+ Post New Thread
Page 2 of 5 FirstFirst 12345 LastLast
Results 16 to 30 of 67
How do you do....it? Thread, Controlled Assessment : How we did it in Technical; we have AB tutor but can you set specific times to which the AD accounts unlock?...
  1. #16

    Join Date
    Mar 2010
    Location
    Leeds
    Posts
    438
    Thank Post
    90
    Thanked 48 Times in 43 Posts
    Rep Power
    18
    we have AB tutor but can you set specific times to which the AD accounts unlock?

  2. #17

    Join Date
    Nov 2008
    Posts
    7
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Controlled assessment - Mac

    In our case – as all classrooms computers are Macs – we:
    1. Exported each subject – pupil group to “csv” file (including information about division – set)
    2. Imported file to application called “Passenger” – which allows to convert csv file (and add additional information) to format you can import to WGM on OSX server
    3. Earlier we prepared groups for each subject as quite subject teachers requested access to specific applications
    4. For each group we prepared different default settings (ex. Disabling spell checker, changing look of dock etc.)
    5. Every teacher reports at the beginning and the end of session to allow us unlock/lock group account.

  3. #18
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    40
    Great, first assessment last Monday, had it all set up, eaxm OU setup ready to move the pupils in to lock them down and redirect mydocs to another location. Forgot to move them in for the controlled session a bit of a blunder on my part, but I suppose thats the weakness of this type of setup.

  4. #19
    Oxcidius's Avatar
    Join Date
    Sep 2010
    Location
    Worcester
    Posts
    13
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    We use something very similar to Alan-d. All of our students have their own laptops with their own screen readers etc. so we must let them use their own laptops.
    We have a mandatory profile called exam which every student uses and logs in with.
    Everything is locked down on it including internet, applications except Notepad, Wordpad and Word (we kill spelling & Grammar on this app) and the screen readers and access to any drives except the use of pen drives.
    The pen drives themsleves are heavily guarded by our exam officers and wiped every time they are used.
    We change the desktop wallpaper so they know they are in exams.
    We use a .vbs script to add the app links to the desktop so that we can lock down as much as possible in the start menu etc.
    So far, this has worked exceedingly well as the exam officers have their own laptop hooked up to a printer in the exam room and when the student is finished they hand over the pen drive, exam officer prints it out and after confirming all is there, lets the student go.
    This way from our point of view we only have to worry about one AD account and we are not tied to any scheduling. in fact I think for the last set of exams I didn't have to lift a finger....cool!!

  5. #20

    Join Date
    Mar 2010
    Location
    Leeds
    Posts
    438
    Thank Post
    90
    Thanked 48 Times in 43 Posts
    Rep Power
    18
    good idea, but we have recently banned memory sticks :'(

  6. #21
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,540
    Thank Post
    112
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    this has just turned up at our place. afaik atm it's looking like 150 students across geography, ICT and business studies.
    We've done this before for engineering and photography but it wasn't remotely that many students. 20 temp accounts as a one off is no prob. 150 across different subjects, different classes is a nightmare....

    My thinking atm is to create a single account for each class with normal locked down security but doesn't attach any of the usual drives and blocks internet access, when a student logs in it creates a folder with a random 10 or longer character/number string and asks for a password. on subsequent logins it'll ask for the folder name and a password and map a drive to that folder. I theorise this can be handled with vbscript.
    we can enable and disable the accounts as required. probably have to ask for their username too as if a kid looses his folder details we wouldn't know which was which lol.

    this might seem a bit crazy complicated but we need a relatively foolproof method that has minimal management time and can easily be utilised in the future, if this controlled assessment thing becomes the norm it could end 00s of potential accounts given we have 200-300 kids per year.

  7. #22
    Steven_Cleaver's Avatar
    Join Date
    Jul 2008
    Location
    Birmingham
    Posts
    478
    Thank Post
    183
    Thanked 86 Times in 70 Posts
    Rep Power
    52
    Logon on hours on user accounts got the staff to send me times the students would be sitting the controlled Assessment so that I could preset the hours for the accounts.

