Profile

CommunityPlatform_1350x900.jpg

Tony Skalski

Edit My Profile

My Content

1 to 20 of 22 total

RE: BigQuery; Notre Dame job posting

Posted By Tony Skalski 10-22-2024 07:16:44 AM
Found In Egroup: Google Workspace \ view thread
We've used Big Query to get Gmail logs into Splunk. However, even at our scale (~4000 users) it was going to cost a few thousand dollars annually and we opted to turn it off. -- Tony Skalski (he/him/his)System Administrator | ITOffice: 507-786-3227 1510 St. Olaf Avenue Northfield, MN 55057stolaf.ed ...

RE: Do you use private or public CA to sign your RADIUS EAP certificate?

Posted By Tony Skalski 06-27-2024 09:31:50 AM
Found In Egroup: Wireless Local Area Networking \ view thread
This page was tremendously helpful when we rolled out a new private PKI a few years ago: https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations ajs-- Tony Skalski (he/him/his)System Administrator | ITOffice: 507-786-3227 1510 St. Olaf Avenue Northfield, MN 55057stolaf.edu

RE: Guest Access

Posted By Tony Skalski 06-14-2024 08:02:36 AM
Found In Egroup: Wireless Local Area Networking \ view thread
We're the same as Dan. Our Guest network is open with OWE. Friction-free as they say. ajs-- Tony Skalski (he/him/his)System Administrator | ITOffice: 507-786-3227 1510 St. Olaf Avenue Northfield, MN 55057stolaf.edu

RE: Third-party backup for Google Drive?

Posted By Tony Skalski 04-19-2024 12:16:00 PM
Found In Egroup: Google Workspace \ view thread
The Synology package name is Active Backup for Google Workspace. Cloud Sync has a lot of options, but it doesn't do Gmail (which we wanted).

RE: Third-party backup for Google Drive?

Posted By Tony Skalski 04-19-2024 09:40:00 AM
Found In Egroup: Google Workspace \ view thread
We are "only" doing ~150TB to one system (of spinners) with an SSD cache in front of it, so I probably couldn't say. The initial seed took a few weeks, and a full pass through our storage (we are using the continuous backup) now takes ~2 days. But with all SSDs and a cache sized per their cache advisor, ...

RE: Third-party backup for Google Drive?

Posted By Tony Skalski 04-19-2024 08:44:00 AM
Found In Egroup: Google Workspace \ view thread
We're with Frank. We're using a Synology for this and it is working well. ajs

Identify policies/settings applied to OUs and Groups

Posted By Tony Skalski 04-03-2024 10:06:00 AM
Found In Egroup: Google Workspace \ view thread
Hi all, We are planning on consolidating a number of OUs, collapsing about 12 OUs into 2 or 3. Before we do this, we would like to check for policies and settings applied to the (to be decommissioned) OUs. It appears that policies like 2-step and drive trust rules are not visible from the OU perspective, ...

RE: Google Voice for telephony?

Posted By Tony Skalski 12-19-2023 11:50:00 AM
Found In Egroup: Google Workspace \ view thread
We looked at a few voice-as-a-service offerings and most were too expensive (for us). We went with an on-prem installation of PBXact (Asterix with a GUI and support). A number of users stuck with a physical phone, but many opted to use the soft phone, and some (who me?) just let calls roll to voicemail ...

RE: MacBook WiFi authentication with JAMF Connect

Posted By Tony Skalski 09-18-2023 02:56:00 PM
Found In Egroup: Wireless Local Area Networking \ view thread
Hi Eric, In the past we used Login Window Mode in a WIFI profile to do this. It was pre-Jamf for us (Apple's profile manager) and it supported PEAP. I just checked our Jamf Pro and the "Use as a Login Window configuration" checkbox is still there. ajs -- Tony Skalski (he/him/his)System Administrator ...

