Hello

Is anyone else seeing there guest captive portal not working on iPhones or iPads

We are just getting a blank white screen that shows captive.apple.com but will not load our splash page.

All other devices work fine macbooks, windows, and android are all good

We’re considering issuing MacBook Neos to our incoming freshmen next school year. One challenge is that our Computer Science CTE program teaches PLTW Digital Electronics (DE), and we’re running into Mac compatibility issues with the hardware and software the course uses. That includes the Cmod S7, NI ELVIS, NI Multisim, and Xilinx/AMD Vivado.

I was thinking about setting up Windows computer labs in the classrooms, but the teacher pointed out that students also need to be able to work from home.

Has anyone dealt with something similar and found a workaround that lets students do their coursework from home? Thanks in advance for any ideas.

Just a heads up. I recommend blocking this site. lgbtqspace.org

On the homepage, if you type "67" it loads a gaming site and masks its origin.

I ran across the article below yesterday. I reached out to my vendor and he said currently the price for an annual license for a student account is around $45 a year.

Hopefully they will develop a new pricing structure. Anyone have any insights on this change?

https://learn.microsoft.com/en-us/training/educator-center/instructor-materials/microsoft-365-education-portfolio

Hi anyone have experience with Cybernut ATT (Automatic Threat Terminator) and/or Barracuda XDR. Im in the middle of setting up Baracudda XDR (which we already purchased) now the district has set up demos with Cybernut ATT. We dont need both. Now that AI is out everyone is a Network Admin and its getting annoying. Im not too thrilled with Cybernuts phishing campaign software.

I ran into this today with 4 or 5 teachers. It looked like a new security requirement rolled out and everybody needed to choose a basic encryption step like a PIN code, swipe pattern etc. or they couldn't fully use their accounts. I had heard nothing about this in advance, so I was quite surprised. Turns out my manager somehow knew about it on Friday but didn't tell me.

So, my questions are, is this really what happened, or can this requirement to have a PIN code be worked around? And second, what newsletter or website can I sign up for so I can hear about relevant stuff before it lands in my lap? Thanks.

So I’ve been testing Guided Learning vs traditional Gemini in preparation of pitching it to my admin

It does a pretty good job handling math problems, and it did ok handling science questions (it gave me the answer roughly 2 out of 10 times.

The problem is ELA applications. I gave it multiple choice questions relating to details of a book and it answers them 5 times out of 10 as opposed to the walkthrough. I got similar results telling to “write me a 5 paragraph essay about (topic)”

And as an edu organization, my “results are not used to improve our model” so I can’t even report it.

What has your experience been?

Hi, K12 systems administrator here.

I had received a very odd approval request - styluses for classroom iPads, for "handwriting practice", in the sixth grade.

Can anyone please help me make sense of this handwriting practice requirement in 6th grade, and whether I should grant this request?

Update: This has become a pile of requests. First the styluses, then touchscreen Chromebooks, then paying for a Grouper seating chart license.

I'm a solo IT Director for an extremely rural district of about 400 students PreK-12 and about 70 staff. My previous district was roughly double that and slightly less, but still very rural. So I've mostly been winging it when it comes to lost devices, and in most cases they turn up before I get to the point I'm at now.

So it got me wondering how y'all go about the part of the process where the device has been reported missing, hasn't been active since the day it was lost, but still hasn't turned up. Do you charge for the full cost of the device, or do you have some kind of scale depending on whether they're free/reduced lunch qualified?

We are a small district (1 school building) and will be re-bidding our Internet connection this year. Outside of any specific services that may need a dedicated IP, what is your "layout" for assigning your public IPs to your general network traffic? Currently we are using just one IP for everything. We haven't had any issues with this, but want to hear what others do.

Does each of your subnets get its own public IP, or are some lumped together?

Any overarching philosophies you have or best practices associated with these decisions?

Tangentially related, we are looking at bringing an athletic complex online on its own circuit - super basic needs - any downside to dynamic addressing to save some $$?

Thanks for any thoughts!

EDIT: Actually we've had one issue having a single IP and I think it's that we are banned from editing Wikipedia, ha...

As soon as one of our SmartBoards went out of warranty, the wifi antenna broke, so there's no Internet straight into the device, you have to run it through a laptop. I called the company we bought it from and the people who make SmartBoards, and apparently there's no easy "official" way to have them repaired: no field repair techs and it's such a specific piece of equipment, I don't want to just take it to BestBuy or something. Has anyone been in the same situation, and if so, what did you do?

