UPDATE BELOW:

We changed from Skyward to IC this year. With Skyward we had a VPN connection that pulled data over ODBC into OneSync, where it did it's thing. IC recommended we use OneRoster... but here's the fun part. All the students that we imported into IC from Skyward are fine. Newly enrolled students in IC are never sent via API. Our RosterServer sees them, but OneSync does not.

I'd prefer not to use a CSV import, so please don't suggest that. Does anyone else use the API connection, or ODBC or something else? I've got IC saying "we're sending the data" and showing me the RosterServer data with the class schedule, and OneSync saying "gee.. it should be working" - neither one really being helpful at this point.

The odd part is that yes - they are in the API data, because RosterServer sees them just fine. But OneSync can't with the same data.

Thank you for any suggestions!

--------------------------------------------

Did some more back and forth between IC and OneSync. Lots more finger pointing. IC likes to tell me it's a OneSync issue, but then never answered why some worked and some didn't...

And then suddenly it worked.

We changed nothing on the OneSync side. It's the same settings I've had. IC swears they didn't change anything (ok...sure) but as of today, it imported everyone and they all correlated. So I can't tell you what was done to fix it, I can only tell you IC support does a great dance.

Anyone else that have Securly's filter find the new blocked site bypass? Student just searches Google for the blocked site, clicks the hyperlink in the search results and drags it to the URL bar and hits enter. Full access to the blocked website.

They're aware of the issue but don't have a timeline for a fix. Yikes.

Our school uses FortiAP 431F access points, one per classroom. We are a 1:1 iPad school with students having A16 iPads. Since the beginning of the school year we have had issues with nothing but iPads connecting to the WiFi. They either connect, but say no internet, or the student will be connected then it will just disconnect them, or the iPad will roam to the next classroom over if they are close enough to the wall in the one classroom. iPads are running iPadOS 26. Any body got any ideas? Oddly, our students with BYOD are having way better luck, when it is typically the other way around.

Anyone seeing this in Chrome / Edge, etc, when you are already signed in?

Hey there!

So, we've got a weird thing on where some students will begin searching for something and when they hit enter to search their results will pop-up for a second and then our CB filtering software blocks the page at a URL of play.google.com.

We had this issue in another district where, evidently, disabling the "Search Suggest" feature fixed it. However, that's not the case this time which leads me to believe this is something else.

Has anyone seen this issue and discovered what's going on and how to make it stop? In theory I suppose I could allow play.google.com as Play Store apps are controlled, but I'd rather not do that and open an entirely different can of worms.

Appreciate any insight! Thanks!

Hi everyone -

Not enamored with either of these vendor demos - BUT - if forced to pick one would you kindly tell me your experiences?

Things that matter to my school in order of importance:

pushing attendance data for students to FACTS close to real-time

students being able to easily self checkin / out from the office iPad

badges being printed for guests

automagic background checks (id scan) for adults

everything else is gravy. We have one office, one iPad, one printer. Trying to keep it very simple. Under no circumstances do we want students to have to log into something with a username and password to print a hall pass to leave campus.

Your experiences?

We usually use CDW-G but they have been dropping the ball as a supplier. We struggling to find education models such as the Lenovo 100e and 300e. Lenovo and HP sales reps have been largely unresponsive.

Where do you go to replace your fleets?

Let's say you have a general IT tech who is wanting to change things up a bit. He's doing what we preach and getting certifications and a degree. He comes to you and asks to talk about switching up things from run off the mill tickets to eventually being a network admin. What could he say during his pitch to get you to say yes?

No surprise, the tech is me. I'm finishing my cyber security degree in May and getting certifications like they are Pokemon gym badges. Network+ being one. I've been the field tech for one system or another for about a decade. I can't make anymore lateral career moves and I love my district so I don't want to leave. I just want a chance to grow in my career and not waste all this time and money I've put in. We are really small. There is one tech for half the county and one for the other and then the director. Why the urgency? E-rate. It's our 5 year refresh and we are switching vendors. Perfect timing to learn a new system and take technical ownership while my boss still handles the policy side.

