Disabling internet in one room.

[FN-GM]

i haven’t read all the posts so if this has been suggested sorry. You can use netsupport school to block internet access.

[f21970]

Don't know if it's been mentioned before but Browsecontrol by Codework is cheap, effective, and can remotely turn off and on your PC's too - handy. There is a small client install + a server install. When I say cheap, I paid £400 for 300 clients and pay £95 a year maintenance on the software. Hope that helps.

[James2k]

Just a little bit of information for this thread...

If you are using SOPHOS Enterprise Console it has a built in Application Control which can block programs... I have been in contact with them and they are looking into adding IE to the block list...

It has Firefox, Firefox portable, Netscape, Opera and Torpark already listed so you could make firefox your default browser and then disable it in Sophos?


James

[Matstones]

There is a neat and elegant solution to this - depending what hardware you use. I apologise for touting Axel products - but I have had a number of positive responses to other comments I have made - so here's one more....

Axel provide free of charge a small program that can be installed on a Citrix/terminal server called Axmenu.


In the terminal's configuration it is configured to auto-run this program on connection. (The same program can also be auto-configured to run in the user's profile - so can be run per device or per user).

This program Axmenu gives a "pseudo" desktop that the administrator controls on a per user or per group basis what applications individuals users have access to.

The users can only run these applications which can be displayed as a menu or in the normal start button. All other features are removed from this desktop.

The manager can with a few clicks add or remove a browser (or any other application) thus removing it for all users in a given group.

Full documentation for this free software is on the link below - it is free but only works for Axel terminals:

http://www.axel.com/uk2/prod_axmenu.html?mv2_pos=1

[bonald]

I am using this method in one classroom.
I gave the teacher the right to modify the classroom OU in question.

I have created a policies that enforce a dummy proxy server in Internet Explorer. When the teacher activate the policies in question, after 2-3minutes depending on how long your policies are set to refresh, students can't browse the internet anymore because they are redirected to a proxy server that doesn't exist.

I've created a MMC Console with only this OU and the teacher only have to click Enable/Disable.

The other thing i've also done is I created a OU named NO-INTERNET. The teacher can drag and drop ONE or more specific computer to this OU if he only wants to block a couple of students and not the entire room.

Also, if the policy is not refreshing for some reason, i've installed SpecOPS Gpupdate on the teacher computer so he can do a gpupdate /force from the MMC.

!!

[James2k]

Just to let everyone know that Sophos Enterprise Console can now block Internet explorer 6 and 7 it is an instant thing and can't be bypassed.

[mikeymoos]

New to this site... Hello all!

We use SMART's 'synchroneyes' software in several schools we manage, both primary and secondary. Its awesome for teachers to manage what pupils can do from blocking internet to transferring a file/image to all PC's in a classroom.

The kids find ways around the internet block occasionally but we think we have secured the PC's enough now so all backdoors have been nailed shut!

Hope this helps

[MYK-IT]

Try ABTutor Control

Can install it on all your computers within the school, and you only purchase licences for the amount of Control (Teacher's) Computers required (~£130 each)

Key Features

Broadcast
Broadcast tutor screen to students
Show thumbnail of tutor screen to students
Show static, locked, screen to students
Show a student's screen to others
Annotate live demo

Monitor
Watch student screens (cycle and thumbnail screen options)
Monitor and log student applications
Monitor and log student web browsing
Take time and name-stamped snapshots of student screens
Simultaneous watch by multiple tutors

Remote Control
Take over remote mouse and keyboard
Share control with student
Launch & close down applications remotely
Lock remote machines
Classroom Management
Power up remote machines

Remote logon
Remote logoff and shutdown
Auto-connect to computers
Auto-reconnect when connection lost
Create defined classroom groups
Either connect to all clients or only to pre-set groups

Internet Control
Block ports to prevent any Internet activity
Limit web browsing to specified sites
Black-list specific sites
Filtering by keyword/wildcard

Application Control
Limit applications that can be launched
Specify applications that cannot be run
Close down inappropriate applications

Control over Student Windows Environment
Powerful ability for administrators to control key student registry settings

File Management and Distribution
Distribute files to student machines
Collect files from students
Remote file management

Communication
One-to-one and one-to-many text chat
One-to-one and one-to-many audio chat
Broadcast text messages
Optional Privacy Settings
Informs student they are being monitored
Allows student to block a watch

Security
Admin or tutor-level access with choice of functionality
128-bit connection password encryption

Maintenance
Automated remote client updates
Auto software upgrade
Terminal Services Support
Terminal Services Support (incl. Citrix) for clients

my 2 cents worth...

[SpuffMonkey]

AB Tutor seconded here - its tops - works over thin client too

[dparry]

Browse Control from Codeworks is a cracker for stopping internet traffic per machine or per "room"
Also includes black/white lists for exceptions to the on/off rule
Same for applications [I can turn off mspaint, at last]
Also blocks cd drives and usb ports remotely too.

has a server service and a as many teacher/tech consoles as needed.
will remote install the client too.
After 4 years no-one's ever got around it.


Not free but v good

[Eappariello]

If anyone is using Lightspeeds content filter they can use the LAB facility.

Define your classroom and a administrator/s for it, then the teacher can goto to a administration page, Lock or Unlock the Internet, and define domains or URL's for Allow or Block.

Easy to use, just not well known about

[tom_newton]

If anyone is using Lightspeeds content filter they can use the LAB facility.

Define your classroom and a administrator/s for it, then the teacher can goto to a administration page, Lock or Unlock the Internet, and define domains or URL's for Allow or Block.