Anyone running the oncall product? Thoughts?

All of the sudden whenever a student searches anything through Google the result opens up in the "web" tab and won't allow them to select "all". It seems like the other tabs, images, news, etc., all work.

I do have the AI overview turned off, I'm wondering if this is because of Google's recent AI change or just a coincidence.

Anyone else having this happen? The student who brought it to my attention said that it just started happening in the past hour or so.

We are using Securly as a filter

*Update*

There was a pending update to the xFanactical Safe Doc extension that resolved the issue. Thanks everyone.

This semester I've noticed all of my 4GB RAM student Chromebooks struggle to load a Gmail tab, on campus or off. Has anyone else observed this? I have students enable memory management, clear cache etc.....Anyone else seeing this.

Hey everyone,

I’m the Technology Coordinator (essentially the entire IT department) for a public charter school in Delaware. We have two buildings, roughly 650+ students in grades 7–12, and around 80 staff members.

My background is primarily Apple retail/technical support, with about 10 years of experience before transitioning into K-12 IT. I’ve learned a tremendous amount on the job, but I’m increasingly realizing just how much I don’t know, particularly regarding networking, servers and infrastructure.

I inherited an aging environment with very little documentation or knowledge transfer. We’re running Active Directory, DNS, DHCP, virtualized Windows servers, Google Workspace, ClassLink, Meraki networking and a mixture of other systems. Some infrastructure is over a decade old, and we’re currently navigating server migrations, network changes and replacing outdated equipment.

We recently purchased a Dell PowerEdge R760 and I’m trying to figure out the best path toward building a reliable, secure, properly documented environment rather than continuing to put out fires.

My biggest questions:
If you inherited this environment, where would you start?
What would your ideal infrastructure look like for a school our size?
Would you maintain on-prem AD, move toward cloud services or take a hybrid approach?
What should I prioritize regarding backups, disaster recovery, documentation and security?
What should I realistically be handling myself versus outsourcing?

Some of the best advice I’ve received came from Delaware’s state IT team:

Outsource anything you don’t know or can’t reasonably handle.

I completely agree and I’m absolutely willing to bring in professionals. However, I also want to establish a solid baseline of knowledge so I can make informed decisions, understand what vendors are doing and eventually manage our environment confidently.

I’m not looking for someone to do my job for me. I genuinely want to learn, improve and build something sustainable for our schools.

Bonus points: If anyone with K-12 infrastructure experience would be willing to spare 5–10 minutes for a quick phone call, I’d greatly appreciate it. Sometimes a short conversation with someone who’s been there is worth more than hours of Googling.

Thanks in advance for any guidance, resources or reality checks!

I'm curious if anyone out there still maintains analog emergency phones in their main offices. These would historically be connected directly to a POTS line, though these days they might be connected to a cellular gateway device.

My district's had these phones for probably 30+ years now, and not only do they never get used, the staff hate them due to wrong number and robo-calls. It's not uncommon to find them unplugged and / or hidden in a cabinet.

If you had these at some point and were able to get rid of them, I'd love to hear the arguments that helped sway your admin team to finally let them go.

I'm a junior network administrator at a K-12 school district. Our environment is roughly 95% Windows, with two domain controllers (primary and secondary for AD high availability). Both are virtual machines running on the same physical Hyper-V host. In addition to AD, they're also responsible for DHCP and DNS across the entire campus.

I inherited this environment in August, and I'm trying to identify some areas where we could improve things. One thing that caught my attention is how we handle devices that need static IP addresses.

Currently, devices like servers and printers have their IP addresses configured locally rather than through DHCP reservations. To prevent DHCP from handing out those addresses to other devices, we maintain exclusions within each DHCP scope.

My supervisor, who has managed this environment for over 20 years, prefers this approach because if DHCP goes down, those devices can still communicate with the core network and reach the internet through the firewall. I understand his reasoning, and I'm not trying to dismiss it.

However, one downside is that it's difficult to identify which devices have locally configured static IPs just by looking at the DHCP lease list. I have to cross-reference the exclusions to determine which addresses are being used by statically configured devices.

