How would you solve this problem....?
I work for a small college, and have been tasked with the problem of how to tackle a growing problem we have with exams software, and more specifically the AD account we use to run them. Here is the current scenario:
We run a number of courses, that between them use ~6 different pieces of exam software, some more complex than others, some require internet connectivity, others check for updates every time they are launched and some older apps. need certain administrative privileges or access to the c:\ drive to run. Because of the varied nature and design of these apps. they cannot be ran under a typical "student" account. Instead an exams account is set up which has the correct privileges to run all of the exam apps.
In theory, before any exam the exams staff should log each user on using the exams account. What we are finding however is that the exams password is being given out to the students, who are then open to abuse this right by logging in as the exams account at a later date (thus avoiding accountability for misuse).
We have tried simply changing the exams password on a regular basis, however this results in frequent AD lock outs, which is a pain considering some of these exams take place after working hours. We have considered implementing a "log on hours" policy for the account, but we donít believe we can rely on our exams department to be organised enough to make this workable!
I can think of a number of ideas that *might* resolve the problems, but I suspect that other colleges\schools will have similar setups and could enlighten me on how they work!
Thanks in advance