mikeglover

Does anyone know or have a contact for Google that works with IP rate limiting. Basically our school has been getting random Google Captcha Robot when doing google searches and its because Google is putting a temporary ban on our public IP. We've tried load balancing acrossed a subnet of IP's but the problem continues. We are a Google Workspace school but when I've reached out to support for Workspace they won't help me. If anyone knows of anyone at Google that can help, could you please DM their details that would be greatly appreciated. It is a very intermittent issue that started back in February this year.

Thank you all for your replies. It's given me some food for thought. I'm liking the idea of restricting the login to a set of devices, they are going to be given Android Tablets which are intune managed home screens so I'm guessing I could setup conditional access so generic cover accounts can only access those Android Tablets and nothing else. If some one could point me to a guide I'd appreciate that as not something I've covered in intune. If not, getting Yubi key so they have to plug that into the tablet to login sounds like a good idea. Does seem to be an issue that others face which is reassuring that it's not just a unique procedural thing in our school.

I have been asked to setup generic agency cover accounts for Arbor and Microsoft 365 so when an agency staff comes in to cover a lesson they are given an android tablet, given a username and password to access Arbor and Microsoft 365 where powerpoints will be shared with them on the lesson. As they are agency, they will probably be just for that day and we will no longer see them again and another agency will be shared the details. This quite a security concern sharing out login details with agency and one possible solution is automating rotating the password every single day, which I don't find appealing and a hack on a solution. What do other schools do in this situation? Do they get accounts? Do you regular change the password? I'd be curious on peoples thoughts on this. Have a good day.

Your not going crazy. I just logged in. built a boat and quickly found where i originally built my base. It's the same seed as before.

Wondering if anyone has been through setting up certificate based wifi rather than password based wifi on a large collection of Chromebooks. Basically I have just over 600 chromebooks that all get setup on a SSID that is WPA2 password. Password is compromised and the leases for the subnet are being taken up by devices that aren't mine. I'd like to look at something long term thats better and started looking at EAP-TLS with Radius rather than just setting up another password and ending up in the same boat again. ChatGPT led me down a whole path which ended up in alot of frustration. I manage all my chromebooks with Google Admin Console and have the fundamentals licence. Apparently there is no easy mechanism to deploy certificates to devices and Google leave you to make you own thing. I setup a NDES server but I don't even though if this is the right thing to do. Appreciate anyone that has been gone this route and been successful and share any advice.

Thank you DrCheese and Discovery1301. That has worked. Though briefly this morning and now getting a error. AADSTS7000016 Application with identifier error so I need to trace my steps back and find what I've broken but at least I've seen it working. 😀

Strategically there are a lot of things that makes sense for us to go to Microsoft. And I know that it is different for every school. I'm not getting dragged into a fighting match of which is better. I can't right off a massive amount of Chromebook hardware, so looking to make the most with what we have. 🙂

Hi all, We are looking to transition to Microsoft 365 away from Google. But we have about 600 chromebooks I'm looking at federating our Google Workspace accounts with Microsoft 365. So Microsoft is the idP in this scenario. I've got it setup with some test accounts but the experience login into a chromebook is. Type in username in the Chromebook login screen. > It redirects to our Microsoft 365 login screen. Asking again for the username (which is identical). Then password, and finally login. I'm trying to avoid the typing in of the username twice as this is a bad user experience. ChatGPT and other AI are running me around in circles says it can be done but I've yet to find a solution. I'm interested to know any school that have been in our scenario of being a Microsoft 365 school and having Chromebooks. Appreciate any help you can give. 🙂

I thought I was going mad when I was trying to HP 255 G7 working on self-deploy. Fairly new to self-deploy as been using user-driven alot. Oh well back to user user-driven for these. Thank you for saving me wasting time more on this.

Just for anyone finding this thread, Krystal Hosting using their chat and then email ticket. I was moved over from TSOHost within a couple of hours. Longest bit was inputting the Custom DNS records. Their support was speedy and no nonsense. :-)

Thank you, didn't see that thread. Contacting Krystal now. :-)

So I had an email from TSOHost saying that they are no longer supporting TLD and it will impact my .sch.uk domain I have. I use them as a NAMESERVER DNS only, no web hosting. I have until 30th April to transfer out to another provider. I have used Cloudflare personally but I don't know if they do .sch.uk Anyone using Cloudflare DNS and .sch.uk domain? If there is someone else thats awesome and good let me know. 30th April doesn't give me much time so bit crazy.

Hi all, Has anyone been able to successfully deploy Linux Apps to managed Chromebooks? I've been asked to deploy Musescore which is a linux application as well as Windows and Mac and to install it on Chromebooks. I've started looking at enabling Linux on chromebooks which is still Beta. But I don't see any management stuff in the Google Workspace Admin Console to push out applications. I feel that getting Windows laptops is going to be much simpler in this scenario but I've been asked to try and get it working with Chromebooks we already have.

