+ Post New Thread
Results 1 to 10 of 10
How do you do....it? Thread, Python on a domain computer in Technical; Hi Guys. Looking at using Python First Question, how do you guys have it set up, do you use it ...
  1. #1

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    315
    Thank Post
    12
    Thanked 26 Times in 25 Posts
    Rep Power
    15

    Python on a domain computer

    Hi Guys.

    Looking at using Python

    First Question, how do you guys have it set up, do you use it in sandbox, Virtuals or just installed on the machine?

    How can i get it to save to there H:\ drive automatically instead of where python is installed?

    Capture.PNG

    and can you guys let me know of any issues/problems you have had to over come?

    Many Thanks

  2. #2

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    315
    Thank Post
    12
    Thanked 26 Times in 25 Posts
    Rep Power
    15
    bump

  3. #3

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,843
    Thank Post
    570
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    Virtual machine with full admin rights, no network access, shared drive which links to their network home directory. Rather than using the python IDE on it's own, as we do a range of languages we use Netbeans with a python addon, so it covers (but not limited to) C, C++, C#, .NET, Python, Java, PHP etc.

  4. #4

    Join Date
    Sep 2008
    Location
    England
    Posts
    267
    Thank Post
    6
    Thanked 67 Times in 59 Posts
    Rep Power
    51
    We install locally. Setting up virtual machines seems like a lot of work as well as more to go wrong, and I can't see the benefit, but I guess in a higher risk environment there might be some.

  5. #5

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,843
    Thank Post
    570
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    If it's one thing then it's OK to go local - the very nature of programming is being able to test, tweak, execute - things the typical network is locked down to prevent. Giving them access therefore to a FULL machine with full rights, command prompts etc is heavily advantageous. Real world stuff rather than shoehorning them into a single product on a machine that isn't anything like what they'll otherwise use.

  6. #6


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,709
    Thank Post
    220
    Thanked 2,615 Times in 1,926 Posts
    Rep Power
    777
    Quote Originally Posted by Chris_Cook View Post
    I can't see the benefit
    A locally installed copy of Python (along with PowerShell v3) could enable students to escalate their privileges if they have write access to any of the folders within the PATH variable.

    The $env:PATH Less Traveled: Subverting Trust with 3rd-Party Applications Obscure Security

  7. #7

    Join Date
    Sep 2008
    Location
    England
    Posts
    267
    Thank Post
    6
    Thanked 67 Times in 59 Posts
    Rep Power
    51
    I stand corrected.

    It should be possible to still run python locally with the python folder set as read only. That should work round this particular issue. I will have to look into this. Just what I needed - another task to do...

    I'm still not sure that giving students full access to a system is necessary for what they need to learn. Admin access should only be given out when there is a specific documented need.

    How do you stop your users from reconnecting the virtual machine to the main school network?
    Last edited by Chris_Cook; 26th February 2014 at 11:25 PM.

  8. #8
    jbailey's Avatar
    Join Date
    Jan 2011
    Posts
    75
    Thank Post
    21
    Thanked 30 Times in 17 Posts
    Rep Power
    33
    Virtual box vm machine doesn't need a network card for access to folders/shares on the host, also you can lock down access to features of the vm like changing boot orders/ creating new machines etc and you can have a vm image set as "immutable", so on a reboot the machine reverts back the the image as it was - like rolling back a snapshot, so students cannot "break it". It works really well in my opinion and gives you zero security concerns to worry about.

  9. #9

    Join Date
    Sep 2008
    Location
    England
    Posts
    267
    Thank Post
    6
    Thanked 67 Times in 59 Posts
    Rep Power
    51
    Ok, thats usefull to know. My last experience of trying to deploy virtual box to client facing PCs didn't go well, but it looks like its moved on since then.

    No offence though, but I think assuming any solution has 'zero security concerns' is probably a mistake. It always pays to have an open mind.

    Also, things seem to have a way of breaking around here that defies all logic and effort to produce a reliable system. All things being equal I would prefer a system with fewer components to go wrong.

  10. #10

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,843
    Thank Post
    570
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    It is zero concern. As said there is no link between the VM and the host computer other than the shared folder. There is no networking capability. They can do what they like to the machine then when it's turned off, it's all gone and it's back to normal. I think there's a lot to be said for real world environments rather than something so very limited. They will have access and make good use of many windows system tools when programming, otherwise unavailable. The VM can be locked down so there's no menus, it can't be edited or anything, all the kids see is a borderless and barless window with another operating system in it.
    Still keep an open mind of course, anything is possible and if someone's going to find a vulnerability it will be the kids. But that's going to be the existing system, not the virtual one.
    Last edited by synaesthesia; 27th February 2014 at 07:33 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. Python on computers - Security
    By bwestlake in forum Educational Software
    Replies: 10
    Last Post: 22nd November 2013, 12:23 PM
  2. Windows update taking too long on non-domain computers
    By zish_uk in forum Windows Server 2000/2003
    Replies: 1
    Last Post: 3rd October 2011, 09:21 PM
  3. Rename a computer while on the domain
    By msnriggs in forum Scripts
    Replies: 0
    Last Post: 20th January 2010, 06:21 AM
  4. Synchronizing time on a domain
    By woody in forum Windows
    Replies: 8
    Last Post: 13th September 2005, 01:36 AM
  5. Local HOSTS file ignored on a domain
    By eejit in forum Windows
    Replies: 19
    Last Post: 24th June 2005, 02:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •