+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Network and Classroom Management Thread, Grrrr these kids need locking..... in Technical; Hello All So I have started my new job as a network manager at a primary school this week and ...
  1. #1

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    1,276
    Thank Post
    106
    Thanked 162 Times in 111 Posts
    Rep Power
    107

    Grrrr these kids need locking.....

    Hello All
    So I have started my new job as a network manager at a primary school this week and the network is awful! One main thing that needs sorting is that all the students and teaching staff are free to do what they want they can even create a local user and login as administrator on there computer theres no lockdowns. The place I used to work out used to buy into Novus support and I would reccomend these guys they were great we told them how we wanted the network and they wrote group policy. I kind of know a little group policy I know what it all means but I can't write it and since my new school hasn't got the budget to buy into these services and support I need to find a solution to lockdown the children that is also cheap. Please help im sick of being called out 10 times a day because little timmy has decided to move the task bar and hide it and ...... :'(

    HELP!

  2. #2

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    Best thing to do would just be create a test user, and see what you can break. Most of the group policies you're referring to are simple yes/no options. e.g. Enable/Disable move taskbar etc.

    Apply a policy and see if it does what you want etc

    Steve

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,965
    Thank Post
    587
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397
    For most admin there is no need to write anything in group policy just find the relevant setting make the changes required and have it apply somewhere.

    It is possible to create custom group policy objects.

    Ben

  4. #4

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    671
    Thank Post
    155
    Thanked 51 Times in 49 Posts
    Rep Power
    33
    Quote Originally Posted by alexbillbridgnorth View Post
    I kind of know a little group policy I know what it all means but I can't write it and since my new school hasn't got the budget to buy into these services and support I need to find a solution to lockdown the children that is also cheap. Please help im sick of being called out 10 times a day because little timmy has decided to move the task bar and hide it and ...... :'(

    HELP!
    Create a new OU and start building a policy from scratch and apply it to the New OU with a new test user and see what the experience is. Before you start moving the old users into the new OU create a test user in the old OU and login and out and then move the user to the new OU and see if can still login and out without any issues.

    The best way to learn with policies is test, test, test and deploy. Id create the new OU in the root or at least in a place where you only get the default domain policy inherited.
    Last edited by Davit2005; 21st June 2013 at 10:33 AM.

  5. #5

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    2,996
    Thank Post
    360
    Thanked 410 Times in 304 Posts
    Rep Power
    344
    When I set our group policy I had two computers side by side one logged into the server the other one I would use to test the changes I had just made.

    Put the testing computer into its own OU and apply the policy to that OU only.

    Dont forget the gpupdate /force when you want to push out the changes.

    Small moves dont make too many changes without testing.

  6. #6

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,051
    Thank Post
    275
    Thanked 722 Times in 550 Posts
    Rep Power
    326
    Have a look here Group Policy

    It really is something you need to sit down and learn as it is one of your main tools for managing a network and you'll be struggling to tame your network without it.

  7. #7

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    1,276
    Thank Post
    106
    Thanked 162 Times in 111 Posts
    Rep Power
    107
    Ok so I have sorted AD with a Test OU, User and Test Computer. I have clicked Group Policy Management but do I need to create another domain or something because it seems the only think I can do is edit it in group policy editor! If anyones got instructions just to start me off so I can see how it all works and have a play that'd be ace.

    Thanks for all your help guys!!

  8. #8

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    If I'm understanding you correctly you're trying to edit the default domain policy, which will apply to "everything" e.g. Servers.

    You want to create a new group policy, and link this to your test OU and use that as your play bit

    Thanks,
    Steve

  9. #9

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    2,996
    Thank Post
    360
    Thanked 410 Times in 304 Posts
    Rep Power
    344
    @Steve21 is right you dont want to edit the default domain policy.

    I will just add when I set mine up it was half term, much easier to do without being pestered by other members of staff and students.

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,401
    Thank Post
    1,106
    Thanked 2,092 Times in 1,472 Posts
    Rep Power
    651

  11. Thanks to witch from:

    speckytecky (21st June 2013)

  12. #11
    Galway's Avatar
    Join Date
    Jun 2007
    Location
    West Yorkshire
    Posts
    1,015
    Thank Post
    6
    Thanked 215 Times in 153 Posts
    Rep Power
    61
    Are you a school managed under the local authority?

    Its sounds to me like you could use some help and would request some short,maybe a couple of days, from the LEA to assist in your setup.
    I would let them know how grave the situation is and the implications of not fulfilling your request and send it as a matter of urgency.
    Last edited by Galway; 21st June 2013 at 11:41 AM.

  13. #12

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    1,276
    Thank Post
    106
    Thanked 162 Times in 111 Posts
    Rep Power
    107
    Well good news and bad news have finally had a few minutes this morning to write my own bit of group policy I made a new Policy under "Group Policy Objects" called "Test" all I did was edit it so Internet Explorer would use bing.co.uk as a home page I then added the "Group Policy Test group" in AD to the Delegation tab and security filtering and made my Test PC and my Test User account to be a member of the Group Policy Test group in AD but Internet Explorer isn't changing the home page! OMG what am I doing wrong!!!
    Sorry Guys

  14. #13

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,004
    Thank Post
    508
    Thanked 1,591 Times in 1,122 Posts
    Blog Entries
    19
    Rep Power
    700
    Quote Originally Posted by alexbillbridgnorth View Post
    OMG what am I doing wrong!!!
    gpupdate /force [On the test machine?]

  15. #14

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    1,276
    Thank Post
    106
    Thanked 162 Times in 111 Posts
    Rep Power
    107
    Quote Originally Posted by X-13 View Post
    gpupdate /force [On the test machine?]
    Sorry mate what is that and how you're talking to a newbie with group policy? Thankyou though!!!

  16. #15

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    Quote Originally Posted by alexbillbridgnorth View Post
    Sorry mate what is that and how you're talking to a newbie with group policy? Thankyou though!!!
    Basically the policies only filter to machines every hour or so by default.

    if you run a command prompt and type gpupdate /force on the client it'll force it to update it's policies now.

    Steve

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. How do you like to keep cool during these hot spells?
    By ninjabeaver in forum General Chat
    Replies: 19
    Last Post: 28th July 2013, 10:03 PM
  2. kids needing full access for IT lessons
    By e_g_r in forum General Chat
    Replies: 34
    Last Post: 8th December 2008, 01:53 PM
  3. Do I need any of these protocols enabled on my printers?
    By sidewinder in forum Wireless Networks
    Replies: 4
    Last Post: 17th October 2007, 11:05 AM
  4. Stop kids locking each others accounts
    By ken_kaniff in forum How do you do....it?
    Replies: 24
    Last Post: 18th May 2006, 02:21 PM
  5. Replies: 61
    Last Post: 14th November 2005, 08:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •