+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 40
Network and Classroom Management Thread, AB Tutor easy to defeat ... just uninstall in Technical; I am just trying out the trial version of AB Tutor after trialling Lanschool. Maybe I am doing something wrong ...
  1. #1

    Join Date
    Nov 2007
    Posts
    13
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    AB Tutor easy to defeat ... just uninstall

    I am just trying out the trial version of AB Tutor after trialling Lanschool.

    Maybe I am doing something wrong but what stops students simply going to the control panel and uninstalling it? Lanschool was protected and needed the install program before uninstalling.

    Is this too obvious or am I doing something wrong? Shouldn't there be a password at least?

  2. #2
    meastaugh1's Avatar
    Join Date
    Jul 2006
    Location
    London/Hertfordshire
    Posts
    893
    Thank Post
    70
    Thanked 85 Times in 70 Posts
    Rep Power
    33

    Re: AB Tutor easy to defeat ... just uninstall

    I suppose the root issue is: Is there a good reason students have been given rights to uninstall software?

    That aside, I guess you could transform the MSI, so that the app's entry is hidden in Add/Remove programs. Although, if the students have local administrator rights, you'd need to try and prevent them from stopping the AB Tutor Control service, probably through group policy system services permissions.

  3. #3

    Join Date
    Nov 2007
    Posts
    13
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: AB Tutor easy to defeat ... just uninstall

    Hi,

    Thanks for the quick reply. The students can log onto the local workstation as teacher/teacher and simply uninstall from that group privilege.

    It is very frustrating for me as ICT coordinator to try and help teachers cope with students who are hell bent on getting around the system security (what little there is). The network manager believes in an 'open policy' and self regulation ...but he is not in the classroom is he

    I was getting very excited with AB Tutor because it seemed to do everything I wanted but this major major oversight in design leaves me speechless. AB Tutor should at least need a password or the original install program like Lanschool does to uninstall it. We are looking at getting 10 licenses so Lanschool is expensive.

  4. #4

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,530
    Thank Post
    527
    Thanked 2,648 Times in 2,049 Posts
    Blog Entries
    24
    Rep Power
    925

    Re: AB Tutor easy to defeat ... just uninstall

    Hi maxymaxy - I would ask the network manager how his 'open policy' deals with the data protection act? I would say that any reading of the law indicates that students should never be able to log in as a teacher as they would then have access to confidential information. Why do the kids know the username and password combo for the teacher? Is there only one 'teacher' account?

    To put it bluntly, you (as in the school) don't have any security and as such are not complying with the data protection act or the child protection act.

    Is your school a primary by any chance?

  5. #5
    meastaugh1's Avatar
    Join Date
    Jul 2006
    Location
    London/Hertfordshire
    Posts
    893
    Thank Post
    70
    Thanked 85 Times in 70 Posts
    Rep Power
    33

    Re: AB Tutor easy to defeat ... just uninstall

    It's not reasonable to expect ABTC to compensate for the lack of desktop security that's been implemented.

    We use it throughout the school here with no security problems, except for teacher password breaches, which are dealt with swiftly.

    From your second post, it doesn't even sound like a technical issue. As localzuk says, a) why do students know the teacher's credentials, and b) why is the username the same as the password?

  6. #6

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,530
    Thank Post
    527
    Thanked 2,648 Times in 2,049 Posts
    Blog Entries
    24
    Rep Power
    925

    Re: AB Tutor easy to defeat ... just uninstall

    Quote Originally Posted by meastaugh1
    I'm not reasonable to expect ABTC to compensate for the lack of desktop security that's been implemented.

    We use it throughout the school here with no security problems, except for teacher password breaches, which are dealt with swiftly.

    From your second post, it doesn't even sound like a technical issue. As localzuk says, a) why do students know the teacher's credentials, and b) why is the username the same as the password?
    Exactly, we use it across school also and have no problems with security on it, but that is because we use it in an environment which runs on 'deny first, then allow' as the security policy.

  7. #7
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109

    Re: AB Tutor easy to defeat ... just uninstall

    I can only echo what others have said. You need to look at your basic setup else you could be saying the same about any program.
    We use AB tutor and are happy enough with it considering the price.

