+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
New Project Ideas Thread, Student Account Management in EduGeek Projects; Hi gang, Me and my Bro have been working on a project for my school and I would like to ...
  1. #1
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72

    Student Account Management

    Hi gang, Me and my Bro have been working on a project for my school and I would like to show you all some screen shots.

    Basically the way I have the system setup at my school is we store all the student username and passwords on a spread sheet. One of the most demanding jobs if dishing out username and passwords to students who have forgotten after a summer break etc.

    So what I intend to do is allow staff access to the student username passwords through a secure webpage, which means this lowers the number of kids at my door asking for account information, stops students form going for a wonder in the corridor, and if you are like me and dont know half the kids names by face then this will improve student account security.

    to access the system staff have to enter there network username/passwords followed by a secret word of the week or day which only staff will know.

    from here they then select the students year of intake and then select the student name. this then does a search of the database and presents the username password to the teacher.

    The system is set to time out (which is set in the admin control pannel) no matter if the teacher is using it or not the system will time out and prompt for a login on next request.

    The system will have security logs of who logged in stamped by a date and time. this is just a small part of whats been done.

    plans after the first release is...

    creation of student accounts
    access to student account work space
    and any other suggestions from edugeek members.

    Like I say this is just some brief screen shots as we are still developing it.

    Cheers

    Kev
    Attached Thumbnails Attached Thumbnails Student Account Management-sam2.png   Student Account Management-sam3.png   Student Account Management-sam1.png   Student Account Management-sam4.png   Student Account Management-sam5.png  

    Student Account Management-sam6.png  

  2. #2
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72
    ps this will be available hopefully to edugeek, but I would like some people to help with beta testing

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,058
    Thank Post
    888
    Thanked 1,731 Times in 1,494 Posts
    Blog Entries
    12
    Rep Power
    454
    We just delegated rights so certain staff can reset and unlock locked out accounts then made a custom MMC

  4. #4
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72
    Quote Originally Posted by FN-GM View Post
    We just delegated rights so certain staff can reset and unlock locked out accounts then made a custom MMC
    We have a system in place to enable and disable accounts, every school is diffrent

  5. #5
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72
    come to think of it we will be looking at enabling and disabling accouts too

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,058
    Thank Post
    888
    Thanked 1,731 Times in 1,494 Posts
    Blog Entries
    12
    Rep Power
    454
    Sorry that you say reset passwords and unlock locked out accounts

  7. #7

    Sylv3r's Avatar
    Join Date
    Jul 2005
    Location
    Co. Durham
    Posts
    3,215
    Thank Post
    372
    Thanked 380 Times in 338 Posts
    Rep Power
    148
    I'm not sure how comfortable with unencrypted access to student passwords - I think it would make more sense if staff can change passwords only and not be able to view existing passwords.

    I take it staff can not see other staff passwords?

    I may have got the above wrong, but the project looks good from the screenshots.

  8. #8
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72
    Quote Originally Posted by Sylv3r View Post
    I'm not sure how comfortable with unencrypted access to student passwords - I think it would make more sense if staff can change passwords only and not be able to view existing passwords.

    I take it staff can not see other staff passwords?

    I may have got the above wrong, but the project looks good from the screenshots.
    Hi, no Teachers can not view one anothers username passwords The word of the day/week can be changed from the admin dashboard, which is an additional password to the teachers username password. I think this is more secure than allowing a teacher acces to resetting a students username and password. Pluss this has a time out on it.

    We will be looking at encryption soon. for now we are just starting small and going from there

  9. #9
    budgester's Avatar
    Join Date
    Jan 2006
    Location
    Enfield, Middlesex
    Posts
    486
    Thank Post
    4
    Thanked 37 Times in 30 Posts
    Rep Power
    24
    So are you doing lookup against LDAP or Active Directory ?

    I always think the the best way is to reset the students password. Rather than being able to view the existing one.