RE: SSIDs and IoT support

Posted By Tony Skalski 08-03-2023 02:48:00 PM
Found In Egroup: Wireless Local Area Networking \ view thread
Like Dan, we have an open guest network and eduroam (PEAP-MSCHAPv2 ). We have also found other logs useful in tying usernames to IP addresses on the guest network. The guest network is used for anything that does not do 1x, including IoT devices. We have come across the odd device that does not connect ...

RE: Developing a vision of the future

Posted By Tony Skalski 07-20-2023 10:07:00 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Hi Adam, we take it quite far. Ethernet ports in offices are no longer activated by default. Some will request an ethernet connection and we oblige. Computing labs with desktops are still wired for the most part, but there are exceptions. We've removed our classroom podium computers and have issued most ...

RE: Developing a vision of the future

Posted By Tony Skalski 06-27-2023 11:43:00 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Hi Joe, I don't have any recommendations for learning opportunities, but I suspect you probably know most of what you need to know to (re)design your network. At the least, you and your team will know more about your environment than any class, consultant or YouTube channel. That said, we did some ...

Is the takeout.google.com/transfer process very slow for anyone else?

Posted By Tony Skalski 06-21-2023 09:58:00 AM
Found In Egroup: Google Workspace \ view thread
Hi Folks, We have an increasing number of users with issues transferring files from their college Google Workspace account into a personal Gmail account. In one case the transfer has been running for over 4 weeks. A number of other real and test transfers seem to be not working at all, even after ...

RE: Handling credentials for shared accounts with delegated inboxes

Posted By Tony Skalski 04-27-2023 02:54:00 PM
Found In Egroup: Google Workspace \ view thread
Hi William, At St. Olaf when a user requests a delegated account, our IdM: creates a Google account in an OU without 2SV required; the account is assigned a long, random and unrecorded password creates a Google group with the requestor as the owner grants the group delegate access to the accountThe ...

RE: Storage used by Shared Drives

Posted By Tony Skalski 12-16-2022 09:27:00 AM
Found In Egroup: Google Workspace \ view thread
We do this with advanced gam: $gam_cmd user $adminaccount add drivefileacl $id user $googleuser role organizer asadmin grab the $fileacl_id from the output of the above so we can remove the acl later$gam_cmd user $googleuser print filelist select teamdriveid $id fields id,name,modifiedtime,filesize ...

RE: Guest Wi-Fi captive portal removed

Posted By Tony Skalski 02-24-2022 09:42:00 AM
Found In Egroup: Wireless Local Area Networking \ view thread
>aside from that, I mean like faculty, staff, students. Does it matter if they go for the guest network versus whatever you'd rather they used? Guest is like being on the Internet, so no access to on-campus-only resources. This is some motivation, but on-campus-only resources are becoming more rare. ...

RE: Guest Wi-Fi captive portal removed

Posted By Tony Skalski 02-24-2022 09:17:00 AM
Found In Egroup: Wireless Local Area Networking \ view thread
>Any concerns on non-guests using it? Not really. Our local geography (campus is on a hill mostly surrounded by natural or ag land) minimizes that.

RE: Guest Wi-Fi captive portal removed

Posted By Tony Skalski 02-24-2022 08:47:00 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Yep - got rid of the captive portal 6-7 years ago.

RE: Google Drive for Desktop in Educational Labs?

Posted By Tony Skalski 02-15-2022 03:24:00 PM
Found In Egroup: Google Workspace \ view thread
IIRC, we briefly looked at doing this but found enough issues with applications not agreeing with the stub files that Google presents as a filesystem. That and nobody was thrilled with the additional login that was required. And concerns about caching eating up disk space.-- Tony Skalski (he/him/his)System ...

RE: Build your own windows PKI for EAP-TLS

Posted By Tony Skalski 02-10-2022 01:22:00 PM
Found In Egroup: Wireless Local Area Networking \ view thread
You didn't say book ;-) but Brian Komar's Book Windows Server® 2008 PKI and Certificate Security is excellent. I referred to it often when I set up our PKI, and still have it on my shelf. Don't be dissuaded by the "2008" in the title, most of the information still applies today, at least as far as on-prem ...