Restricting RM Management Console

[Nadnerb]

Does anyone know if there is a way of restricting access to certain parts of RM management console? I want to stop teachers being able to ban/unban user accounts and internet access.

If there's no way of doing that, is there a way of removing RM Management Console from teachers?

[ninjabeaver]

A request from an irate student??? I'm always sus on first posts like this,

[Nadnerb]

LOL! No, a post from a Irate Assistant Network Manager. I am constantly finding that teachers are going against our school IT policy and just letting kids back on the network.
Students cannot see the RM management console anyway.

[ninjabeaver]

My apologies then.

[Joanne]

yeah on the users properties where there is user type, there is a management tab. Change this to 'none' and they will have no access.

[enjay]

There are different levels of management rights to the RMMC, set on the user properties. Not sure what they do, though, as we've not given anyone outside of IT Support access to the RMMC.

[Nadnerb]

Thanks for your help I only really want to take RMMC away from teachers if there's definately no other way of removing teacher ability to ban/unban pupils accounts and internet access.

[bossman]

Hi all
under management tab if you give the user "delegate" rights they will have a controlled use of the RMMC this allows the teacher to set printer credit's, ban user accounts look at their work area, give them printer credits etc etc. if you don't give them delegate rights then they can't do this ok

[webman]

For reference:

Delegate

Enables users (for example teachers) to use the RM Management Console to carry out day-to-day management tasks.

Delegate users have permission to carry out the following user management tasks:

• Reset student passwords.
• Enable and disable student accounts.
• Enable and disable student Internet access.
• Set student printer credits.
• Create Learning Resources and manage Learning Resources that they have created.

Authorised

Authorised users (for example computer technicians) are able to do all the tasks available to Delegate users and in addition they have permission to use the RM Management Console to perform some advanced management tasks.

In addition to the Delegate tasks, Authorised users have permission to carry out the following user management tasks:

• Set whether students can change their own passwords.
• Set student printer credits auto allocation strategies.

In addition to the Delegate tasks, Authorised users have permission to carry out the following resource management tasks:

• Associate groups with Program Sets.
• Add program shortcuts to, and remove program shortcuts from Program Sets.
• Manage group membership.

Network

Network users (for example senior computer technicians) have full access to all of the options in the RM Management Console, except for creating and managing new Network or Domain Admins users.

Domain Admins

Domain Admins is a built-in group that gives users full access to all of the options in the RM Management Console as well as full control of the network.

Only system administrators should be made members of Domain Admins.

[Joanne]

I'm a network user (but am not a senior tech.. )

[Nadnerb]

So I guess it's a no to removing their ability of enabling/disabling internet access etc, and letting them keep RMMC. Ahh well. Thanks everyone.

[GrumbleDook]

Put it in as a request ... you never know ... stranger things have happened.

[webman]

I think finer-grained access to management functions are featured in CC4.

[NetworkKilla]

well there is a way to do this but it would take a week or 2 lol