Hi all, Just to give another update, I purchased another licence and assigned it to a new device. In doing that it must of done something in the backend with Apple intune because it freed up the licence so I have 2 now. Strange one.

Just in case anyone else looks at this in the future. I ended up in a complete mess with all of this. The device that I originally assigned it to has been wipe, re-added to intune. It's an old iPad mini and it's not fully compatible. It runs iOS 12. I can't find a way to tell intune to remove it from the device, it doesn't think it's got it anyway. This licence is just lost in limbo as far as I can see. Assigned to a device that can't login to company portal because the latest version is required but it isn't support on iOS 12. I'm going to have to request we repurchase another licence for the software and just write off 1 licence. Crazy :-(

Sadly I can't tell staff to wait for a report until Spring.

Does anyone know what ReportData.xls does differently in the fixed version. I've tested it and it works well on alot of our reports but sadly there is a Achievement Report that was custom made by another member of staff that is very knowledge about custom reports and the fix doesn't work on it. The member of staff that made the report isn't available and it would have to be the report that all the staff are trying to run at the moment

Thanks for you replies. I'll look at starting to remove uev profiles then. If anyone knows specifically what Azure syncs that would be interesting. I clear out local profiles on machines older than 7 days just so they don't get full of profiles from students moving around. Staff I don't clear profiles.

Hi all, I have a mixture of Windows 10 and 11 machines in the school now. Azure Hybrid joined with our on-prem AD server. Regards profiles some time ago we moved to UEV profiles because that was the new thing. But I believe that UEV profiles isn't really a thing anymore going forward? I'm wondering what are others doing? Do I got back to just roaming profiles again? I have some staff using Azure AD accounts but most and students are still using on-prem accounts. Reason I ask is because I have a strange issue where if someone logs into a Windows 11 machine, uses it, logs out and then goes on a Windows 10 machine, they loose the taskbar clock and notification icons tray from then on. I believe it is UEV profile related so don't want to spend time trying to fix it if its dead technology and I need to move on to something new for Windows 11. Interested to know your thoughts. :-)

Ok, so do I reassign it as required again on that same device. Wait for it to try to install it and then move it into uninstall.?

It was device assigned

Hi all, I've been struggling with deploying an iOS app that was purchased via our Apple School Manager. The MDM is setup as intune and syncing all seems to be working fine. My problem is I assigned the app to an iPad that has iOS 12 and isn't supported by the app. The available licences was 1 before I assigned it to this old iPad. I removed the assignment in intune The app never install on the assigned iPad. I now have a new iPad (iOS 16) so its compatible. I've gone to assign and get the app installed on the new iPad but it won't install because available licences is still 0. It thinks I don't have a licence free but I don't have it installed on the old iPad or any device. ASM says the app is in use. I've tried factory resets, removing it from both intune and ASM and adding it back in. I've tried revoking the license but that hasn't done anything. This problem started since July and I had to shelve it so it's not a case of it just needing time to sync or update. Unfortunately the school wants this resolving soon so this problem has to be resolved. Can anyone help me and spot what I'm doing wrong or experience similar problem?

Hi all, Thank you for your replies. I must admit my knowledge on this is a bit limited but I do understand that /31 being point to point I dont have broadcast address and something I guess smoothwall boxes are configured to rely on. I've managed to speak to someone with knowledge at Expo now and hopefully have a plan. @PaddyNewman We currently have a Cisco Meraki MX firewall using /31 which is fine. Our plan now is to temporarily have 2 connections into the school, our existing /31 and a new /29 subnet created that smoothwall will like. It will allow us to transition from Meraki to Smoothwall safely then terminate the /31 when we know we are safe. Just waiting on installation dates now and work out downtime for the school. Things like SIP trunks will need be to timed to move when we move subnet. I'll come back and let everyone know how it goes. :-)

Hi all, I'm curious to know if anyone has or had Smoothwall and an ISP that use a /31 subnet for router gateway. Our ISP Exponential-E use a /31 subnet and Smoothwall say they can't use that. I've got a installation of Smoothwall due soon and it's looking at the moment like we can't go with Smoothwall because of our ISP which is really frustrating. Trying to get a reason from Smoothwall on why we can't and getting my ISP to move it to a /30 subnet seems impossible at the moment. Wonder if anyone else has been through the same headache? Mike

Thanks Jawloms much appreciated. Need to learn to fly better ;-) A portal will be handy yes please, if your on before me I think to the right when you walk up the steps from the boat. I went to the one on the shore and was trying to find some soul sand for an elevator.