Easy to use, just not well known about

Sure you'll change that - might be best to let people know your association with LightSpeed tho - bit of helpful advice from the local competition

Back OT... i'd love to hear from anyone who's used our room blocking, as it is pretty new to us, and I've had nae feedback yet.

[microbrew22]

Synchroneyes used to be the name of this monitoring software, now called smart sync.

You can monitor students, send files, tests, quizes, and even lock out the internet or the entire PC screen with a message "eyes to the front please"

I run this in a dozen or so labs with great results.

[Techie101]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

The easiest way that I have ever seen it done is using NetSupport School. The NetSupport packages are amazing and well worth the money. The teacher's interface allows clients to be selected and then the Internet connection can be turned on/off at will as well as restricting the sites that can be viewed.

The best value option with NetSupport is to get the Manager package which has the School package bundled with it and will give you lots of funky management controls.

Check it out at NetSupport Manager v10: The latest evolution in remote PC Support and Desktop Management

For a free method, we would need to know more about the site setup, such as the type of proxy/firewall, etc.

Lol, can't even open the site, LEA have blocked it!!

[Flakes]

Could someone here clarify if this sticky has already been answered?

this is how i currently block websites on a room basis...

assign the classroom computers a static IP address, then using ISA Server 2003 i use a rule that denies all traffic from that IP Range, now this is the fun part i have an exceptions list in the Deny all that acts as a whitelist of sites, these sites are confirmed through teachers then placed as an exception for that room.

Our current use is to cut the amount of bad behaviour we get over lunch and break, so the rule is timed to enable and disable using a script from Jason Fossen this script is run at specific times using the built in windows scheduler NOT the ISA scheduler since the ISA server is limited by hours.

heres the script

'*************************************************************************************
' Script Name: ISA_Enable-Disable_Rule.vbs
'     Version: 1.0
'      Author: Jason Fossen 
'Last Updated: 16.Oct.2005
'     Purpose: Enables or disables a rule in the Firewall Policy of an ISA Server array,
'              Standard or Enterprise edition.  But cannot manage System Policy rules or
'              Enterprise Policy rules, array or single-server rules only.
'       Legal: Public Domain.  Modify and redistribute freely.  No rights reserved.
'              SCRIPT PROVIDED "AS IS" WITHOUT WARRANTIES OR GUARANTEES OF ANY KIND.
'              USE AT YOUR OWN RISK.  Test on non-production servers first.
'*************************************************************************************


If WScript.Arguments.Count <> 2 Then Call ShowHelpAndQuit()
sRuleName = WScript.Arguments.Item(0)
sAction   = WScript.Arguments.Item(1)
If (LCase(sRuleName) = "/?") Or (LCase(sRuleName) = "/h") Or (LCase(sRuleName) = "-h") Then Call ShowHelpAndQuit()


If EnableOrDisableRule(sRuleName, sAction) Then
    WScript.Echo vbCrLf & "Success! " & UCase(sRuleName) & " = " & UCase(sAction) & "D"
Else
    WScript.Echo vbCrLf & "ERROR: " & Err.Number & " " & Err.Description
End If






'*************************************************************************************
' Functions() & Procedures()
'*************************************************************************************


'
' sRuleName is the name of the rule, in doublequotes if it contains spaces.
' sAction is either "enable" or "disable" (or just "e" and "d").
' 
' Function returns true if either it is successful or if sRuleName Is
' already set to sAction specified.
'
Function EnableOrDisableRule(sRuleName, sAction)
    On Error Resume Next
    If Not IsObject(oFPC) Then Set oFPC = CreateObject("FPC.Root")
    Set oPolicyRule = oFPC.GetContainingArray.ArrayPolicy.PolicyRules.Item(sRuleName)
    'If Err.Number = -2147024894 Then WScript.Echo "Cannot find the rule named " & sRuleName
    If Err.Number <> 0 Then EnableOrDisableRule = False : Exit Function
    If Left(LCase(sAction),1) = "e" Then bState = True Else bState = False
    If oPolicyRule.Enabled = bState Then EnableOrDisableRule = True : Exit Function
    oPolicyRule.Enabled = bState
    oPolicyRule.Save
    If Err.Number = 0 Then EnableOrDisableRule = True Else EnableOrDisableRule = False
    'If Err.Number <> 0 Then WScript.Echo "Problem changing rule state."
    On Error Goto 0
End Function



Sub ShowHelpAndQuit()
    Dim sUsage : sUsage = vbCrLf
    sUsage = sUsage & vbCrLf
    sUsage = sUsage & "ISA_Enable-Disable_Rule.vbs rulename action" & vbCrLf
    sUsage = sUsage & vbCrLf
    sUsage = sUsage & "Purpose: Enables or disables a rule, not including System Policy rules." & vbCrLf
    sUsage = sUsage & vbCrLf
    sUsage = sUsage & "   Args: rulename = Name of the rule, placed in doublequotes if necessary." & vbCrLf
    sUsage = sUsage & "         action   = The word ""Enable"" or ""Disable"" (not case sensitive)." & vbCrLf
    sUsage = sUsage & vbCrLf
    sUsage = sUsage & "  Legal: SCRIPT PROVIDED ""AS IS"" WITHOUT WARRANTIES OR GUARANTEES OF ANY" & vbCrLf
    sUsage = sUsage & "         KIND. USE AT YOUR OWN RISK. Public domain, no rights reserved." & vbCrLf
    sUsage = sUsage & "         ( website )" & vbCrLf
    sUsage = sUsage & vbCrLf
    WScript.Echo sUsage
    WScript.Quit
End Sub


'EOF*******************************************************************************

site wont let me post the URL so you will just have to look up Jason Fossen in google.