  8. #23

    Join Date
    May 2008
    Location
    York
    Posts
    515
    Thank Post
    22
    Thanked 49 Times in 46 Posts
    Rep Power
    25
    log on hours is proving a big problem here
    as they want 1.45 till 3 for one lot and AD cant do the time limit as it works in whole hours so have to be there to unlock and lock accounts again.
    On the plus side we have written a small program to export existing users OU append with given subjects and import into a new OU . so 01black get 01black-geog , 01black-engl ......... .Its saving us some time and still developing it to do more. but we have 2 subjects using controlled assesmets with no problems. so hopefully we are now on top of this and ready for more subjects to do it.

  9. #24

    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,195
    Thank Post
    321
    Thanked 314 Times in 219 Posts
    Rep Power
    125
    Sounds like some of you have it easy at the mo.. We now have 4 subjects doing control tests... Geog, business, history and english. English have 120 students to enable and disable, shortly followed by geog, history and business. I dunno if i mentioned it before, but we have set up a temp machine in the office with lots of AD MMC snap-ins with the users highlighted from each group (as we have OUs with the year the students started) and labelled them up on the bottom of the monitor. This machine doesnt get turned off and remains locked if not inuse.

  10. #25

    Join Date
    Jun 2010
    Posts
    198
    Thank Post
    9
    Thanked 25 Times in 24 Posts
    Rep Power
    22
    Hi guys I try to keep it simple. The following may not look simple to set-up but once done its schedule task and forget until the next year group need setting up the following year.

    Here’s what I do step by step.

    1. Create and run a batch file using the mkdir or md commands to make a controlled conditions folder in the home folder of all the users who need exam conditions e.g. “controlled exams”
    This batch file will be used only once so if you don’t want to bother with the batch file just copy and paste from your excel sheet straight to the command prompt on your server ( Make sure your in the correct ou/folder)

    2. Create two batch files one to DENY access to “controlled exams” and one to GRANT access using the cacls command e.g

    Teachers_initals_deny.bat
    Deny access should contain cacls commands to set the users permissions on his/her home folder and all sub folders and files to read and list only so that on login they can access their home folder but cant create folders or save files, then set the “controlled exams” folder only to modify, read, write or full control ( if you trust them not to delete the folder)

    The reason for this set-up is to stop them copying the work created in “controlled exams” to any other folder in their home folder so they can edit the work later at their leisure.

    Teachers_initals_grant.bat
    The batch file will obviously reset full control over the users home folder, sub folders and files back to the user with the exception of “controlled exams” which will have the deny permission set at the end of the lesson

    Schedule these batch files to run on your server 5 minutes before the start of a lesson and 5 minutes after the lesson.

    3. We have an AD group called “Deny internet Access” any account placed in this group is as the name suggests denied Internet access .for you to achieve the same will depend on what Internet filtering system you are using – we use Lightspeed which integrates with AD.
    As long as you have a deny internet ou integrated with AD with your given Internet filtering software your good to go. Again the need is to deny students access in this case to the Internet under exam conditions to do this we use two commands run from batch files scheduled to run right after the batch files above.

    e.g addgrp.bat
    dsmod group with the –addmbr switch
    This command is used to add the students to the “Deny Internet Access” ou

    e.g remgrp.bat
    dsmod group with the -rmmbr switch
    This command is used to remove the students from the “Deny Internet Access” ou

    To summarise :

    • logged on under exam conditions all access to users folders and files in the students home folder except the “controlled exam” folder is blocked.

    •When not logged on under exam conditions users files and folders except “controlled exam” are accessible

    • When logged on under exam conditions denies access to the internet

    • When not logged on under exam conditions grants access to the internet

    • No need to create separate AD login accounts or additional folders

    The only pitfalls as far as I can is if the teacher changes the lesson time without informing us. And students are allowed to plug in USB sticks during lessons to copy the exam work

    Hopefully this will help someone – works for us if you want batch file examples post here and I'll post the code

    Kili
    Last edited by kili; 11th October 2010 at 09:18 PM.

  11. #26
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,283
    Thank Post
    218
    Thanked 237 Times in 205 Posts
    Rep Power
    76
    Here's an idea for the enabling and disabling of accounts to get around the Microsoft restriction of logon hours being only based on nearest hour.

    If you have accounts specifically set up such as exam01, exam02 etc then you can do the following:

    Create 2 batch files called 'enable exams.bat' and 'disable exams.bat'. Use the following commands

    net user exam01 /active:yes /domain
    net user exam02 /active:yes /domain
    etc...

    AND

    net user exam01 /active:no /domain
    net user exam02 /active:no /domain
    etc....

