ZeroAccess

Mods, I'm sorry, this is off topic and you can remove it if you feel necessary but I'm just so disgusted at the e-mails I have been getting today and I needed to rant.

I have received 4 separate sales emails or phone calls today from vendors trying to sell us lockdown/security/door/alarm tools. The last one I got listed every school shooting in the last 6 months and basically had a tone of "you're next if you don't buy our product". It's disgusting. They're so pushy and rude, too, saying that they've been trying to setup a meeting with us for a while now but have been unsuccessful, but NOW do you see why we've been trying so hard?

Vendors, I'm begging you to rethink this strategy.

Without going through a service like Bark or GoGuardian, does Google Admin have a built in reporting tool for something like keywords in Chats or Email bodies?

Hypothetically, say a student emailed another student "Send Nudes", could we have an alert that would constantly monitor our domain for the phrase "Send Nudes" to send us an alert?

I remember when this first came out there were concerns about Vault or logging, but I haven't checked into it since then. Should we have it turned on now? Certain staff send some confidential documents and have asked about us enabling this. Anything I should be concerned about?

In a normal year we have every kid use a domain PC and login with a generic account to change their password, which then syncs to Google. Our O365 syncs with AD, but we barely use it, it just exists - I don't think we have the right licensing for anything fancy.

Next year we'd like to bring the new students in early to pick up chromebooks, login to their chromebooks to change their passwords, and then have that sync back to AD. Is this possible? I only want it the first time, then I can continue using GAPS once they are in school to go from AD to Google instead.

For example, say a teacher suspects a student of copying another student's work. Do you check the drive audit to find clues for them?

What about if a teacher asks you if a student read an email they sent - do you check the logs to see if the email is unread? Do you mark notes anywhere about why you looked?

What about if a student claims to have tried to do something on classroom but couldn't login, do you check login logs?

These are all hypotheticals, I'm just wondering if you have written policies on what is crossing the line? To me a lot of the stuff I'm asked to do is borderline snooping. For the most part I'm in the "our account, our device" camp and whatever you do is fair ga

He's addicted to Knack 2 but if I have to play 1 more time I'm going to kill myself. Anything else good for his age range? He can't really use both thumb sticks so moving the camera is too hard, Knack was perfect since the camera wasn't adjustable. There's also no death limit, time limit, hard puzzle solving etc.

Suggestions?

I was thinking with GAM I could export a full list of classes in my domain and then filter. Does the admin panel have a better report? Does anything else out there do what I want in a better way? Ideas?

They are trying to figure out who is prepared to work from home, essentially.

When I first set this up with the old Google admin panel there used to be a spot to just upload the chromeos.json file, which would tell the chromebook what ORG Unit ID to use and they would self register.

I don't know if I don't have the .json correct anymore, or with the switch to the COS-SD nonsense they changed something, but for whatever reason I can't get the chromebooks to register anymore, they have to manually type in the org unit ID. Anyone know why? Anyone want to share what their json field looks like in the "policy for extensions" part of the kiosk app permissions?

We're having an issue now that I can't seem to pin down - I can have a .csv generated from our SIS with just changes, but can someone help me out with the powershell to create, not modify, existing users? I can't get the .csv export to completely match what I'd need for a powershell-AD import, so how can I automate this better?

I should have mentioned I'm coming from Aspen and we sync from AD to Google.

I'm trying to deploy a captured image from a .wim, not a lot of custom task sequences just pushing out a standalone image. It works fine on 90% of our machines but the brand new Dell laptops we've gotten don't seem to boot after deploying, I'm guessing because of some UEFI issue.

Is it a simple change in the TS? https://image.ibb.co/nExnf9/image.png

To start, let me say that I am not that proficient in Group Policy in general. We rarely have to mess with it so I'm rusty.

I'm trying to create a new GPO to target just students as we move to Windows 10. I have it linked to a lab of computers for testing, and have the filtering applied to the Students - https://i.imgur.com/m4E4mwL.png

In the Delegation they have Read and Apply GP access. https://i.imgur.com/cezNwqA.png

When I run a GP Result as a student on a machine in that Lab the GPO is denied for Security Filtering. https://i.imgur.com/OdXhILr.png

There are computer and user settings in this GPO - is that the issue? Should I separate them into 2 different objects? I added aut