of Chromebooks. Basically I have just over 600 chromebooks that all get setup on a SSID that is WPA2 password. Password is compromised and the leases for the subnet are being taken up by devices that aren't mine. I'd like to look at something long term thats better and started looking at EAP-TLS with Radius rather than just setting up another password and ending up in the same boat again. ChatGPT led me down a whole path which ended up in alot of frustration. I manage all my chromebooks with Google Admin Console and have the fundamentals licence. Apparently there is no easy mechanism to deploy certificates to devices and Google leave you to make you own thing. I setup a NDES server but I don't even though if this is the right thing to do. Appreciate anyone that has been gone this route and been successful and share any advice.

Thank you DrCheese and Discovery1301. That has worked. Though briefly this morning and now getting a error. AADSTS7000016 Application with identifier error so I need to trace my steps back and find what I've broken but at least I've seen it working. 😀

Strategically there are a lot of things that makes sense for us to go to Microsoft. And I know that it is different for every school. I'm not getting dragged into a fighting match of which is better. I can't right off a massive amount of Chromebook hardware, so looking to make the most with what we have. 🙂

Hi all, We are looking to transition to Microsoft 365 away from Google. But we have about 600 chromebooks I'm looking at federating our Google Workspace accounts with Microsoft 365. So Microsoft is the idP in this scenario. I've got it setup with some test accounts but the experience login into a chromebook is. Type in username in the Chromebook login screen. > It redirects to our Microsoft 365 login screen. Asking again for the username (which is identical). Then password, and finally login. I'm trying to avoid the typing in of the username twice as this is a bad user experience. ChatGPT and other AI are running me around in circles says it can be done but I've yet to find a solution. I'm interested to know any school that have been in our scenario of being a Microsoft 365 school and having Chromebooks. Appreciate any help you can give. 🙂

I thought I was going mad when I was trying to HP 255 G7 working on self-deploy. Fairly new to self-deploy as been using user-driven alot. Oh well back to user user-driven for these. Thank you for saving me wasting time more on this.

Just for anyone finding this thread, Krystal Hosting using their chat and then email ticket. I was moved over from TSOHost within a couple of hours. Longest bit was inputting the Custom DNS records. Their support was speedy and no nonsense. :-)

Thank you, didn't see that thread. Contacting Krystal now. :-)

So I had an email from TSOHost saying that they are no longer supporting TLD and it will impact my .sch.uk domain I have. I use them as a NAMESERVER DNS only, no web hosting. I have until 30th April to transfer out to another provider. I have used Cloudflare personally but I don't know if they do .sch.uk Anyone using Cloudflare DNS and .sch.uk domain? If there is someone else thats awesome and good let me know. 30th April doesn't give me much time so bit crazy.

Hi all, Has anyone been able to successfully deploy Linux Apps to managed Chromebooks? I've been asked to deploy Musescore which is a linux application as well as Windows and Mac and to install it on Chromebooks. I've started looking at enabling Linux on chromebooks which is still Beta. But I don't see any management stuff in the Google Workspace Admin Console to push out applications. I feel that getting Windows laptops is going to be much simpler in this scenario but I've been asked to try and get it working with Chromebooks we already have.

Hi all, Just to give another update, I purchased another licence and assigned it to a new device. In doing that it must of done something in the backend with Apple intune because it freed up the licence so I have 2 now. Strange one.

Just in case anyone else looks at this in the future. I ended up in a complete mess with all of this. The device that I originally assigned it to has been wipe, re-added to intune. It's an old iPad mini and it's not fully compatible. It runs iOS 12. I can't find a way to tell intune to remove it from the device, it doesn't think it's got it anyway. This licence is just lost in limbo as far as I can see. Assigned to a device that can't login to company portal because the latest version is required but it isn't support on iOS 12. I'm going to have to request we repurchase another licence for the software and just write off 1 licence. Crazy :-(