Controlled Assessment : How we did it
Hope this helps if you're struggling to work out how to do this.:confused:
Different exam boards have different requirements for each subject but in general students need the following:
1. Secure area to store coursework which is only accessible during the supervised session.
2. No access to shared areas or their existing network folder.
Depending on the subject they may also need the following locked down or accessible:
1. Internet access
2. Ability to use a USB pen drive
3. Spell check
How I did this
In active directory I created:
1. A security group called Controlled Assessment and any student taking any controlled assessment was added to this group.
2. A security group called Controlled Assessment subject 200* (we added the year group as we have more than one year group taking part in controlled assessments)
3. An OU called Controlled Assessment
4. Within the Controlled assessment OU create OUs for each subject called Controlled Subject 200*
I created the following GPOs.
1. A GPO for OU Controlled Assessment which applied to every student locking down the usual things like run command etc (you probably already have a GPO which does this)
2. A GPO to lock down internet access
3. A GPO to allow internet access and set browser settings
4. A GPO to lock down access to shared areas
You can create as many GPOs as you need. I found it easier to create separate GPOs which I can reuse every year.
Link the appropriate policy to the OU Controlled subject 200*
e.g. Geography needs internet access but English doesn’t.
I then created a course work shared area on X drive which was subdivided into year groups and controlled assessment subject groups.
You’ll need to create a log on script so that students in the security groups you created and teachers can see X drive when they log on.
I created student user accounts, one per student per subject e.g. 06SmithAEnglish, and 06SmithAHistory etc
Ensure they are members of OU Controlled Assessment and OU Controlled subject 200*. Add them to any other OUs which you may have set up on your network e.g. “All students” or “domain users” etc
I gave them roaming profiles.
I created a home folder for each student on X drive and used folder redirection to ensure their “My Documents” folder was set up in the right place.
e.g. \\servername\course work$\2006\English Controlled Assessment
I wanted teaching staff to have access to these folders so I un-ticked “grant the user exclusive rights to My Documents”
Set the folder permissions so that only those students (and teachers) taking English in Year group 2006 have access to the 2006\English Controlled Assessment folder on X drive
Set permissions on individual student folders so that only the student and teacher have access to the folder.
I then had to log on as each student save a test document and then log off. This created their “My Documents” folder. Set the permissions on this folder so that students and teachers have access. Then log back in and you should now be able to see the test document you created. The teacher should also be able to see the document created in the student’s folder on X drive.
Getting the permissions right is critical so test them to make sure they are secure.
Controlling access to the folders
The easiest way of doing this is to enable all the accounts in AD at the start of the supervised session and disable them again at the end.
You can also use the log on hours feature in AD but it only controls logging on it doesn’t force users to log off.
Don’t waste time trying to block spell check; we couldn’t make it work properly. Every time a user pressed F7 spell check worked! Students who are not permitted to use spell check should use WordPad to complete the assessment.
Blocking Apps and pen drives
I use Net Support software to allow or block individual apps like WordPad and to block USB pen drives.
The software can also be used to block access to the internet.