Just an update - still working on a solution on my end.
I believe we figured out a good chunk of the problem being with permissions related to Google EDU accounts. Essentially with google school accounts we login with our google account but don’t have local admin privilege.
Google creates a local admin account (in this case “jheinekamp”) that acts as the admin - and a user account (jheinekamp_sandwich4) that has a different set of admin access. Makes sense to protect the pc from having every possible user adjust the settings but not in this specific circumstance.
I’ll report back once I’m able to adjust it with my tech as I believe the problem is on our end now.