DGardiner

[color=#455A64][font=Roboto]Hello David,[/font][/color] [color=#455A64][font=Roboto]Your Case #46873065 for Chrome has been updated.[/font][/color] [color=#455A64][font=Roboto]Case Subject: Chrome Browser Cloud Management licence suspended? not sure if i need to do anything?[/font][/color] [color=#455A64][font=Roboto]Case Comment : [/font][/color] After reviewing the information you provided, we believe that you may have been affected by an issue that has already been resolved. Please review the details below to confirm that we've correctly identified your issue - Suspended/Removed Unused Chrome Browser Cloud Management (CBCM) Subscription: Status: Fully Resolved Description: You have 0 CBCM devices under management, Google will start to suspend/removed CBCM subscription. And also you will see notifications and banners in Admin Console. You will eventually lose access to CBCM (but no other subscriptions will be impacted ) as part of our cleanup process. If the number of active CBCM devices is 1 or more, your subscription will continue to persist and you can enroll new devices. If the number of active CBCM devices is 0, your subscription will be suspended/removed because you don't use CBCM subscription. Workaround: [Notification and Banner in Admin Console] As of 2023/09/12 05:27 UTC, Google developer team cleaned up the suspension and the notification and banners don't appear in Admin Console. [How to enable the suspended CBCM subscription] If CBCM subscription has already been suspended/removed, the customer can re-enable the following steps. 1. Log in Admin Console with Super Admin. 2. Go to Billing > Subscriptions 3. Enable "Chrome Browser Cloud Management" Current update: At 2023-09-12 06:34 UTC (just now): Dear Administrator, We are Google Workspace Support Team. We’re writing to let you know the current observed symptom for Chrome Browser Cloud Management (CBCM) Subscription in Admin Console. [Title] Suspended/Removed Unused Chrome Browser Cloud Management (CBCM) Subscription [Description] You have 0 CBCM devices under management, Google will start to suspend/removed CBCM subscription. And also you will see notifications and banners in Admin Console. You will eventually lose access to CBCM (but no other subscriptions will be impacted ) as part of our cleanup process. If the number of active CBCM devices is 1 or more, your subscription will continue to persist and you can enroll new devices. If the number of active CBCM devices is 0, your subscription will be suspended/removed because you don't use CBCM subscription. [Notification and Banner in Admin Console] As of 2023/09/12 05:27 UTC, Google developer team cleaned up the suspension and the notification and banners don't appear in Admin Console. [How to enable the suspended CBCM subscription] If CBCM subscription has already been suspended/removed, the customer can re-enable the following steps. 1. Log in Admin Console with Super Admin. 2. Go to Billing > Subscriptions 3. Enable "Chrome Browser Cloud Management"[color=#455A64][font=Roboto]Please review your case and take any actions as requested. If you have any questions or require immediate assistance, please reply to this email to contact Google Workspace Support.[/font][/color]

that the response

Yeah we have this too

we use SIP-T40G SIP-T42U and SIP-T48U

add the other domain to trusted domains: https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F6160020%3Fhl%3Den&assistant_id=generic-unu&product_context=6160020&product_name=UnuFlow&trigger_context=a

Were using about 300 various models with 3cx and ive probably replaced 5-10 phones in 4 years

check your domain on mxtoolbox - if your blacklisted you probably need to find which account is breeched or configure antispoofing things

you cant do that in google the way youre thinking You can make a drive and enable sharing with non members - depending how your google is configured admin will need to change this setting in admin (we dont allow users to configure drives outside a default config), this allows you to share folders within the shared drive to other users and get this sort of access. but they wont get into it via a shared drive it will be the same sort of proccess as if a user shares stuff with another.

you can use managed browsers: https://support.google.com/chrome/a/answer/10377492?hl=en you need to deploy an app config when installing the app, not sure if it can be done retro spectively

Turn on ipad, put in wifi credentials. then the management screen comes up - next next next depending on your setup and its done

if theyre in ASM and assigned to the moysle server just a factory reset will do. when they setup and do the DEP setup they will pull the new push cert edit: if they have the reset buttons hidden for users you will need to DFU them using itunes/configurator to get them reset

we didnt disable it but we publish a custom directory to staff so no kids can be included accidentaly

i dont see how thats possible on IOS apple just dont allow you to have that deep a finger in the system unless theyre leveraging safari plugins? not entirely sure if thats doable from an MDM perspective - that or theyre using a global proxy type config

it doesnt matter if a device is 1:1 the device should always still need a login for security so i dont see where the issue is? Your windows pcs need a logon to identify them, chromebooks also. in propper shared mode each "session" is contained so the apps all work normally on each account for that user - its like a propper windows user environment as far as you login is all your stuff and not the previous users

im not sure if theres something your MDM can do to deploy the plist per user and prefill the username, but that would be great

its not even hard to "detect" i definately wouldnt pay a company for it - if you have log access to the webserver you can catch it.

ours is configured to sso with google, so first time round the kids put their email in, it forward to google where they login - they then set an ipad pin. from then on their email/pin will log them into any ipad open the smoothwall browser, login with google and whenever that users logged into an ipad the browser filter against that users config on the cloud filter(not requiring yet another login), the onsite appliance also regularly ingests the cloud filter data that allows you to run reports as normal if needed its also not so much a logout thing, just lock/sleep the ipad and unless the user puts their pin in, someone else would have to login to gain internet acces, which again would require them to login/identify as appropriate

Heres the plist info https://kb.smoothwall.com/hc/en-us/articles/4404006049810-Installing-Cloud-Filter-for-iOS depending on your mdm it looks like you can configure it per user so they wouldnt even need to do that

Ours is configured to require the user to log into their google account, which then saves the session details to their icloud drive and follows them from device to device - from then on its filtered/reported on just like the chromebooks on the cloud filter

actual shared ipad mode works fine. You push the cutsom browser and configure the plist appropriate for your environment

Our retention period saved our bacon last year when an energy brokerage firm had informed us that we had given them permission to resell our supply as they saw fit, given our size its not even one that would get past approvals without a number of people signign this off... something was up... they forwarded proof to the finance department. Panic ensued as the person who agreed to it no longer worked at the company and hadnt for a number of years.... opened up vault, and found the email in question, turned out they had edited the "evidence" email... high tech i know, im not sure what happened after that as that was the end of my involvement but our finance team were more than happy and they reported it to the DFE and the company never said a peep again

its fairly pointless unless your going to the effort of pulling things in from seperate ducts/cabinets as a digger going theough the duct is gonna cut most cables in both instances - id say the easiest would be a starlink backup line or equivalent service as it wouldnt break the bank! in 10 years of leased lines the only time it would have helped us is when VirginMedia had a nationwide outage from a coure router going pop.

even so, if you restart your ranges on a 10.x.x.x 10.1.1.x STAFF WIFI 10.2.1.x PUPILS WIFI etc that gives you an obscene available range in every vlan its personaly do them all /23 which gives you 512 addresses bump that up if you need more and start from there even if your current iprange you use in the flat state becomes your server range so you dont have to re-address your AD Servers etc its just a case of setting up iphelpers on each vlans gateway pointo to your dhcp server and it will all feed from there

If youre not tied to the range due to your ISP/Authority just make new ones with plenty space between and you can always extend

and theirs no hope of you maintaining or expaning it post project either.....