+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Network and Classroom Management Thread, Grrrr these kids need locking..... in Technical; Hello All So I have started my new job as a network manager at a primary school this week and ...
  1. #1

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,761
    Thank Post
    316
    Thanked 345 Times in 255 Posts
    Rep Power
    212

    Grrrr these kids need locking.....

    Hello All
    So I have started my new job as a network manager at a primary school this week and the network is awful! One main thing that needs sorting is that all the students and teaching staff are free to do what they want they can even create a local user and login as administrator on there computer theres no lockdowns. The place I used to work out used to buy into Novus support and I would reccomend these guys they were great we told them how we wanted the network and they wrote group policy. I kind of know a little group policy I know what it all means but I can't write it and since my new school hasn't got the budget to buy into these services and support I need to find a solution to lockdown the children that is also cheap. Please help im sick of being called out 10 times a day because little timmy has decided to move the task bar and hide it and ...... :'(

    HELP!

  2. #2

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,698
    Thank Post
    335
    Thanked 516 Times in 484 Posts
    Rep Power
    180
    Best thing to do would just be create a test user, and see what you can break. Most of the group policies you're referring to are simple yes/no options. e.g. Enable/Disable move taskbar etc.

    Apply a policy and see if it does what you want etc

    Steve

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,249
    Thank Post
    671
    Thanked 1,643 Times in 1,466 Posts
    Rep Power
    424
    For most admin there is no need to write anything in group policy just find the relevant setting make the changes required and have it apply somewhere.

    It is possible to create custom group policy objects.

    Ben

  4. #4

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    797
    Thank Post
    180
    Thanked 61 Times in 58 Posts
    Rep Power
    35
    Quote Originally Posted by alexbillbridgnorth View Post
    I kind of know a little group policy I know what it all means but I can't write it and since my new school hasn't got the budget to buy into these services and support I need to find a solution to lockdown the children that is also cheap. Please help im sick of being called out 10 times a day because little timmy has decided to move the task bar and hide it and ...... :'(

    HELP!
    Create a new OU and start building a policy from scratch and apply it to the New OU with a new test user and see what the experience is. Before you start moving the old users into the new OU create a test user in the old OU and login and out and then move the user to the new OU and see if can still login and out without any issues.

    The best way to learn with policies is test, test, test and deploy. Id create the new OU in the root or at least in a place where you only get the default domain policy inherited.
    Last edited by Davit2005; 21st June 2013 at 10:33 AM.

  5. #5

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,117
    Thank Post
    389
    Thanked 439 Times in 327 Posts
    Rep Power
    385
    When I set our group policy I had two computers side by side one logged into the server the other one I would use to test the changes I had just made.

    Put the testing computer into its own OU and apply the policy to that OU only.

    Dont forget the gpupdate /force when you want to push out the changes.

    Small moves dont make too many changes without testing.

  6. #6

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,187
    Thank Post
    285
    Thanked 775 Times in 585 Posts
    Rep Power
    336
    Have a look here Group Policy

    It really is something you need to sit down and learn as it is one of your main tools for managing a network and you'll be struggling to tame your network without it.

  7. #7

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,761
    Thank Post
    316
    Thanked 345 Times in 255 Posts
    Rep Power
    212
    Ok so I have sorted AD with a Test OU, User and Test Computer. I have clicked Group Policy Management but do I need to create another domain or something because it seems the only think I can do is edit it in group policy editor! If anyones got instructions just to start me off so I can see how it all works and have a play that'd be ace.

    Thanks for all your help guys!!

  8. #8

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,698
    Thank Post
    335
    Thanked 516 Times in 484 Posts
    Rep Power
    180
    If I'm understanding you correctly you're trying to edit the default domain policy, which will apply to "everything" e.g. Servers.

    You want to create a new group policy, and link this to your test OU and use that as your play bit

    Thanks,
    Steve

  9. #9

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,117
    Thank Post
    389
    Thanked 439 Times in 327 Posts
    Rep Power
    385
    @Steve21 is right you dont want to edit the default domain policy.

    I will just add when I set mine up it was half term, much easier to do without being pestered by other members of staff and students.

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,943
    Thank Post
    1,404
    Thanked 2,422 Times in 1,699 Posts
    Rep Power
    710

  11. Thanks to witch from:

    speckytecky (21st June 2013)

  12. #11
    Galway's Avatar
    Join Date
    Jun 2007
    Location
    West Yorkshire
    Posts
    1,367
    Thank Post
    9
    Thanked 311 Times in 219 Posts
    Rep Power
    101
    Are you a school managed under the local authority?

    Its sounds to me like you could use some help and would request some short,maybe a couple of days, from the LEA to assist in your setup.
    I would let them know how grave the situation is and the implications of not fulfilling your request and send it as a matter of urgency.
    Last edited by Galway; 21st June 2013 at 11:41 AM.

  13. #12

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,761
    Thank Post
    316
    Thanked 345 Times in 255 Posts
    Rep Power
    212
    Well good news and bad news have finally had a few minutes this morning to write my own bit of group policy I made a new Policy under "Group Policy Objects" called "Test" all I did was edit it so Internet Explorer would use bing.co.uk as a home page I then added the "Group Policy Test group" in AD to the Delegation tab and security filtering and made my Test PC and my Test User account to be a member of the Group Policy Test group in AD but Internet Explorer isn't changing the home page! OMG what am I doing wrong!!!
    Sorry Guys

  14. #13

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,177
    Thank Post
    601
    Thanked 1,993 Times in 1,372 Posts
    Blog Entries
    19
    Rep Power
    837
    Quote Originally Posted by alexbillbridgnorth View Post
    OMG what am I doing wrong!!!
    gpupdate /force [On the test machine?]

  15. #14

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,761
    Thank Post
    316
    Thanked 345 Times in 255 Posts
    Rep Power
    212
    Quote Originally Posted by X-13 View Post
    gpupdate /force [On the test machine?]
    Sorry mate what is that and how you're talking to a newbie with group policy? Thankyou though!!!

  16. #15

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,698
    Thank Post
    335
    Thanked 516 Times in 484 Posts
    Rep Power
    180
    Quote Originally Posted by alexbillbridgnorth View Post
    Sorry mate what is that and how you're talking to a newbie with group policy? Thankyou though!!!
    Basically the policies only filter to machines every hour or so by default.

    if you run a command prompt and type gpupdate /force on the client it'll force it to update it's policies now.

    Steve

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. How do you like to keep cool during these hot spells?
    By ninjabeaver in forum General Chat
    Replies: 19
    Last Post: 28th July 2013, 10:03 PM
  2. kids needing full access for IT lessons
    By e_g_r in forum General Chat
    Replies: 34
    Last Post: 8th December 2008, 01:53 PM
  3. Do I need any of these protocols enabled on my printers?
    By sidewinder in forum Wireless Networks
    Replies: 4
    Last Post: 17th October 2007, 11:05 AM
  4. Stop kids locking each others accounts
    By ken_kaniff in forum How do you do....it?
    Replies: 24
    Last Post: 18th May 2006, 02:21 PM
  5. Replies: 61
    Last Post: 14th November 2005, 08:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •