Guides
K-12 security hardening playbooks
Three plain-language checklists written for school IT teams on school budgets. Every item says what to set, why it matters, where the setting lives, and what it costs or which scanner catches it. Presented at MAEDS 2026; free to use, share and print.
Active Directory Security
A plain-language Active Directory hardening checklist for K-12 districts: privileged account tiering, Protected Users, NTLM and LDAP hardening, Group Policy and SYSVOL, Tier 0 backups, LAPS, detection, and which free scanner catches each item.
Read the guideGoogle Workspace Security
A Google Workspace for Education hardening checklist for school districts: 2-Step Verification, Context-Aware Access, device approvals, DLP, domain-wide delegation audits, student misuse controls, turning off AI for student OUs, and what each setting costs.
Read the guideYou Shall Not Pass
How to keep proxy sites, filter evasion, cheating surfaces and AI off managed school Chromebooks: Jim's 10 quick hits, Chrome and Admin console settings with license and effort, a hostname blocklist, and the free You Shall Not Pass extension.
Read the guide