    I think reset the password to something generic and set the "change password on next login" is best strategy. This then allows the students to know that there account is secure.

    I really don't like the idea of sharing passwords, most people use the same password for multiple accounts i.e hotmail, facebook etc. Do we really want teachers knowing these ? It could cause all sorts of issues.

  10. #10
    PEO
    PEO is offline
    PEO's Avatar
    Join Date
    Oct 2007
    Posts
    2,095
    Thank Post
    457
    Thanked 152 Times in 96 Posts
    Rep Power
    72
    Quote Originally Posted by budgester View Post
    So are you doing lookup against LDAP or Active Directory ?

    I always think the the best way is to reset the students password. Rather than being able to view the existing one.

    I think reset the password to something generic and set the "change password on next login" is best strategy. This then allows the students to know that there account is secure.

    I really don't like the idea of sharing passwords, most people use the same password for multiple accounts i.e hotmail, facebook etc. Do we really want teachers knowing these ? It could cause all sorts of issues.
    Hi

    our username password policy is very strict to the point where they tend to forget the login info I don't like the idea of giving the teacher rights to setting a password.

    Eventually we will have the sytem setup with ldap which will work best for most schools and allow the systems administrator the ability to allow the teacher to enable doable and change passwords. Right now we are building a secure cms. Like I say first draft and ideas are most welcome

  11. #11

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,161
    Thank Post
    403
    Thanked 623 Times in 569 Posts
    Rep Power
    181
    I don't like the idea of giving the teacher rights to setting a password.
    Just out of interest, why?

  12. #12

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,994
    Thank Post
    352
    Thanked 1,301 Times in 891 Posts
    Blog Entries
    4
    Rep Power
    1131
    Quote Originally Posted by budgester View Post
    I always think the the best way is to reset the students password. Rather than being able to view the existing one.
    I agree.

    I always tell staff [and students] that we do not know what their current passwords are set at and that we cannot find out what they are. I would not like staff and students to pressure our Network Support Department to deploy a solution which would show what current passwords are set at. The potential for confidentiality breach and all that follows does not bear thinking about. I would not supply a solution on a network that I am responsible for which would allow for the decode of any users' current password.

    This is just how I feel. If others disagree I am sorry.

  13. #13

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,058
    Thank Post
    888
    Thanked 1,731 Times in 1,494 Posts
    Blog Entries
    12
    Rep Power
    454
    I agree to, surely resetting a password is allot more secure than viewing it.

  14. #14
    rosswilson's Avatar
    Join Date
    Feb 2008
    Location
    Cheshire
    Posts
    47
    Thank Post
    15
    Thanked 10 Times in 10 Posts
    Rep Power
    15

    How Are Passwords Found Out?

    Just out of interest ... how does your system know the user's password? I was under the impression that AD passwords used one way encryption.

    Does your system therefore just store a separate list of user's passwords (much in the same way as the spreadsheet method)? If it does, when a user changes their password (for example at the "change password on next login" prompt, how does your system stay in sync?

    Kind Regards,

    Ross

  15. #15
    Nick_Parker's Avatar
    Join Date
    Jan 2008
    Location
    Dainfern, South Africa
    Posts
    440
    Thank Post
    95
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Sorry, a bit off topics, what are you using to write your web interface? ASP.Net?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Zimbra AD Account Email Account Link
    By kmount in forum *nix
    Replies: 10
    Last Post: 4th June 2011, 03:14 PM
  2. Account Management Spreadsheet
    By cookie_monster in forum Windows Server 2008
    Replies: 0
    Last Post: 13th May 2009, 02:05 PM
  3. Simplified account management front end
    By m2d2 in forum Network and Classroom Management
    Replies: 5
    Last Post: 1st February 2008, 09:41 AM
  4. Administrator Account
    By Gatt in forum Windows Vista
    Replies: 0
    Last Post: 2nd April 2006, 09:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •