GPOs being Aborted by Students

[mseaney]

Students have found away to abort some of the GPOs we have. At the point during login when the 'Apply Personal Settings' first appears they pull the network cable. This prevents some of the GPO options being applied. Like proxy settings for the internet etc.

The only way I have prevented this from causing a problem is by added those GPO settings into the Mandatory profile we have. This is a little messy and not all thing work correctly.

Has anyone got any ideas.

Michael.

[fiza]

Try setting "Wait for Network" in Group Policy. This way it wont log them on until all GPs apply.

Computer Configuration\Administrative Templates\System\Logon\

[box_l]

check the post by smadison in this thread.
vbs logon with ie

box

[Pete10141748]

Has anyone got any ideas.

Better class discipline from the teacher?
Enforcement of the rules that you don't unplug or alter the physical state of the equipment?
Suspension of the user account of anyone found doing it?

These types of things always fall to us to sort out in a "technical fashion" when really it's just a result of a lazy teacher not paying attention to their class or not telling pupils off for mucking about.

Failing that, superglue the cable into the port. Then when they yank it out and break it, you can charge them for a new one

[tosh74]

If you are using Madatory profiles then enable this option.
Computer Config\Admin Templates\System\User Profiles\Log Users off when roaming profile fails


So if they do pull the plug and their profile is not loaded they will get logged off right away (don't let the roaming profile name put you off). As always - test this out beforehand.

[dhoward_westexetc]

A 'Lock Screen when Network cable unplugged' option on a classroom management system like Impero would confuse them, they will get a lock screen which will frustrate them. They'll soon give up when they cannot access their home directory either when they do plug the network cable back in!

The best thing though is on Dell Latitude Laptops, I found out the other day you can disable the wireless switch or hot key on D520 or newer. So the wireless is always on and they cannot turn it off!

The desktop is less foolproof, though made considerably easier with the cable clamps on the RM Ones clamping the network cable in place on the back plate.