    Copy these files to a domain controller and then use the Windows Task Scheduler to run the enable/disable script at the exact times and dates you want

  12. 2 Thanks to themightymrp:

    jonnykewell1 (12th October 2010), timbo343 (13th October 2010)

  13. #27

    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,195
    Thank Post
    321
    Thanked 314 Times in 219 Posts
    Rep Power
    125
    Quote Originally Posted by themightymrp View Post
    Here's an idea for the enabling and disabling of accounts to get around the Microsoft restriction of logon hours being only based on nearest hour.

    If you have accounts specifically set up such as exam01, exam02 etc then you can do the following:

    Create 2 batch files called 'enable exams.bat' and 'disable exams.bat'. Use the following commands

    net user exam01 /active:yes /domain
    net user exam02 /active:yes /domain
    etc...

    AND

    net user exam01 /active:no /domain
    net user exam02 /active:no /domain
    etc....

    Copy these files to a domain controller and then use the Windows Task Scheduler to run the enable/disable script at the exact times and dates you want
    Ahhh not bad... but what about for all the kids that we have to disable too when the exam accounts are enabled.

    Would we have to add all the students in or would it be possible to do the following:

    Enable Exam accounts/Disable Main Account:
    net user exam01 /active:yes /domain
    net user useraccount /active:no /domain

    net user exam 02 /active:yes /domain
    net user useraccount /active:no /domain

    etc....

    Disable Exam Accounts/Enable Main Account:
    net user exam01 /active:no /domain
    net user useraccount /active:yes /domain

    net user exam 02 /active:no /domain
    net user useraccount /active:yes /domain

    etc....

  14. #28

    Join Date
    Jul 2005
    Location
    Lancashire
    Posts
    41
    Thank Post
    8
    Thanked 7 Times in 7 Posts
    Rep Power
    21
    As an improvement on the above I have a vb script that reads a list of users from a text file and moves them from their normal OU to a controlled assessment OU, and adds them to the controlled assessment security group.

    This is run as a sheduled task on a domain controller.

    At the end of the controlled assessment another scheduled script reverses the process.

    Works a treat.

    Jez

  15. #29

    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,195
    Thank Post
    321
    Thanked 314 Times in 219 Posts
    Rep Power
    125
    Quote Originally Posted by themightymrp View Post
    Here's an idea for the enabling and disabling of accounts to get around the Microsoft restriction of logon hours being only based on nearest hour.

    If you have accounts specifically set up such as exam01, exam02 etc then you can do the following:

    Create 2 batch files called 'enable exams.bat' and 'disable exams.bat'. Use the following commands

    net user exam01 /active:yes /domain
    net user exam02 /active:yes /domain
    etc...

    AND

    net user exam01 /active:no /domain
    net user exam02 /active:no /domain
    etc....

    Copy these files to a domain controller and then use the Windows Task Scheduler to run the enable/disable script at the exact times and dates you want
    Works an absolute treat! Thank You very much. Set up was a bit of a nightmare for existing control accounts but from now on, this creation will be part of the setup of control tests.

  16. #30

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    6,053
    Thank Post
    896
    Thanked 1,008 Times in 821 Posts
    Blog Entries
    9
    Rep Power
    349
    We're going through Controlled Assessments at the moment. I've decided to run it like this -

    Teacher requests controlled assessment accounts, provides day's/time's accounts need to be active.

    We create enough user accounts for that request based on the teachers initials - eg. SCO1...SCO30. We use WiseSofts Bulk User Account spreadsheet to create these account in the right OU in seconds - job done.

    Teacher assigns an account to each student.

    Shift click on the the accounts in OU to highlight, right click and enable at the start of the lessons. Shift-A and disable at the end of the lessons.

    We've set up a 'Block Internet' policy in AbTutor that turns off internet in that ICT suite only and is set to 1 hour or when the student logs off so that the next class have their internet access back.

    Couldn't be quicker, easier or any less hassle.



SHARE:
+ Post New Thread
Page 2 of 5 FirstFirst 12345 LastLast

Similar Threads

  1. Controlled Assesment.
    By Finch7 in forum How do you do....it?
    Replies: 16
    Last Post: 24th February 2010, 11:06 PM
  2. Controlled coursework?
    By joshcoombs in forum How do you do....it?
    Replies: 5
    Last Post: 4th December 2009, 01:56 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •