Restricting Internet Access..? How

[Grommit]

On our present setup when te students log on they have internet access..

Now a teacher is telling me it's all wrong at another school the student has to LOGON to something else to get internet access...

Any Ideas how to do this ?

We do have an ISA Server

[Geoff]

The proxy system used at the teachers last school didn't support NTLM transparent authentication (I'd imagine it was a squid based install, where whoever set it up didn't understand samba). When someone wanted to get on the net, they'd be prompted to authenticate (using basic auth). Obviously, this is an inferior implementation to what you already have.

[tom_newton]

..unless of course what you already have isn't authenticating at all

[Geoff]

OP said he had an ISA server.

[cjohnsonuk]

Our squid is set to authenticate against just one container in the AD. To block a student we move them one container down into "blocked". Currently they just use another students login to bypass this. With NTLM they won't get the login box and it should just use their windows login details which shoudl slow them down. Then we just need to prevent multiple AD logins ...

[Geoff]

Then we just need to prevent multiple AD logins

Utility Spotlight: Limit Login Attempts With LimitLogin

[FN-GM]

Now a teacher is telling me it's all wrong at another school the student has to LOGON to something else to get internet access...

Why is she telling you how to do your job?

[mortstar]

Why is she telling you how to do your job?

Could be male...

Though I am surprised that the OP is taking notice. Surely you set how the system works, unless told otherwise by SLG.

[Grommit]

Why is she telling you how to do your job?

Well she's shouting that the entire architecture of the school network is wrong all because she cannot control the students internet access and that her friend at another school can control internet access as there is a "double" logon to get to the internet and that the internet logon is simple to control ...

We have Ranger Remote that the students always seem to be able to bypass (in her room only)

[FN-GM]

We have Ranger Remote that the students always seem to be able to bypass (in her room only)

Do you have IE7 with tabs?

[Grommit]

Do you have IE7 with tabs?

Yes we do

[Grommit]

Could be male...

Though I am surprised that the OP is taking notice. Surely you set how the system works, unless told otherwise by SLG.

Yes you are right... the network works.. over 1400 users and 650 Workstations with 56 IWB around the site..

Yet were does she get off telling me that it's set up wrong becuse when the kids logon the internet accesss is automatically there...

What I want to know because she is getting louder and louder and the SLG are starting to hear her and questions will be asked.. ... is there a way that there is no automatic internet accesss for students ?

[Geoff]

You realise of course if you do change it, you'll not have one teacher moaning, you'll have all but one instead?

[mortstar]

How about setting LanView up only in her room (or all systems - like we have). Then she gets a "traffic lights" applet that runs on her workstation - or a workstation where she is logged in - and can choose when to have internet accessible or not. (Though if you are using IE, must be version 7).

LanView is the best price too - FREE

[gaz350]

Well she's shouting that the entire architecture of the school network is wrong all because she cannot control the students internet access and that her friend at another school can control internet access as there is a "double" logon to get to the internet and that the internet logon is simple to control ...

We have Ranger Remote that the students always seem to be able to bypass (in her room only)

sounds all too familar had the same run in with a teacher here not long ago. If you add a barrier the kids would rather spend time trying to get around it than doing some work... Always amazes me though that the good teachers have no problems with kids abusing computer access in their classes.

Ofc I should have not mentioned this to the teacher in question