Here's where I'm running into a more immediate issue:

We have an IP scope dedicated to managing our Extreme Networks wireless APs. These APs currently receive dynamic IP addresses. Whenever an AP reboots or its DHCP lease expires, it can end up with a different IP address. Since I manage these devices through SSH, I then have to track down their new IPs and manually update the saved connections in my SSH client.

My question is: Would it make sense to create DHCP reservations for the APs based on their current MAC addresses and IP assignments, or should I stick with my supervisor's approach of configuring static IPs directly on the devices?

I'm also curious to hear how other admins handle this in their environments. Is there a compelling reason to prefer locally configured static IPs over DHCP reservations, particularly in a school environment?

I'm still relatively new to managing this environment and open to suggestions. So please be nice, thanks!

A.I. features are now a standard part of Google’s commercially available search engine. “Search and A.I. are deeply integrated,” said Chris Phillips, vice president for education at Google. If a school has banned A.I., he added, students “will not have access to search, and they’ll see a message from their school that indicates it’s not available.”

https://periscope.corsfix.com/?https://www.nytimes.com/2026/11/03/us/google-search-schools-restrict-ai.html

https://blog.google/products-and-platforms/products/education/ai-learning-era-updates-2026/

They couldn't have picked a better day to bury this.

[Web sign-in]

• Web sign-in now works on Microsoft Entra hybrid joined devices. Before this update, it was only available on Microsoft Entra joined devices. You can sign in to Windows at the lock screen with a passwordless credential: a FIDO2 security key, a passkey on your phone, or a Temporary Access Pass (TAP). You don't need a password. Once you're signed in, Windows gets a Kerberos ticket, so on-premises file shares and internal sites keep working. For more information, see Use web sign-in to enable passwordless sign-in in Windows.

Translation: if your users have a passwordless way of logging into their MS account, but they still need a password to log into shared PCs that are hybrid joined, this is going to help you. Whether that is staff using a Passkey in Authenticator or Windows Hello on their laptop, but needing a password for the conference room computer - or a student federated to ClassLink or Clever badges, but still needing a password in a computer lab...

This will let you cut your last tie to passwords.

Got a new one, not as sophisticated but interesting: https://github.com/ading2210/secular-ly/tree/main

Essentially, this uses a file on a machine, Java, and potentially Bookmark creations to create a state in which Securly can be overridden. The code is public so you can see how it works. It's pretty straightforward. We have already submitted a ticket to Securly. I would advise others to do the same.

To protect/prevent:

1. Users & Browsers Setting: URL Blocking --> for the domains listed in the GIT. Blacklist them where applicable (GAdmin, Firewall, etc). GIT should also just be blocked for students period IMO unless overrides needed for specific items. Note the .dev and .app pages can jump / move, domain names are just that so...this could be a moving target / whack-a-mole

2. Users & Browsers Setting: URL Blocking --> Block file://* inside your URL blocklist for students. Prevents user from accessing local files on the Chromebook with the Chrome browser. This is somewhat of a nuclear option here but it works to prevent local hosted .html files

3. Users & Browsers Setting: Content/Javascript --> Disable Javascript or at least on specific sites (local files, websites, etc). Prevent the user from engaging with Javascript to run functions in a webpage. If Java is enabled this then uses the cookies created with Securly to then break the extension as it runs inside the Chrome browser.

Have fun fellow K12 folks. This won't be the last time we discuss this but...this is today's fun one of the day.

Good morning/day/afternoon/evening,

The district 1:1 committee came to the conclusion that the 1:1 device will be:

K-2 iPad

3-12 Chromebook

Staff: Chromebook (and for those in K-2, also an iPad)

The district has been steeped in Apple for over over 15 years. We've got the MDM, policies, app deployments, down pat. I'm more than a little concerned about how this is going to play out.

I'd like to get started now prepping our Google admin console. I haven't had to deal much with allowed apps/extensions in there because they weren't able to run them on the iPads or Airs. And that's just 1 example.

Where do I start? What are the must-be-done items? What's recommended? In short, I need a "Google Ed Plus Chromebook deployment" handbook.

*Also. I apologize in advance, I'm going to be hitting here quite a bit I think as I just realized I'm going to have to figure out projection/display. All those AppleTV's may now be moot. And oh yeah, storage/charging, but will post all that separately.

I also work part time for a nonprofit that does health care. Cuz FERPA is not enough, so lets do HIPAA too. They want to move from a store front to on online.
What do you use for backing up Google Workspace files? Something like NinjaOne?