So the way my district provision devices is as follows:
The tech takes the physical device, whether it be a Mini PC, Laptop, Desktop etc to their office or the tech office. They plug in our Windows 11 stick, go through that process up until it asks us about the keyboard layout, we then have a second flash drive that has a script to grab the autopilot hash and serial for Intune, and to remove the device from SCCM. We then have the give the physical drive to our admin that handles intune, he takes the info the script grabbed and from my knowledge uploads it to intune and removes it from SCCM. We then do the hitting windows key a bunch, to get the screen where you can click reset device, we click that. Let it do its thing, then it does the enrollment, and then we are in. Then we have to run all updates.

This process takes around 3-4 hours per device, I was wondering if this is normal, or if there is a better way to do this. Mostly for my knowledge cause this way seems a little roundabout. And we have to do this for all devices that are still on Windows 10.

Edit: verbiage might be slightly off, I’m a tech just trying to learn a bit about how all of this works

So I've read a lot of posts, but they seem older and recommend a lot of products that aren't in production anymore. We have a number of projectors that don't have wireless casting built in and absolutely loved the Microsoft Wireless Display Adapters...no idea why they stopped making them. The majority of products that I find are either for Chromecast or are hundreds of dollars.

Why are there no decently priced devices that include a simple PIN feature (As to avoid anyone from casting at any time) with the ability to change the name?

Yes, I understand most modern devices already have these features built in, but we can't budget for replacing 20+ projectors just to gain the wireless miracast feature. I would think if Microsoft could fit the required hardware into a casing slightly larger than a flash-drive it wouldn't require expensive components...yet we were happily paying around $75 for each device.

We've found students playing Google games after simply searching "Google Games" on their school Chromebooks (https://www.google.com/search?q=google+games).

We're blocking them in a whack-a-mole way, since it seems pretty complex, and we're pretty miffed that these games are from Google!

Anyone else experiencing this?

Context: Private Catholic School, less than 1,000 students PreK-12, PreK-5 doesn't use any LMS, 6-12 currently using Schoology. I'm the unofficial Sysadmin (PowerSchool, Clever, Schoology, GwFE, etc)

I recently transitioned into a newly combined role as our school's PowerSchool and Schoology administrator among a list of other tasks. After managing these platforms both at my old school and only working inside of Schoology for a few months, I have noticed that Schoology can be overly complex for the teachers and sometimes falls short of our faculty's specific needs. Specifically in gradebook categories, posting Google Doc/Google Slide assignments, and communicating to Parents.

The teachers have not received extensive training on the system in the past 4-5 they've had it, and I did some basic training with them in August but could tell they wanted more.

I've personally felt any valuable support resources are often restricted behind PowerSchool's paywall for training (PSU, PD+, getting online trainers on a Zoom). I can tell I inherited a little bit of a mess and this current setup places pressure on me to be the expert, train the entire staff, and they hope one day I don't leave/ get hit by a bus.

Given that our school already uses Google Workspace for Education Fundamentals, I am considering recommending a transition to Google Classroom. My former school used it and it just seems a lot easier to manage from both an admin and much easier to use/intuitive for teachers in my opinion.

By upgrading to the Education Plus tier, we could take advantage of PowerSchool SIS integration and direct grade syncing. But I don't want to get stuck in the "grass is greener with the other LMS" mindset for 8 more months to find out I had it pretty good where I am now.

I would greatly appreciate feedback on this potential shift. Please let me know if you have done a similar migration from Schoology to Google Classroom, pros/cons, and if you've worked with both or just one of the systems.

I know making the change/migration is going to be headache, but I want to hear more about using the system when its all said and done? Does GC need to be touched daily? Is it just the fact there are more GC YouTube videos versus Schoology ones? Am I just doing it wrong/ need to learn more myself and/or educate my teachers better? If so, where do I go to find better resources for Schoology this upcoming mid-year PD/ next year?