  8. #8
    pedster666's Avatar
    Join Date
    Oct 2007
    Location
    northumberland
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: AB Tutor easy to defeat ... just uninstall

    hi we use ab tutor in our school, and it work very well along side our new Bloxx hard/software, the only problem we have is kids unplug the network cables to stop connection lol

  9. #9

    Join Date
    Nov 2007
    Posts
    13
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: AB Tutor easy to defeat ... just uninstall

    I agree with all of you. Just to clarify though, the students log in to the workstation locally which means that they have the privileges to uninstall programs but it doesn't allow them to map the network drives hence privacy is not an issue. The novell network means that there are two login screens first to login to the network and the second to login to the workstation. Some problem with one of the servers means that students are able to ONLY login locally which means they can still play LAN games but not have any access to their home drives or network drives.

    Having calmed down a bit and thinking through some possible solutions, it may be that when ABT is installed the first time I can set up a some permanent policies in ABT and deploy them to the clients which deny students (who log in locally) access to run/cmd and the control panel. I can also do a registry hack to hide the icon in the add/remove programs. This is not ideal, I know, but is it feasible with ABT?

    The network manager is leaving at the end of this year so I hope the new person will take security a bit more seriously.

  10. #10

    Join Date
    Nov 2007
    Posts
    13
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: AB Tutor easy to defeat ... just uninstall

    I have just tried the registry editing policy function in ABT and it works well :P From the control workstation I was able to easily remove access to add/remove programs.

    I will go ahead with my pilot plan, create a policy pack to tighten up security (just don't tell the network manager) and .... hope the new guy is more sympathetic to the teacher's plight 8O

  11. Thanks to maxymaxy from:

    Westfield_Techie (17th April 2013)

  12. #11
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,501
    Thank Post
    163
    Thanked 31 Times in 30 Posts
    Rep Power
    29

    Re: AB Tutor easy to defeat ... just uninstall

    Ouch... some serious concerns with the kids able to log in as admin...

    They could install anything! How about a keylogger? Viruses?

    I'd scrap the teacher/teacher account immediately. Uninstalling AB Tutor is the last thing to worry about!

  13. #12
    meastaugh1's Avatar
    Join Date
    Jul 2006
    Location
    London/Hertfordshire
    Posts
    893
    Thank Post
    70
    Thanked 85 Times in 70 Posts
    Rep Power
    33

    Re: AB Tutor easy to defeat ... just uninstall

    Quote Originally Posted by gwendes
    They could install anything! How about a keylogger? Viruses?
    I was thinking the same.

    Assuming that your users need to logon locally, why do they need to logon lcoally with such unrestricted accounts?

  14. #13
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: AB Tutor easy to defeat ... just uninstall

    Quote Originally Posted by gwendes
    Ouch... some serious concerns with the kids able to log in as admin...

    They could install anything! How about a keylogger? Viruses?

    I'd scrap the teacher/teacher account immediately. Uninstalling AB Tutor is the last thing to worry about!
    Absolutely - a ridiculous setup - the NW Manager needs sacking!

  15. #14

    Join Date
    Jun 2007
    Location
    Rainhill High School
    Posts
    38
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: AB Tutor easy to defeat ... just uninstall

    maxy i have only one word leave your job and get a new one

  16. #15

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,890 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614

    Re: AB Tutor easy to defeat ... just uninstall

    Quote Originally Posted by maxymaxy
    I have just tried the registry editing policy function in ABT and it works well :P From the control workstation I was able to easily remove access to add/remove programs.

    I will go ahead with my pilot plan, create a policy pack to tighten up security (just don't tell the network manager) and .... hope the new guy is more sympathetic to the teacher's plight 8O
    Also let the folks at AB know what you have done as a workaround. They might be interested in changing things in their documentation to help others with similar problems.



SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Ranger package builder to uninstall
    By starscream in forum Network and Classroom Management
    Replies: 11
    Last Post: 3rd July 2007, 09:42 AM
  2. uninstall frontpage using GPO
    By manick in forum Network and Classroom Management
    Replies: 6
    Last Post: 5th April 2007, 02:38 PM
  3. Uninstall program from all workstations
    By netadmin in forum Windows
    Replies: 2
    Last Post: 4th January 2007, 12:07 AM
  4. User paid to uninstall Windows XP
    By tickmike in forum General Chat
    Replies: 8
    Last Post: 17th November 2006, 06:29 PM
  5. Day of Defeat Source
    By ChrisH in forum Gaming
    Replies: 10
    Last Post: 28th September 2005, 04:34 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •