+ Post New Thread
Results 1 to 10 of 10
How do you do....it? Thread, Python on a domain computer in Technical; Hi Guys. Looking at using Python First Question, how do you guys have it set up, do you use it ...
  1. #1

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    331
    Thank Post
    13
    Thanked 27 Times in 26 Posts
    Rep Power
    15

    Python on a domain computer

    Hi Guys.

    Looking at using Python

    First Question, how do you guys have it set up, do you use it in sandbox, Virtuals or just installed on the machine?

    How can i get it to save to there H:\ drive automatically instead of where python is installed?

    Capture.PNG

    and can you guys let me know of any issues/problems you have had to over come?

    Many Thanks

  2. #2

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    331
    Thank Post
    13
    Thanked 27 Times in 26 Posts
    Rep Power
    15
    bump

  3. #3

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,060
    Thank Post
    592
    Thanked 1,036 Times in 794 Posts
    Blog Entries
    15
    Rep Power
    468
    Virtual machine with full admin rights, no network access, shared drive which links to their network home directory. Rather than using the python IDE on it's own, as we do a range of languages we use Netbeans with a python addon, so it covers (but not limited to) C, C++, C#, .NET, Python, Java, PHP etc.

  4. #4

    Join Date
    Sep 2008
    Location
    England
    Posts
    272
    Thank Post
    6
    Thanked 70 Times in 62 Posts
    Rep Power
    53
    We install locally. Setting up virtual machines seems like a lot of work as well as more to go wrong, and I can't see the benefit, but I guess in a higher risk environment there might be some.

  5. #5

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,060
    Thank Post
    592
    Thanked 1,036 Times in 794 Posts
    Blog Entries
    15
    Rep Power
    468
    If it's one thing then it's OK to go local - the very nature of programming is being able to test, tweak, execute - things the typical network is locked down to prevent. Giving them access therefore to a FULL machine with full rights, command prompts etc is heavily advantageous. Real world stuff rather than shoehorning them into a single product on a machine that isn't anything like what they'll otherwise use.

  6. #6


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,058
    Thank Post
    231
    Thanked 2,716 Times in 2,004 Posts
    Rep Power
    794
    Quote Originally Posted by Chris_Cook View Post
    I can't see the benefit
    A locally installed copy of Python (along with PowerShell v3) could enable students to escalate their privileges if they have write access to any of the folders within the PATH variable.

    The $env:PATH Less Traveled: Subverting Trust with 3rd-Party Applications « Obscure Security

  7. #7

    Join Date
    Sep 2008
    Location
    England
    Posts
    272
    Thank Post
    6
    Thanked 70 Times in 62 Posts
    Rep Power
    53
    I stand corrected.

    It should be possible to still run python locally with the python folder set as read only. That should work round this particular issue. I will have to look into this. Just what I needed - another task to do...

    I'm still not sure that giving students full access to a system is necessary for what they need to learn. Admin access should only be given out when there is a specific documented need.

    How do you stop your users from reconnecting the virtual machine to the main school network?
    Last edited by Chris_Cook; 26th February 2014 at 11:25 PM.

  8. #8
    jbailey's Avatar
    Join Date
    Jan 2011
    Posts
    77
    Thank Post
    21
    Thanked 31 Times in 17 Posts
    Rep Power
    34
    Virtual box vm machine doesn't need a network card for access to folders/shares on the host, also you can lock down access to features of the vm like changing boot orders/ creating new machines etc and you can have a vm image set as "immutable", so on a reboot the machine reverts back the the image as it was - like rolling back a snapshot, so students cannot "break it". It works really well in my opinion and gives you zero security concerns to worry about.

  9. #9

    Join Date
    Sep 2008
    Location
    England
    Posts
    272
    Thank Post
    6
    Thanked 70 Times in 62 Posts
    Rep Power
    53
    Ok, thats usefull to know. My last experience of trying to deploy virtual box to client facing PCs didn't go well, but it looks like its moved on since then.

    No offence though, but I think assuming any solution has 'zero security concerns' is probably a mistake. It always pays to have an open mind.

    Also, things seem to have a way of breaking around here that defies all logic and effort to produce a reliable system. All things being equal I would prefer a system with fewer components to go wrong.

  10. #10

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,060
    Thank Post
    592
    Thanked 1,036 Times in 794 Posts
    Blog Entries
    15
    Rep Power
    468
    It is zero concern. As said there is no link between the VM and the host computer other than the shared folder. There is no networking capability. They can do what they like to the machine then when it's turned off, it's all gone and it's back to normal. I think there's a lot to be said for real world environments rather than something so very limited. They will have access and make good use of many windows system tools when programming, otherwise unavailable. The VM can be locked down so there's no menus, it can't be edited or anything, all the kids see is a borderless and barless window with another operating system in it.
    Still keep an open mind of course, anything is possible and if someone's going to find a vulnerability it will be the kids. But that's going to be the existing system, not the virtual one.
    Last edited by synaesthesia; 27th February 2014 at 07:33 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. Python on computers - Security
    By bwestlake in forum Educational Software
    Replies: 10
    Last Post: 22nd November 2013, 12:23 PM
  2. Windows update taking too long on non-domain computers
    By zish_uk in forum Windows Server 2000/2003
    Replies: 1
    Last Post: 3rd October 2011, 09:21 PM
  3. Rename a computer while on the domain
    By msnriggs in forum Scripts
    Replies: 0
    Last Post: 20th January 2010, 06:21 AM
  4. Synchronizing time on a domain
    By woody in forum Windows
    Replies: 8
    Last Post: 13th September 2005, 01:36 AM
  5. Local HOSTS file ignored on a domain
    By eejit in forum Windows
    Replies: 19
    Last Post: 24th June 2005, 02:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •