SIMS security - sims installation policy

[tech-man]

Hello

Can anyone offer advice on which computers SIMS should be installed on? Until now we have only installed it on staff facing machines but questions are now being asked about installing it on other machines which are not always only staff facing.... e.g. whiteboard pc, general classroom PCs.

Thanks

[the_dark_knight]

It depends whether you intend to use those machine for SIMS at all like registers or something like this.

I'd have them on just in case there was a time that teachers needed access to them. No harm can be done with it I guess.

[maark]

one option is to publish it as a terminal services application if you have server 2008 and then let only staff access it via a web link.

[BatchFile]

Within reason, and if, a big if, your staff can be trusted to keep their passwords secure, I don't see a problem with having it on most PCs.

If you set the NTFS permissions on s:\sims\connect.ini so that pupil accounts can't access it then the kids would actually have to be logged in as a teacher to open it, and then have a sims username and password, too.

[rh91uk]

We have it on all PCs here as our standard image - but it is not visable in the Students start menu and if they, for osme reason, try and navigate to SIMS or the SIMS directory they get blocked out of it (Software Restriction Policies)

[glennda]

We have it installed on all the machines in the school, as the ICT suites are used for staff sims training during insets etc, aslong as you deny students access to C:\program files\sims and the start menu shortcuts they cannot access the program, and even if they do, they still have to login

Toby

[Mcshammer_dj]

I have setup our schools to use Terminal services and then control the screen saver to lock the screen.

The whole question of secure access in the classroom requires serious consideration in my opinion. There is a real need for teachers to really understand what is on screen and who can see that data. I have often gone into schools and found a machine logged on at the front of a class with outlook open!!