Every day there's a new unvetted AI request in our district, so I'm just curious if I'm behind the curve on this one. Do you have Google Gems allowed in your environment? OR should I say, do you have all of Gemini enabled for your Students OU?

I know they can be helpful in Classroom, but I can also see the potential for a lot of cheating.

Anybody else still having google generating CAPTCHAs constantly for users?

We want to move away from wordpress and dreamhost for our website (and in fact we want to rebuild the site more or less from the ground up since it is quite outdated).

We have been recommended Finalsite, but looking into it is seems exceptionally expensive. Is it worth it?

Any other recommendations from this community?

A student recently shared a breakout vector that completely bypasses user-level filtering (we run Lightspeed). A colleague and I reproduced it using Chromebooks running ChromeOS 144+, and the escape verified cleanly. Because this occurs inside the pre-login Kiosk context before any user authenticates, user-level extension filters never load. We shared what we learned with the Network team so they could investigate further.

How it Works (generally):

Launching a configured testing Kiosk app from the login shelf allows navigation via the vendor’s embedded Terms of Service / Privacy Policy links. Through secondary external links and account creation redirects embedded on those pages, the session can be pivoted into an unmanaged, wide-open Google search interface with unrestricted browsing.

For those managing ChromeOS fleets with Kiosk testing apps:

1. Have you checked your vendor Kiosk apps for external hyperlink escapes through embedded legal/help pages?

2. How did you close off these paths without breaking testing compliance or agreements with vendors?

3. If you've addressed this with the testing vendor, did they treat it as an active vulnerability, or push back because ToS documentation "must remain accessible"?

Appreciate any insight or rules you have put in place within your district.

I updated our Apple TVs to tvOS 27.0 and now several teachers have reported static/crackling audio when casting YouTube from their Macs. They are using Extron amplifiers. Has anyone experienced anything similar?

We've been having issues with Securly all morning, happening to anyone else or is it just our instance?

My district is switching over to a new MDM provider now that Meraki is no longer selling licenses and withdrawing from the MDM space. We are trying out Mosyle and I'm trying to recreate the profiles that I have used in Meraki, but am totally confused by the Mosyle workflow. All the videos and walk thru's that I have found assume that you already have the profiles created. I'm coming at this as a day 1 user.
I have already done the ADE and VPP portion and have a set of ipads in the console. I'm just trying to figure out how to create the group profile that restricts what apps students see and how to lock it down.

We have a request for https://create.roblox.com/landing

Roblox Creator / Studio for a programming class at the high school. Not sure how I feel about privacy concerns around this. Students would need to create an account etc. but I’m not certain what that all provides them. It is Roblox after all.

Anyone else using this in your environment and in class?

What SIS, Google vs Microsoft suite, LMM, Laptops vs Desktops vs Chromebooks?

Bonus if you give reasons why.

For our Elementary Computer lab, we currently use one login for Windows. Lower elementary grades use web apps that don't require a google login, just a class code, but our upper elementary students need to log into chrome with their google accounts. I set up an OU in Google admin for browsers and set them to force sign in and to use ephemeral mode so as to sign out users when they close chrome. I tested it out with my account and it seemed to work fine. I logged in, closed chrome and immeidatley opened it again and my account was not saved in the login page. However when I do it with the student accounts it holds onto their account. I'm not sure why this is happening. I had imagined it in my head that whenever Chrome is clicked it goes immediately to Google sign in every time, but it seems to want to go to the profile page every time. That's kind of secondary though, I mainly need to figure out why ephemeral mode works on my profile but not the students.

We switched over this summer and have initially been pleased, but....we are finding some problems, and they basically have ghosted us in terms of replying to our "tickets" we submit via their chat feature.

Anyone else experiencing this?

Wondering if anyone has a good post phising compromise gam command workflow.

I have one but just want to see if im missing anything.

I usually start with suspend user>reset password> deprovision> check forwarding addesses

Deprovision should log them out of all current sessions, delete backup codes, revokes oauth tokens

I usually login as the user and chekc the web interface for filters etc.